Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/48E4FC66B45211EEB8738C56775412E6.roa
File: 48E4FC66B45211EEB8738C56775412E6.roa (raw, json)
Hash identifier: RQxqU4Tpog9Z9RzGjTu0BJnB2cRmAL0jC5AjGlgDG9A=
Subject key identifier: 9E:73:DF:AB:94:E2:E2:A4:6B:64:E4:62:9D:0E:87:3B:9E:EE:39:3D
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0EF9
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/48E4FC66B45211EEB8738C56775412E6.roa
Signing time: Tue 16 Jan 2024 09:33:20 +0000
ROA not before: Tue 16 Jan 2024 09:33:16 +0000
ROA not after: Fri 16 Jan 2026 09:33:16 +0000
asID: 61112
IP address blocks: 102.129.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3833 (0xef9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 16 09:33:16 2024 GMT
Not After : Jan 16 09:33:16 2026 GMT
Subject: CN=65a64d60-ddbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:8a:6d:97:2a:17:40:47:07:0e:e3:b5:47:
6f:3e:c6:3b:60:ed:02:2b:c3:7c:5c:6c:9e:b4:44:
a2:df:fc:16:78:39:da:59:14:d3:57:f0:8a:cb:ae:
b7:3f:8b:57:04:9b:3e:92:d1:81:5b:1e:08:41:25:
91:9f:42:17:4a:39:4d:57:6d:4c:6b:eb:a6:67:57:
90:83:86:44:64:a9:ed:39:05:c4:be:95:82:f9:1f:
20:5f:ef:78:b4:1b:8f:4e:3e:e7:92:e1:56:94:1a:
90:9c:9a:86:9e:8a:93:77:f9:69:2c:18:05:fb:d0:
bc:01:df:0e:63:2a:9a:0a:3f:49:f5:0f:49:bd:97:
fa:aa:14:a5:7d:b8:67:bd:0d:ed:e8:21:23:c8:a5:
e7:aa:da:fa:72:bd:0c:41:f8:68:28:f6:4a:0e:90:
57:d9:bc:53:cd:2a:6e:a3:b8:27:e1:15:9e:a4:13:
f4:d3:01:84:41:b2:76:57:4b:ce:52:04:61:52:8c:
7d:92:b6:f0:07:96:38:12:7c:8b:58:54:5b:ab:9d:
20:95:58:62:96:59:f0:bb:fd:3b:29:c0:04:46:25:
ad:53:f2:66:35:43:23:1c:59:81:5d:39:ca:2b:6c:
b9:26:01:6a:1d:e8:a2:fe:49:c2:85:43:60:2f:fd:
e1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:73:DF:AB:94:E2:E2:A4:6B:64:E4:62:9D:0E:87:3B:9E:EE:39:3D
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/48E4FC66B45211EEB8738C56775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.195.0/24
Signature Algorithm: sha256WithRSAEncryption
48:51:6b:61:6c:77:62:e5:6e:5f:dc:88:bd:56:82:d9:fa:df:
54:5b:62:59:95:c9:71:c3:35:ed:d2:46:c4:5e:cb:de:e2:1f:
f8:4c:d6:bb:55:7c:8b:7a:41:dd:e9:26:c1:87:05:32:f3:c1:
c2:c2:7b:87:99:a0:95:d5:21:af:11:93:78:75:e8:2d:6f:ec:
43:6b:00:f1:70:f2:0c:39:06:6c:1f:39:ac:ef:d7:d6:1e:e0:
32:bb:09:27:e8:8d:e5:de:8e:eb:22:73:04:3f:4a:a2:b5:3e:
44:ac:35:57:14:3d:db:8d:dd:92:b7:4c:e1:d8:a5:a4:9e:6d:
e4:9c:7f:f0:22:d8:a4:1d:7f:1c:d8:fb:a0:dd:31:f5:ce:d6:
f4:c9:fe:e4:48:14:2a:78:f7:62:49:6d:87:8d:12:b1:5d:5d:
da:bd:6f:04:50:21:5c:35:62:ef:cd:ea:e1:0e:05:60:f3:73:
3e:f5:57:c1:bf:0f:8b:98:51:c4:c7:d5:4b:a1:11:2f:2e:e9:
3e:8c:8b:3f:c7:2e:e4:31:b8:64:c1:16:36:cc:48:f5:4d:87:
1b:91:89:46:81:f6:43:ab:8a:8b:9a:dc:15:15:96:dd:fd:f0:
59:85:96:14:2b:ee:c1:bb:da:96:54:fd:58:50:78:85:b1:8a:
f6:53:a3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:30:20 2024 by rpki-client on console-fra.rpki-client.org