Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/67F3DED6904011EF9EB169BC762E951A.roa
File: 67F3DED6904011EF9EB169BC762E951A.roa (raw, json)
Hash identifier: V8WPh7WQoubCbn+RAZOIgKT5uA64PULk62zk8h7TyPc=
Subject key identifier: 28:3C:87:BA:D4:E8:F1:CB:C9:ED:E2:8D:55:6F:AF:6B:58:4D:45:B8
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 126E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/67F3DED6904011EF9EB169BC762E951A.roa
Signing time: Tue 22 Oct 2024 06:39:37 +0000
ROA not before: Tue 22 Oct 2024 06:39:33 +0000
ROA not after: Thu 22 Oct 2026 06:39:33 +0000
asID: 212238
IP address blocks: 102.129.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4718 (0x126e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 22 06:39:33 2024 GMT
Not After : Oct 22 06:39:33 2026 GMT
Subject: CN=671748a9-7653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5b:0a:b4:64:6b:2b:dc:1a:33:1c:2b:a3:fb:
51:7e:2c:00:61:c8:c3:88:0c:79:78:98:62:b3:f8:
6f:9a:22:7c:5a:34:1f:57:31:2d:67:24:2d:5b:ea:
0d:4c:c3:24:1e:69:3a:9b:ce:a4:cb:3d:cb:4a:dd:
70:83:ac:a6:d0:92:c9:b3:a5:a0:2f:0b:c2:fe:0c:
15:22:49:c6:b6:79:b7:a5:d8:7c:86:4f:2d:da:56:
f6:99:f8:e0:5c:3c:d7:53:e7:b5:93:9a:bf:00:71:
70:81:0a:b5:de:37:21:f8:2a:3e:ed:69:9b:48:8e:
1d:aa:28:13:ac:89:91:05:da:14:c2:1d:83:dc:c4:
91:74:c9:20:ac:34:bc:d9:2b:9c:0c:3e:80:94:ac:
1c:4f:15:ff:d2:45:5d:82:d6:92:5d:79:49:f9:b0:
db:67:b2:3e:0d:db:17:d4:4c:81:f7:76:1a:72:e5:
1e:13:13:7d:a5:d9:27:db:69:ba:f3:70:89:62:21:
72:5f:90:6d:5f:7c:bc:1a:dd:91:13:89:74:53:8d:
23:aa:f4:43:fc:41:00:83:35:82:9a:18:45:8d:cb:
9a:cd:c6:5e:13:41:fa:12:6c:7d:ce:d0:80:e7:37:
57:86:8b:34:f0:79:3b:db:14:06:fc:5d:a7:2e:04:
32:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3C:87:BA:D4:E8:F1:CB:C9:ED:E2:8D:55:6F:AF:6B:58:4D:45:B8
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/67F3DED6904011EF9EB169BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.147.0/24
Signature Algorithm: sha256WithRSAEncryption
81:f2:35:4e:56:57:c9:f8:a8:68:a7:aa:ca:f2:7b:71:a3:42:
1a:35:6f:f3:0e:48:e4:5c:c8:85:c0:9f:22:cc:17:23:d5:81:
85:d2:7c:4a:67:63:0a:af:a8:eb:09:e7:50:89:83:8c:15:4b:
be:94:1c:bf:1e:e2:18:21:7b:64:43:1b:af:cb:73:89:14:fb:
1e:92:b6:89:95:34:b5:4a:f4:27:fd:68:c1:0c:29:5d:f6:19:
9c:fe:d1:a7:c6:d1:ef:cd:fe:c0:63:78:fa:3e:0d:05:e4:49:
1b:c3:29:b6:80:31:3c:bf:dd:4f:b5:90:b2:31:09:7a:4c:d5:
5d:ac:6c:92:8f:fb:77:1c:0d:91:34:0a:51:83:f6:f7:65:6a:
ca:75:75:be:a1:c3:6a:4e:1f:e5:97:ef:18:f4:c8:b7:e7:34:
4d:3d:ba:26:d1:e2:ae:e9:9a:73:e3:fe:1d:e2:b1:81:db:c7:
6b:29:ff:35:11:97:3f:e2:c0:1b:3b:ea:0a:71:af:cc:9d:9a:
02:a3:63:bb:f3:df:5f:71:43:72:32:7c:07:c7:2d:55:ff:c7:
93:42:72:8d:ff:aa:fb:c7:01:1b:fd:58:c8:2d:d9:c3:04:9a:
80:53:9a:3e:6b:f3:84:08:94:83:a2:23:53:59:e1:d7:d5:d7:
4a:cf:10:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:16 2024 by rpki-client on console-fra.rpki-client.org