Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/51004A24EA8411EDAA8459214AD9E6FC.roa
File: 51004A24EA8411EDAA8459214AD9E6FC.roa (raw, json)
Hash identifier: DTmmtGy+qPXqcHeq2ZelOkrfmfClunRv+FD5gaElIWk=
Subject key identifier: AE:DD:AC:5F:86:E2:4F:D9:68:FD:F8:12:E0:CB:3F:B3:8A:65:34:C3
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B4D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/51004A24EA8411EDAA8459214AD9E6FC.roa
Signing time: Thu 04 May 2023 14:02:33 +0000
ROA not before: Thu 04 May 2023 14:02:29 +0000
ROA not after: Tue 13 May 2025 14:02:29 +0000
asID: 61317
IP address blocks: 102.129.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Apr 2024 00:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2893 (0xb4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 4 14:02:29 2023 GMT
Not After : May 13 14:02:29 2025 GMT
Subject: CN=6453baf9-aa91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:25:5d:e0:3c:40:52:18:17:f7:c9:c5:6e:
a2:3f:e7:06:9e:f1:de:7a:15:a5:a8:ec:0d:5f:38:
c7:5c:63:27:6c:8a:ff:4f:e6:29:60:b3:37:a2:b3:
e9:33:d3:99:ee:28:00:86:61:8e:51:d4:c1:c8:e7:
d4:fa:de:3a:b0:d7:34:8f:c3:cb:76:44:77:fd:f9:
0f:e3:dd:13:b9:b5:45:b9:f3:2a:4e:39:2d:2c:88:
fb:33:bf:39:a4:2b:48:2a:9e:f1:49:1f:d4:98:c4:
1e:b0:17:2c:21:8e:5b:4b:d7:f4:6a:a9:e2:69:ab:
14:a3:a8:60:46:a4:3e:c0:50:10:12:4b:22:a7:c4:
9e:b3:55:49:66:17:f8:4a:5f:eb:59:e8:c9:6e:90:
b5:0c:1c:08:1c:c1:64:ba:83:31:62:bf:ac:b5:0c:
5f:19:11:7a:6d:ce:f6:1f:05:9f:2e:e7:1a:9a:cd:
19:1a:a8:28:0a:29:ca:2a:bd:da:a5:a8:4b:ed:61:
42:8f:3c:92:39:8a:3f:f8:72:a9:13:2a:df:be:79:
4a:07:b0:6b:85:9b:01:a7:8e:ca:e8:66:bc:3e:d0:
07:a8:21:3b:09:6f:1e:13:82:97:f8:49:36:d2:ec:
67:21:46:98:e7:16:51:54:2c:72:6f:d6:f2:fb:cb:
5f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DD:AC:5F:86:E2:4F:D9:68:FD:F8:12:E0:CB:3F:B3:8A:65:34:C3
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/51004A24EA8411EDAA8459214AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.205.0/24
Signature Algorithm: sha256WithRSAEncryption
64:52:57:e8:68:c7:a8:23:7c:e1:1b:29:8a:72:b8:b3:1b:28:
29:b3:4e:a7:80:93:70:ad:46:27:6d:e5:e7:ce:ad:ed:a5:8f:
a8:ce:24:2b:1d:0d:e8:7e:b8:f7:b7:42:cb:65:45:16:65:e2:
3e:f5:c4:a8:c9:f2:0b:a5:03:2e:20:45:b5:30:33:f5:9d:33:
a4:59:cf:53:aa:d8:b5:74:0b:a2:57:94:54:05:88:33:2c:18:
42:9f:55:e3:bf:01:86:29:0c:0a:23:9a:2f:8c:c7:bd:2d:44:
62:cb:16:19:9e:de:2f:70:7e:9a:d3:ac:ea:54:cb:92:d9:2c:
96:41:71:71:c3:37:b4:ea:e9:74:c8:62:0a:18:65:ea:9e:a5:
db:f0:48:56:b6:12:c9:ae:6e:c5:c9:9f:27:71:c8:6d:70:53:
68:da:7a:66:6b:d5:e5:a7:72:0b:0c:bf:77:6c:f0:fc:f4:c6:
4c:e5:76:8e:49:33:ff:7b:86:c0:03:3b:5e:84:6c:03:95:27:
32:af:06:ad:c4:3e:7d:4f:87:be:88:4b:e3:d8:a2:0a:79:0e:
a3:4b:9d:d1:56:e9:a6:c5:e5:9d:a7:de:d3:28:d4:f9:8f:eb:
98:f6:0c:21:0d:6f:8a:2e:3c:fd:e8:26:d7:97:4b:4c:bd:16:
8d:4e:43:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:39:37 2024 by rpki-client on console-ams.rpki-client.org