Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/27BD6D10A95411EE87254F67775412E6.roa
File: 27BD6D10A95411EE87254F67775412E6.roa (raw, json)
Hash identifier: jkmBZkL8NF8ZgLWPkdfErah4IE+NQeiPrryXLtNisyo=
Subject key identifier: BF:D7:B1:C3:1E:86:26:6E:3C:DC:00:CE:71:E1:A9:A2:5C:BB:02:67
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0EBB
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/27BD6D10A95411EE87254F67775412E6.roa
Signing time: Tue 02 Jan 2024 09:49:00 +0000
ROA not before: Tue 02 Jan 2024 09:48:57 +0000
ROA not after: Sat 03 Jan 2026 09:48:57 +0000
asID: 6315
IP address blocks: 102.129.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3771 (0xebb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 2 09:48:57 2024 GMT
Not After : Jan 3 09:48:57 2026 GMT
Subject: CN=6593dc0c-9a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:50:32:a4:a9:8c:b6:7d:3b:fc:c9:ec:4a:
ec:c3:ed:f1:5f:44:15:60:64:e8:b7:de:c9:55:31:
78:f5:26:bd:9f:ef:9b:0b:cf:fd:43:d8:11:36:f4:
af:91:35:a1:88:00:01:59:be:86:20:13:01:6d:f7:
65:36:80:1e:46:72:aa:74:2a:77:24:01:dc:aa:32:
57:22:32:6e:27:7a:b9:3e:1c:64:ec:67:9c:db:d4:
f2:98:af:ad:eb:04:95:22:63:65:2c:fd:9d:6c:6c:
ae:85:d7:b7:5a:0f:72:9c:fe:ef:ca:36:de:64:8e:
2a:58:f6:32:c1:0f:e2:a4:28:87:bf:f2:1e:bb:c2:
d8:35:62:f9:4d:40:41:f0:e4:69:88:80:2a:bb:1c:
0a:41:ba:a2:dc:30:41:cd:c4:2e:8f:dd:ea:80:69:
3a:18:9e:85:8b:a2:8f:d3:b6:49:9b:0d:7d:9a:73:
60:76:8c:64:b2:64:c0:e0:aa:e1:8c:7a:97:a5:17:
44:da:dd:84:a5:03:c4:c7:76:f9:6c:41:6a:13:0c:
b6:b6:68:aa:1c:9b:80:25:27:a2:35:b6:4a:56:31:
ab:99:46:9d:9f:bc:84:50:79:fa:14:49:e2:ba:38:
de:f9:3d:ae:82:24:94:b6:44:41:7b:2a:52:6d:27:
cd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D7:B1:C3:1E:86:26:6E:3C:DC:00:CE:71:E1:A9:A2:5C:BB:02:67
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/27BD6D10A95411EE87254F67775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.219.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:23:d3:2d:b0:38:ac:0b:dd:eb:c1:ef:99:65:c6:62:9a:a6:
aa:f5:7c:3c:db:dc:da:a8:69:fa:4b:22:23:ff:ba:3c:fa:12:
8d:ef:4d:4d:02:f6:fb:11:de:e6:26:8e:c5:e0:7e:7d:67:24:
a9:2e:cd:24:68:51:d9:8a:42:eb:7a:0a:1e:c1:a7:7e:fc:4a:
1e:d4:ca:82:0e:e4:8f:75:2a:f7:d2:13:e2:15:c5:fd:47:ed:
4b:ec:fd:aa:a6:c1:d4:bc:88:d4:77:da:f3:6e:ef:66:52:a6:
da:63:03:bf:44:6e:b5:25:47:e3:9e:5c:e7:20:da:fa:26:ea:
3a:2a:87:06:39:cf:87:4a:fe:5b:86:fa:5e:1a:65:86:08:61:
0c:92:41:77:df:7a:6a:80:42:a3:8f:a0:98:ea:1f:a7:75:54:
29:a6:26:6a:7d:9f:34:1b:e9:2c:02:9d:18:ff:81:60:2d:3a:
20:f4:59:9b:15:7f:7f:56:01:24:7e:9b:8d:4a:52:22:f7:1e:
01:68:73:ae:41:67:36:d9:2b:c6:a6:71:73:56:9d:37:7b:c3:
a5:05:fe:93:43:08:d1:16:99:4a:8d:b8:5e:ae:dc:1e:2c:d0:
ca:bf:08:42:51:27:3f:1f:93:34:f1:61:43:65:bd:e6:a0:c2:
cc:a5:98:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:53:11 2024 by rpki-client on console-ams.rpki-client.org