Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/542BD630DC4D11EEA10080B1775412E6.roa
File: 542BD630DC4D11EEA10080B1775412E6.roa (raw, json)
Hash identifier: iCn4SDIaFOa7qAnsB7fOpx9xhWdPREtbDj2C7lofISA=
Subject key identifier: 77:5A:55:16:B1:5E:A4:8E:18:20:38:84:81:41:B7:6E:00:68:68:8E
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0FAA
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/542BD630DC4D11EEA10080B1775412E6.roa
Signing time: Thu 07 Mar 2024 06:38:38 +0000
ROA not before: Thu 07 Mar 2024 06:38:34 +0000
ROA not after: Sat 07 Mar 2026 06:38:34 +0000
asID: 150249
IP address blocks: 102.129.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4010 (0xfaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 7 06:38:34 2024 GMT
Not After : Mar 7 06:38:34 2026 GMT
Subject: CN=65e960ee-02b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:77:d3:40:df:11:fb:80:f8:7f:0a:c6:5d:ff:
cc:3e:f1:ea:26:cb:0d:35:9b:a6:43:35:9e:5d:67:
7f:53:00:81:35:e5:9e:98:e5:b3:a8:69:e0:12:bc:
b8:e0:8e:44:36:c5:c3:65:45:6b:64:fb:d0:c3:fe:
d6:5c:ec:1c:0e:25:72:70:db:d5:e2:c8:f7:cb:3c:
e5:0a:ab:94:2a:46:86:b3:1b:40:1d:15:c0:0e:91:
4d:b0:c9:49:7a:ed:69:90:c3:59:17:a9:bb:3b:78:
b8:61:78:bf:de:56:7f:b3:57:e1:22:a5:71:ec:3b:
ce:1f:17:d1:80:a2:22:c6:b7:ad:e1:f6:44:be:81:
91:f8:e8:19:99:ed:33:28:07:55:45:52:34:ca:03:
a3:73:27:89:88:11:bc:a2:8d:78:11:ff:bb:eb:2d:
08:f3:a9:12:ef:1b:b8:97:03:a8:e5:11:a9:62:25:
ae:3c:e8:5a:f4:2a:ed:db:a1:78:80:4e:06:db:c6:
06:44:8a:f5:c6:d5:d7:c3:1b:31:02:4d:7e:a8:4c:
ba:0e:0f:56:a2:96:04:6b:08:31:47:00:f6:ff:fc:
cb:48:d1:4d:09:26:60:0d:46:f5:8f:c1:23:23:73:
ae:b1:98:39:23:d9:99:f9:05:2a:1b:3f:a7:58:42:
dd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5A:55:16:B1:5E:A4:8E:18:20:38:84:81:41:B7:6E:00:68:68:8E
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/542BD630DC4D11EEA10080B1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.210.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:fb:e2:b1:b6:58:eb:da:30:ba:2a:36:53:5c:1b:90:19:54:
3c:c4:74:17:2d:65:5d:0d:6e:f2:87:63:92:2c:8b:3f:9c:2f:
e4:99:5f:90:57:14:db:6e:96:34:da:9f:1d:8b:aa:bd:cb:f1:
2f:9c:d8:03:b1:a9:4d:65:e6:ca:d6:58:68:fb:31:51:f9:50:
53:f5:01:91:ff:9d:c9:38:5c:75:6c:1d:94:2b:b4:f3:5c:7c:
59:53:f7:6a:48:28:6a:23:7e:e1:0d:8b:4d:49:d9:6f:8a:91:
0b:e6:85:df:e4:af:e4:d8:f0:77:3e:47:44:b9:22:66:d3:e2:
e7:ce:48:45:ac:27:9e:5f:4e:96:25:74:56:1e:44:43:d7:50:
7e:af:94:67:11:e8:c8:b1:e4:0f:99:35:67:62:61:13:8e:db:
26:38:e4:36:ee:97:9c:9a:23:6e:cb:bf:af:4c:07:81:a9:34:
12:6f:b0:0c:21:2b:a1:fa:24:d0:de:b3:6c:5d:c9:99:a5:ac:
50:61:2a:76:00:98:d7:0a:97:ca:b1:a5:e0:30:fa:23:2b:57:
99:11:7d:6d:81:e7:01:59:57:d6:87:c3:ba:00:50:66:d6:48:
8e:42:db:12:b3:6b:79:24:d1:e9:22:48:94:e5:68:92:5c:03:
a2:d6:3f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:41 2024 by rpki-client on console-ams.rpki-client.org