Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/59BBCA42596B11EFA44BA06B762E951A.roa
File: 59BBCA42596B11EFA44BA06B762E951A.roa (raw, json)
Hash identifier: xy7Nt9zxXUsvweZfIHR7a5e+78EdYYn5t5P3hM3zf2s=
Subject key identifier: 8E:C8:C4:7F:4A:ED:F3:34:D5:B6:99:4A:76:38:92:F8:B9:A0:71:80
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 11B0
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/59BBCA42596B11EFA44BA06B762E951A.roa
Signing time: Tue 13 Aug 2024 11:58:27 +0000
ROA not before: Tue 13 Aug 2024 11:58:24 +0000
ROA not after: Thu 13 Aug 2026 11:58:24 +0000
asID: 174
IP address blocks: 102.129.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4528 (0x11b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 13 11:58:24 2024 GMT
Not After : Aug 13 11:58:24 2026 GMT
Subject: CN=66bb4a63-890a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:11:60:6e:b2:fa:b0:07:d8:33:53:0f:44:2c:
13:11:47:45:c8:b5:42:3f:7b:84:85:45:78:d7:1c:
86:78:2b:4e:35:8c:da:19:26:6b:2d:e1:3e:f7:ab:
1f:68:24:b8:31:44:33:80:9b:4c:63:f7:e1:ec:f0:
02:f2:6e:b8:57:bc:ae:59:97:0b:f8:27:e1:4e:d5:
a4:4b:be:a0:80:67:aa:c7:e1:ba:0b:da:97:01:07:
ee:ae:f2:b2:48:b7:60:ee:48:f7:fc:86:14:ac:93:
35:7f:f3:b5:f8:39:5a:af:87:df:06:1f:2b:7d:a9:
69:e1:7a:d5:e8:eb:d9:b6:03:58:59:e1:01:2e:3f:
06:b7:79:6f:b8:a9:dd:bd:52:c5:57:f3:75:4a:9a:
60:9b:14:5c:45:10:ea:30:1b:bc:f3:96:78:32:07:
ac:29:56:f5:1a:a7:85:0d:ca:9f:be:26:86:fd:51:
a3:f7:d0:71:44:48:e7:d8:4a:de:08:93:36:4d:a8:
e1:8e:a4:e8:a8:10:46:14:c2:83:69:b9:69:64:d4:
92:d3:57:1c:90:e3:19:3f:2f:bc:c5:d3:a4:f5:2c:
a9:5e:e9:b7:9c:34:da:95:1d:a4:6d:e4:ef:04:f0:
46:6b:60:f7:b8:b9:26:d0:0b:54:bc:bb:03:12:29:
a7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C8:C4:7F:4A:ED:F3:34:D5:B6:99:4A:76:38:92:F8:B9:A0:71:80
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/59BBCA42596B11EFA44BA06B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.235.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:39:5d:77:32:d6:fc:13:e4:ad:79:75:10:94:65:da:47:7b:
af:d0:7a:a9:bf:67:11:c3:63:e7:5a:78:dc:5a:d5:2a:c6:3f:
e3:70:8e:e8:6a:bc:6a:d6:79:22:64:88:56:5f:c0:88:38:9c:
39:a3:5f:0e:e6:ca:8a:ee:30:93:9d:6b:c1:10:1f:d9:00:76:
8d:7f:2a:a7:b2:c6:d9:62:46:5b:b5:46:78:5d:32:50:b1:cc:
3f:f9:09:d3:14:14:52:c1:c1:b1:3f:0e:a7:f0:ad:2c:4a:b2:
35:01:22:99:04:3d:95:52:fa:9c:b2:af:eb:37:29:5a:51:1e:
05:ae:1e:93:50:15:cb:7f:b7:de:62:ef:9e:f7:07:00:e6:14:
1d:74:77:80:21:24:a3:00:5d:6e:57:59:41:5d:3a:4a:61:e2:
30:09:8f:aa:9e:77:3a:f4:5e:62:f5:c3:37:72:ae:8a:47:98:
b4:b5:66:2a:2c:e3:44:07:73:1b:d7:61:8b:43:0b:35:73:1a:
22:e7:d9:98:71:9a:05:46:46:6d:1b:ee:21:b0:0d:ef:04:34:
22:4d:85:c2:5a:00:85:7a:40:f8:e9:8d:d7:c0:27:93:15:aa:
0f:c7:46:e4:9a:c0:e2:0c:e0:79:a6:59:5f:0a:ad:c0:22:15:
fb:07:db:ee
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEbAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNDA4MTMxMTU4MjRaFw0yNjA4MTMxMTU4MjRaMBgxFjAU
BgNVBAMTDTY2YmI0YTYzLTg5MGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDTEWBusvqwB9gzUw9ELBMRR0XItUI/e4SFRXjXHIZ4K041jNoZJmst4T73
qx9oJLgxRDOAm0xj9+Hs8ALybrhXvK5Zlwv4J+FO1aRLvqCAZ6rH4boL2pcBB+6u
8rJIt2DuSPf8hhSskzV/87X4OVqvh98GHyt9qWnhetXo69m2A1hZ4QEuPwa3eW+4
qd29UsVX83VKmmCbFFxFEOowG7zzlngyB6wpVvUap4UNyp++Job9UaP30HFESOfY
St4IkzZNqOGOpOioEEYUwoNpuWlk1JLTVxyQ4xk/L7zF06T1LKle6becNNqVHaRt
5O8E8EZrYPe4uSbQC1S8uwMSKafNAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUjsjE
f0rt8zTVtplKdjiS+LmgcYAwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzU5QkJDQTQyNTk2QjExRUZBNDRCQTA2Qjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgeswDQYJKoZIhvcNAQEL
BQADggEBAIo5XXcy1vwT5K15dRCUZdpHe6/Qeqm/ZxHDY+daeNxa1SrGP+Nwjuhq
vGrWeSJkiFZfwIg4nDmjXw7myoruMJOda8EQH9kAdo1/KqeyxtliRlu1RnhdMlCx
zD/5CdMUFFLBwbE/DqfwrSxKsjUBIpkEPZVS+pyyr+s3KVpRHgWuHpNQFct/t95i
7573BwDmFB10d4AhJKMAXW5XWUFdOkph4jAJj6qedzr0XmL1wzdyropHmLS1Zios
40QHcxvXYYtDCzVzGiLn2ZhxmgVGRm0b7iGwDe8ENCJNhcJaAIV6QPjpjdfAJ5MV
qg/HRuSawOIM4HmmWV8KrcAiFfsH2+4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:59 2024 by rpki-client on console-ams.rpki-client.org