Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4B53FF965C3811EEA8F41C4E4AD9E6FC.roa
File: 4B53FF965C3811EEA8F41C4E4AD9E6FC.roa (raw, json)
Hash identifier: pH0sGswvsWVkuUa1l3dNsjfx60EErX13sJM1aH8UTXI=
Subject key identifier: E6:B6:04:7A:6A:E1:DE:D1:CD:47:18:8B:8C:A4:03:3B:75:1D:7F:1F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0D87
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4B53FF965C3811EEA8F41C4E4AD9E6FC.roa
Signing time: Tue 26 Sep 2023 06:45:35 +0000
ROA not before: Tue 26 Sep 2023 06:45:31 +0000
ROA not after: Sat 27 Sep 2025 06:45:31 +0000
asID: 212238
IP address blocks: 102.129.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Apr 2024 20:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3463 (0xd87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 26 06:45:31 2023 GMT
Not After : Sep 27 06:45:31 2025 GMT
Subject: CN=65127e0f-5617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ef:44:9a:87:a9:5a:fe:84:38:49:68:db:2b:
2a:68:31:5b:1d:d3:15:af:87:17:09:4a:f7:05:c3:
21:8f:20:f8:b2:1c:b8:63:f3:e7:39:2d:2f:e9:a4:
72:ca:99:ee:f2:4d:6b:9f:f8:72:06:a3:7d:47:bf:
34:8a:8d:10:0b:c2:a2:eb:d5:22:2c:df:a3:5b:8a:
fe:3f:c0:36:f6:c4:a8:d6:76:e7:3e:18:fd:0d:e8:
0c:c0:22:f8:cd:64:63:3c:d2:5f:65:3a:ae:d8:eb:
d9:bb:cb:6e:49:e2:58:dd:79:8b:fa:6b:95:e6:b0:
1d:0f:30:4f:5e:4f:06:69:56:da:9e:93:ec:9e:f7:
09:e8:49:75:db:20:ed:51:74:b3:3d:8d:65:f8:0f:
6f:64:b6:a1:33:fa:9d:61:81:0d:a7:52:58:3b:f6:
59:d5:1b:d8:23:cc:81:23:b6:1b:db:70:1d:71:e4:
21:37:cb:03:2d:3f:bf:18:07:cc:91:10:a8:6e:8a:
36:c3:53:56:86:0e:ba:d4:e7:97:2e:12:6a:ab:ae:
0c:9d:48:dd:a0:cd:37:7e:25:74:81:77:8e:73:19:
7c:3f:35:43:cd:fd:06:40:bd:dc:00:57:58:3e:6d:
85:0f:75:ed:65:a8:0e:a4:ca:d4:28:c0:cd:ca:a3:
b6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B6:04:7A:6A:E1:DE:D1:CD:47:18:8B:8C:A4:03:3B:75:1D:7F:1F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4B53FF965C3811EEA8F41C4E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.228.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:2a:e7:9e:6c:97:e8:cc:6f:d1:69:2f:63:aa:b7:c3:c5:dc:
28:7d:11:12:74:db:1f:ba:b6:74:7e:0f:d8:ff:8f:6e:9a:57:
c5:33:1f:87:22:99:ae:d2:d5:6d:6f:ca:4e:d1:bf:80:c9:27:
42:22:68:a3:60:75:4f:00:87:5a:51:d1:fb:c4:6c:0f:a4:61:
57:e2:10:17:b4:94:9c:fe:0a:42:d6:f2:93:3d:78:1b:e5:00:
e8:3b:56:a4:d3:41:54:f5:4a:62:2e:13:4c:88:06:50:ae:1a:
6c:39:da:03:0c:d6:85:4a:1b:e9:43:26:f9:96:b6:69:8c:ac:
04:01:19:cf:25:83:20:c4:9f:15:6f:55:0e:7c:60:be:7a:34:
d0:5d:71:e7:48:5a:28:2e:e1:a5:b4:b1:2f:4f:ac:72:c3:0a:
29:e7:5e:19:fb:b4:91:c9:b3:aa:29:1b:6b:7f:6a:bd:ad:0b:
3e:c9:58:8b:ca:b6:db:ad:19:01:58:ba:d0:ea:3c:64:4c:02:
ee:97:a3:d0:d5:20:2a:bc:20:2b:0a:c2:84:a9:f4:4f:04:5d:
14:ce:4e:4d:97:56:a8:c3:2c:da:2e:55:80:1c:19:c1:2d:35:
18:5e:80:ad:42:cf:f5:8a:72:b4:a7:35:b3:e3:91:e3:16:8b:
5c:e5:ab:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 21:41:48 2024 by rpki-client on console-ams.rpki-client.org