Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/227C34CEA64E11EF8C194C51762E951A.roa
File: 227C34CEA64E11EF8C194C51762E951A.roa (raw, json)
Hash identifier: PbB+f/7uy1d3jOukY+N8dQ5SaJLoo256Eb/Ns+QVECw=
Subject key identifier: 1D:91:18:AF:43:21:4E:EF:F4:C7:BA:B5:FA:C8:A0:68:18:18:A7:69
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 12C6
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/227C34CEA64E11EF8C194C51762E951A.roa
Signing time: Tue 19 Nov 2024 08:13:19 +0000
ROA not before: Tue 19 Nov 2024 08:13:15 +0000
ROA not after: Thu 19 Nov 2026 08:13:15 +0000
asID: 61317
IP address blocks: 102.129.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4806 (0x12c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Nov 19 08:13:15 2024 GMT
Not After : Nov 19 08:13:15 2026 GMT
Subject: CN=673c489f-c382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:4a:35:16:37:9d:f8:6f:9f:b2:a3:1c:d8:
18:e4:c9:aa:86:b6:6b:76:c0:c1:1a:2c:8d:e8:9b:
5f:48:bc:37:fa:cf:f3:bf:63:ca:af:ad:a1:1d:26:
4b:c4:48:44:43:f3:75:78:af:7d:1c:73:55:bf:61:
37:5a:46:a1:77:c8:05:59:79:5e:65:10:40:66:12:
a9:c9:ec:7d:01:10:6e:76:a0:52:c8:5b:0b:fb:06:
08:73:31:3e:19:88:43:14:74:92:08:7d:02:d5:51:
7b:ea:60:0b:1f:6a:41:32:ec:b0:c5:a5:fc:7b:b2:
29:03:d7:2b:51:10:ad:67:e0:16:f8:e8:2b:27:e6:
1e:f0:7a:31:ef:55:4f:ee:d2:27:85:f7:98:83:d4:
21:0d:97:3c:5a:72:f3:f9:f4:ac:ff:8c:2f:2e:55:
c5:cf:90:18:67:90:1d:ae:30:ef:92:09:81:83:38:
ee:8e:55:c9:8e:f7:08:75:6e:fc:52:61:4e:be:e3:
d4:d4:49:48:d7:fe:fa:cf:a8:f3:97:42:a3:89:6a:
aa:db:96:a0:30:31:78:13:58:8b:9a:92:1d:bb:2a:
d5:c4:d5:13:60:9c:b7:45:16:23:d6:44:37:2a:a7:
c3:81:ce:eb:0a:2c:89:56:fa:31:e7:48:39:21:d4:
39:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:91:18:AF:43:21:4E:EF:F4:C7:BA:B5:FA:C8:A0:68:18:18:A7:69
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/227C34CEA64E11EF8C194C51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.236.0/24
Signature Algorithm: sha256WithRSAEncryption
09:d2:19:10:1b:9b:99:40:02:0d:95:fc:ec:4a:da:65:81:13:
72:01:8b:54:1d:dc:a1:9a:50:1a:b0:ed:b3:54:01:34:8d:4d:
d4:56:13:7e:4e:ea:a4:7a:4f:f9:25:e8:25:5e:87:12:54:fb:
79:cb:91:cd:8e:f4:dc:22:a1:12:bd:7a:70:0b:b1:11:68:1b:
55:e7:9b:2f:27:8a:89:7d:8e:74:d6:8f:e8:16:ae:1c:1f:07:
9f:3f:f7:01:98:53:dc:a6:1e:89:97:40:bd:59:60:27:63:67:
6d:e6:8f:e7:22:7a:42:19:b6:36:a6:8c:ba:66:a6:93:04:bc:
a3:98:65:ac:1b:59:ce:5d:a2:bd:e1:26:ca:e9:42:d5:1f:61:
65:56:b2:a4:5b:c7:ab:51:36:37:34:6c:41:18:b6:31:99:d5:
2d:b0:02:11:0b:00:5a:75:ef:05:38:a3:21:a8:96:c3:80:8c:
65:68:a8:a5:63:23:e5:df:18:63:6d:83:f8:cf:3c:b5:64:e4:
86:17:90:2d:7d:78:63:15:08:59:a8:c0:78:85:b3:10:83:bf:
f3:1d:74:12:83:e2:f4:f8:e3:18:70:76:a4:0f:78:a8:ea:c4:
b8:39:35:35:f2:df:02:35:c4:50:a5:41:18:fa:85:9b:13:a2:
ca:6c:63:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:07:57 2025 by rpki-client