Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/57795C909EAD11EF8EF762A0762E951A.roa
File: 57795C909EAD11EF8EF762A0762E951A.roa (raw, json)
Hash identifier: piwj8TXx9FmneSaag+K4Su2YJ9ziQnEBINClyGAnNRI=
Subject key identifier: 82:2A:58:34:F5:E0:EE:15:98:D5:FC:E4:F1:C0:95:2D:F8:AC:28:1A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 12A8
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/57795C909EAD11EF8EF762A0762E951A.roa
Signing time: Sat 09 Nov 2024 15:14:41 +0000
ROA not before: Sat 09 Nov 2024 15:14:37 +0000
ROA not after: Mon 09 Nov 2026 15:14:37 +0000
asID: 7029
IP address blocks: 102.129.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4776 (0x12a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 9 15:14:37 2024 GMT
Not After : Nov 9 15:14:37 2026 GMT
Subject: CN=672f7c61-7da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:60:16:3b:96:be:4b:ba:73:c6:48:ff:9c:22:
1d:1f:1f:e1:f6:74:2e:c4:4a:4c:e1:77:1f:de:5f:
02:67:f0:0f:31:6e:3c:a8:6d:77:7f:48:58:85:0b:
e5:00:36:d9:6a:d9:21:80:8e:5e:de:aa:12:0b:65:
2f:1a:50:14:d1:44:30:3b:8d:b0:18:e2:8b:71:cd:
85:76:b8:87:77:ae:05:f1:71:73:ad:7c:1a:2c:2a:
62:e0:df:19:4f:38:a7:3d:f7:2a:b7:2b:07:ce:c9:
ef:67:f1:fc:82:53:76:9a:46:41:b2:b4:af:ea:8b:
9d:16:40:dc:3a:4d:94:8e:a0:fc:56:20:c5:f7:b7:
2e:49:f7:42:1c:2d:44:b9:e1:95:b3:d2:bc:b9:50:
3f:b0:f6:16:f7:c9:40:de:21:0c:b5:c3:eb:88:fa:
8a:0e:24:fa:06:fb:f5:55:5f:35:07:50:35:19:72:
ff:5d:c7:a8:2d:2c:0b:0a:7c:f9:b9:5e:d4:8d:0a:
d2:30:15:0a:82:08:a9:90:ac:b4:bf:7f:79:4c:90:
98:f2:3d:a9:21:ba:f1:2f:d6:65:d6:0a:79:fb:41:
09:17:97:fe:f6:39:00:09:52:b6:bf:cb:ba:8d:c1:
bd:ad:1d:88:0f:0d:bf:ce:b2:4b:d6:06:8e:2a:0b:
32:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2A:58:34:F5:E0:EE:15:98:D5:FC:E4:F1:C0:95:2D:F8:AC:28:1A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/57795C909EAD11EF8EF762A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.130.0/24
Signature Algorithm: sha256WithRSAEncryption
24:6f:77:83:94:fe:ef:a0:bc:71:38:be:09:2c:b1:c5:fc:f0:
80:5b:b3:37:88:3d:85:d3:5f:a9:14:2a:16:95:53:82:b4:6a:
c9:ba:a2:ca:c6:a7:82:24:0e:1d:c2:21:45:30:fa:f1:54:c4:
7a:1a:8b:8c:f9:a9:75:9d:34:38:2e:6b:6d:61:00:ee:0e:59:
a8:ff:60:ca:7a:e8:27:c9:5a:cc:31:29:fa:d4:c8:1c:be:55:
7e:aa:14:41:11:a1:c5:8e:b5:d8:3f:48:9d:18:8a:46:5f:c9:
45:e6:90:01:ac:a4:d0:27:a6:ed:08:90:9c:29:00:63:88:30:
c1:f2:e4:e3:1e:a6:b1:dc:50:8a:83:f9:61:38:c8:8a:4b:26:
23:0f:62:e4:59:7a:a3:8e:4c:3f:f6:b0:e5:24:80:14:f2:f7:
b2:c4:fa:12:82:d7:7b:b5:21:db:7b:97:df:af:7f:2a:2d:47:
94:24:8d:bc:35:08:11:7d:b4:fa:c1:2c:87:28:54:a8:0b:36:
25:4e:9e:a7:15:07:41:e2:10:5e:b1:a3:35:54:da:99:0c:dd:
80:13:39:c9:1f:7c:6d:dc:c6:0c:95:98:33:7f:28:9e:0d:71:
8e:f9:4f:57:89:a3:6c:e4:29:8b:e6:0d:ab:6f:ae:c5:c2:1c:
17:32:06:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:59 2024 by rpki-client on console-ams.rpki-client.org