Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5FA3C4E0904411EFA879EC55762E951A.roa
File: 5FA3C4E0904411EFA879EC55762E951A.roa (raw, json)
Hash identifier: 1CWxwQgqrJDHIWYjpQny6LkKcWcfDX77Hyzv4e9sbvk=
Subject key identifier: 4C:77:C5:D4:5E:0B:C6:C9:7E:75:6C:6D:54:9D:71:DC:E5:E6:5E:64
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1280
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5FA3C4E0904411EFA879EC55762E951A.roa
Signing time: Tue 22 Oct 2024 07:08:01 +0000
ROA not before: Tue 22 Oct 2024 07:07:57 +0000
ROA not after: Thu 22 Oct 2026 07:07:57 +0000
asID: 64249
IP address blocks: 102.129.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4736 (0x1280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 22 07:07:57 2024 GMT
Not After : Oct 22 07:07:57 2026 GMT
Subject: CN=67174f51-14c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:36:46:c9:7d:8a:bc:2a:84:cc:7f:f1:1a:06:
13:95:fe:80:78:7e:5d:ee:1d:c3:4a:e1:ac:a3:d4:
51:30:dd:d5:68:5f:96:8f:d7:5d:7d:3a:16:61:af:
8b:1c:4a:79:d5:f7:9b:15:d6:c0:d9:ad:30:01:a7:
95:49:ae:53:60:c6:d4:f9:11:7e:a6:a6:3b:d1:a1:
9d:2f:9e:7c:37:83:bc:a7:a7:e2:61:4a:7d:0b:74:
77:8f:a9:19:8c:2d:31:99:22:c4:a0:63:20:f3:b3:
b9:15:bd:c4:4d:2f:fd:1e:fc:17:cc:e2:ac:ee:a8:
4a:16:7d:42:4c:02:4c:22:64:3f:21:29:27:e0:c3:
1c:ef:cd:e7:48:1c:23:28:53:89:08:79:a7:fe:b1:
e8:1d:bc:ba:1e:31:79:bc:99:16:db:ba:6a:c1:c9:
1d:47:af:d7:0f:3c:e9:3a:25:78:7a:7b:8c:18:f8:
8e:bb:7d:70:6f:8e:da:d7:72:7f:a0:1d:86:e0:ac:
4a:c5:20:6e:01:a1:1d:d2:03:eb:3f:1d:32:59:ad:
b5:4f:e6:57:16:96:f9:68:3e:98:fe:bd:c0:61:f2:
d7:0f:24:b6:d5:f7:f2:52:e0:d4:b0:25:13:a1:57:
e7:dc:52:fb:f0:4c:d5:38:ac:fe:c1:f7:b6:99:f9:
5d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:77:C5:D4:5E:0B:C6:C9:7E:75:6C:6D:54:9D:71:DC:E5:E6:5E:64
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5FA3C4E0904411EFA879EC55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.141.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:c9:d2:26:fd:b4:9d:9c:70:fd:5a:5d:6a:c2:8d:26:bd:19:
8e:e7:19:c9:16:24:5e:45:24:23:a5:91:55:8e:a6:be:ab:cf:
78:ea:c2:94:52:94:cb:c6:41:46:73:c1:ed:f9:c0:2f:d9:2c:
1a:03:fd:e5:ea:16:d5:6b:01:16:b2:7a:ec:82:6f:d8:d7:8f:
fe:d3:ad:75:d1:76:df:a3:2d:3c:eb:4a:a8:62:97:26:92:10:
11:c8:2d:d3:cf:b2:aa:96:33:59:17:5c:bb:e7:9a:37:f8:e8:
45:c1:45:8f:a1:2e:c2:1e:17:51:a0:a0:32:d5:a2:5a:0c:f0:
88:3d:c9:96:ac:42:c0:ef:a4:02:60:7e:32:61:5d:b4:9e:e6:
bd:98:dd:cc:9f:d7:fe:1a:61:d6:6f:66:a1:34:f6:03:5c:ad:
8b:6e:a2:da:6c:cc:d1:11:6a:44:15:b3:0d:ca:92:20:c5:98:
17:f0:0b:95:4e:91:83:c1:99:00:03:76:09:8d:8e:9b:30:4a:
1c:ab:8e:c4:e0:05:6c:01:80:ac:3a:b8:f9:f8:f3:7e:2d:b9:
11:42:7f:92:b0:ba:e6:19:24:86:8e:93:24:dc:0a:e3:1f:c8:
9d:71:1c:7d:6c:8a:b3:a5:36:80:83:58:16:be:6b:33:fa:8a:
eb:13:a1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:24 2024 by rpki-client on console-ams.rpki-client.org