Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/51FFEB06A7EC11EFA901727C762E951A.roa
File: 51FFEB06A7EC11EFA901727C762E951A.roa (raw, json)
Hash identifier: B0FONZzdr0aiUmLzW0uXVH3M2wVtgdvMipdia8uv8n4=
Subject key identifier: 95:4D:12:71:5C:E8:81:6E:E3:57:8E:BA:96:24:C8:59:74:97:F8:FF
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 12E5
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/51FFEB06A7EC11EFA901727C762E951A.roa
Signing time: Thu 21 Nov 2024 09:38:10 +0000
ROA not before: Thu 21 Nov 2024 09:38:06 +0000
ROA not after: Sat 21 Nov 2026 09:38:06 +0000
asID: 62240
IP address blocks: 102.129.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4837 (0x12e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 21 09:38:06 2024 GMT
Not After : Nov 21 09:38:06 2026 GMT
Subject: CN=673eff82-967f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:ce:72:2b:83:51:d2:29:fc:8a:6f:5b:f4:
1b:ac:28:ad:1a:7f:35:4b:b0:d5:61:a2:62:75:8c:
ff:e1:33:87:76:9f:21:0a:34:25:2f:37:0c:07:14:
2b:80:6d:d6:52:f4:29:cb:e5:ea:d0:e3:68:6b:39:
65:ab:69:65:d4:8e:5c:2f:cd:6e:ca:c0:de:8d:c3:
5e:6f:2a:a1:aa:a6:ec:8b:30:c5:7d:6b:eb:54:3d:
93:e1:2a:52:31:0f:a2:6e:9c:a7:e4:27:e6:8d:a2:
dd:1c:50:2d:9e:2c:a3:e3:f3:55:5e:f9:03:92:c2:
56:f1:3e:6d:b2:8d:04:d8:e2:0c:d6:a0:0d:d5:66:
44:83:67:d8:72:2f:70:47:18:0b:74:0f:4b:11:2d:
83:49:61:03:63:4c:3f:e1:4c:c3:13:c6:3b:40:c1:
82:88:59:c9:d8:99:2c:ad:76:23:54:ff:6f:89:7e:
b2:e5:15:86:7e:7f:17:14:02:72:ae:fc:46:d9:45:
7b:c0:60:27:b3:c2:f7:db:32:1b:82:43:05:53:f6:
39:a8:7c:d3:12:7e:22:36:bd:43:fb:4a:ca:29:be:
ab:5e:88:a5:3c:f7:03:71:ca:85:d9:94:9d:1c:df:
0a:20:4e:59:1e:3d:46:e6:3c:d9:82:c0:59:28:69:
18:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4D:12:71:5C:E8:81:6E:E3:57:8E:BA:96:24:C8:59:74:97:F8:FF
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/51FFEB06A7EC11EFA901727C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.213.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:b5:e3:c0:6b:55:8c:f8:fa:a1:08:69:12:6a:44:ad:94:60:
31:f4:9b:61:a7:bf:00:4b:34:38:b9:da:91:bc:0d:96:de:f5:
75:18:10:98:a4:d2:1c:43:2d:52:18:92:64:55:57:d1:d8:44:
72:fe:2c:63:fb:fd:3f:b6:fa:77:4c:eb:5c:fb:c6:fc:e8:a9:
71:15:41:35:a7:a3:f3:91:52:78:83:84:af:02:3b:1c:cf:b3:
61:7c:a1:79:3b:0d:47:cd:a7:6c:c0:81:5a:a1:88:97:07:5a:
e1:49:82:93:ef:d7:eb:2b:8b:9e:a0:f6:33:fc:cc:99:76:34:
95:a8:b7:aa:59:af:f9:72:46:b7:e5:4a:4c:3a:da:af:75:e0:
5e:85:e8:f5:b4:d4:b0:c3:a4:7f:15:fc:95:5c:97:6f:24:ac:
2b:e2:73:e2:9a:c4:b7:70:e3:43:dd:4f:20:33:af:c2:6c:35:
09:f9:21:ca:fc:33:60:e9:25:74:b4:8a:c7:14:e0:f0:39:c0:
63:86:2e:ed:bf:ef:5c:5b:10:f5:0b:69:6f:32:ea:98:30:5a:
a5:60:ad:4d:3b:a3:22:eb:6a:c2:c4:b1:36:bc:ea:3d:5b:4d:
39:d7:51:4d:0b:52:2d:78:dd:58:e6:4a:29:40:52:74:12:93:
fc:b8:3e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:37:46 2024 by rpki-client on console-fra.rpki-client.org