Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/49F2E2DAFCE611EEB237A215017001B1.roa
File: 49F2E2DAFCE611EEB237A215017001B1.roa (raw, json)
Hash identifier: 3EG9UFbfyXGePt0gXMbYAoYdQ77QRotehohVZNQbAic=
Subject key identifier: 4E:FD:00:4D:3E:06:2B:B4:63:CA:50:73:55:88:8B:80:24:C2:AE:6B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 105E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/49F2E2DAFCE611EEB237A215017001B1.roa
Signing time: Wed 17 Apr 2024 18:14:11 +0000
ROA not before: Wed 17 Apr 2024 18:14:07 +0000
ROA not after: Sat 18 Apr 2026 18:14:07 +0000
asID: 29802
IP address blocks: 102.129.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4190 (0x105e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 17 18:14:07 2024 GMT
Not After : Apr 18 18:14:07 2026 GMT
Subject: CN=66201173-2e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:73:bd:ea:96:56:36:22:3b:5d:2e:80:74:84:
34:8c:00:4b:7d:ae:a3:6d:63:a7:f8:3a:bc:5c:cb:
60:7a:e9:98:85:21:be:fb:75:d0:5c:6d:91:f9:91:
03:a5:87:1e:79:fe:15:10:a7:c4:4f:bd:98:35:94:
08:85:f5:0d:86:3c:de:13:a6:40:ef:3a:d5:6d:c2:
fb:57:f1:65:51:f1:0f:63:18:59:18:73:56:f8:b1:
49:5a:54:f3:94:88:89:d8:5b:4d:12:a0:d6:a2:31:
32:fd:76:73:b8:6b:37:8e:96:3d:6c:08:d0:a4:94:
4f:5e:94:a9:6e:5c:c6:5f:ab:fd:71:a8:95:f2:ab:
1d:0c:0a:dd:5f:30:f3:bd:22:40:21:e6:65:f1:b9:
e0:6e:d2:f4:b6:6d:50:09:d0:2b:a7:14:ad:e1:d3:
1f:81:51:76:81:ce:e1:ca:c6:2f:51:76:0d:18:22:
db:ee:f5:38:4f:41:91:90:96:c9:4e:1e:d2:9f:4c:
40:f5:78:37:b4:46:46:c4:d9:f5:47:c9:33:a1:61:
c1:7f:f5:7b:5a:45:40:f2:22:26:d1:06:ef:d6:3c:
a3:03:98:b1:5a:26:1c:8b:9d:72:88:f2:e2:d5:94:
cf:c4:55:70:5b:52:a2:19:54:66:96:cc:dd:77:f1:
7b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FD:00:4D:3E:06:2B:B4:63:CA:50:73:55:88:8B:80:24:C2:AE:6B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/49F2E2DAFCE611EEB237A215017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.211.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:0e:50:d5:04:bb:c8:72:03:7e:fb:93:17:b6:6d:51:9b:f1:
2f:4d:f7:d9:10:f3:4e:54:3f:27:d6:5a:b4:93:99:3f:64:14:
cf:e8:37:d3:68:38:0c:bd:07:0f:07:29:3a:50:82:4c:31:1c:
1b:8c:e7:9f:23:b1:dd:8e:8b:bd:a2:d0:c0:7d:28:95:74:81:
68:d9:ce:33:be:75:4a:8c:91:c0:d2:e5:8c:13:3b:f0:86:91:
a1:fa:8b:90:f6:49:bc:b2:71:0e:9a:dd:5c:cf:a0:a7:f6:97:
9a:18:01:e0:ff:16:b3:7c:26:3c:63:01:d6:cf:ce:35:a3:c6:
1a:d8:e0:df:3f:70:03:7a:f1:c8:cb:90:03:c5:23:92:b0:ee:
b2:7a:38:af:92:6c:51:c2:30:ea:d4:58:36:ee:2f:30:1e:b1:
fc:34:c2:70:ad:48:92:bf:73:9f:6b:19:62:04:20:a5:55:8a:
3c:27:67:30:b1:ae:bc:26:a4:a3:b6:8e:79:01:d3:a6:c3:93:
25:dd:01:6f:15:f8:e8:43:21:8f:c9:7a:3a:b7:4f:79:a8:23:
70:0a:07:93:0d:5f:1c:73:0a:a1:e0:88:69:de:ab:6c:00:eb:
05:15:f4:1d:92:1d:ab:44:af:58:aa:19:e0:51:f1:a2:c1:38:
22:e6:eb:f8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEF4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNDA0MTcxODE0MDdaFw0yNjA0MTgxODE0MDdaMBgxFjAU
BgNVBAMTDTY2MjAxMTczLTJlM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDbc73qllY2IjtdLoB0hDSMAEt9rqNtY6f4Orxcy2B66ZiFIb77ddBcbZH5
kQOlhx55/hUQp8RPvZg1lAiF9Q2GPN4TpkDvOtVtwvtX8WVR8Q9jGFkYc1b4sUla
VPOUiInYW00SoNaiMTL9dnO4azeOlj1sCNCklE9elKluXMZfq/1xqJXyqx0MCt1f
MPO9IkAh5mXxueBu0vS2bVAJ0CunFK3h0x+BUXaBzuHKxi9Rdg0YItvu9ThPQZGQ
lslOHtKfTED1eDe0RkbE2fVHyTOhYcF/9XtaRUDyIibRBu/WPKMDmLFaJhyLnXKI
8uLVlM/EVXBbUqIZVGaWzN138XsjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUTv0A
TT4GK7RjylBzVYiLgCTCrmswHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzQ5RjJFMkRBRkNFNjExRUVCMjM3QTIxNTAxNzAwMUIxLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgdMwDQYJKoZIhvcNAQEL
BQADggEBANkOUNUEu8hyA377kxe2bVGb8S9N99kQ805UPyfWWrSTmT9kFM/oN9No
OAy9Bw8HKTpQgkwxHBuM558jsd2Oi72i0MB9KJV0gWjZzjO+dUqMkcDS5YwTO/CG
kaH6i5D2SbyycQ6a3VzPoKf2l5oYAeD/FrN8JjxjAdbPzjWjxhrY4N8/cAN68cjL
kAPFI5Kw7rJ6OK+SbFHCMOrUWDbuLzAesfw0wnCtSJK/c59rGWIEIKVVijwnZzCx
rrwmpKO2jnkB06bDkyXdAW8V+OhDIY/Jejq3T3moI3AKB5MNXxxzCqHgiGneq2wA
6wUV9B2SHatEr1iqGeBR8aLBOCLm6/g=
-----END CERTIFICATE-----
Generated at Fri May 3 01:30:20 2024 by rpki-client on console-fra.rpki-client.org