Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6E49EB76A7DE11EFA0C3F8A4762E951A.roa
File: 6E49EB76A7DE11EFA0C3F8A4762E951A.roa (raw, json)
Hash identifier: uEs/7gdp+wfricW4Wvf6AXFURiBmzi99L4+xFRGfoBc=
Subject key identifier: F7:F7:32:35:E3:23:69:E1:9C:DB:A2:D5:4B:F6:2B:8C:01:80:0E:83
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 12D5
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6E49EB76A7DE11EFA0C3F8A4762E951A.roa
Signing time: Thu 21 Nov 2024 07:58:45 +0000
ROA not before: Thu 21 Nov 2024 07:58:41 +0000
ROA not after: Sat 21 Nov 2026 07:58:41 +0000
asID: 151106
IP address blocks: 102.129.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4821 (0x12d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 21 07:58:41 2024 GMT
Not After : Nov 21 07:58:41 2026 GMT
Subject: CN=673ee835-c300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c2:ae:13:6f:f7:58:f7:1e:66:d9:b4:83:29:
ce:e1:01:32:2d:de:15:2f:17:52:37:13:ab:c5:31:
f6:f4:1b:8c:18:d7:15:65:3d:00:f1:4b:e3:0e:4c:
83:71:9a:52:95:f3:6b:ce:c4:4a:3f:1b:9c:6b:8d:
52:10:3b:a3:07:a1:ea:4a:24:ab:b1:bb:db:35:01:
40:c8:c5:8c:62:a6:21:f8:40:f7:07:b6:1d:ec:f9:
f2:d2:2a:57:fc:25:2d:10:67:4a:4a:d0:2d:af:81:
94:f0:75:71:0f:b2:1e:d3:8d:b6:42:2b:e5:66:07:
db:1e:a8:10:18:92:c5:7d:a2:4c:6a:e5:72:20:18:
ef:1c:2f:ca:9c:94:99:f3:f7:83:44:bc:98:73:5a:
57:b6:ae:e6:db:2e:4f:c9:4d:a0:21:d3:15:cb:8b:
4e:8f:e2:15:d7:b9:cb:15:7d:e1:14:d5:56:6b:cb:
63:d7:99:47:4c:b8:37:ee:29:6f:df:ee:f8:74:d7:
d4:5d:eb:67:d9:26:d8:19:f1:36:84:68:a3:d7:ce:
eb:80:00:6c:68:c2:6d:59:cd:b9:69:a7:96:67:e5:
96:dd:51:fe:b8:84:0c:f9:05:70:3f:8c:62:94:18:
36:2a:86:c9:f2:1b:f4:58:d9:54:4f:5b:66:ce:3e:
f7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F7:32:35:E3:23:69:E1:9C:DB:A2:D5:4B:F6:2B:8C:01:80:0E:83
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6E49EB76A7DE11EFA0C3F8A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.199.0/24
Signature Algorithm: sha256WithRSAEncryption
98:e9:a3:09:ab:f5:30:0e:4d:c5:42:a1:6b:03:24:da:40:7a:
1d:ab:8d:0b:cf:78:5c:c4:64:1e:92:75:77:09:0a:86:bd:be:
cb:38:7e:10:c5:7f:ba:96:0a:34:f3:ec:91:56:0f:c1:3d:a9:
6a:ea:b3:b0:0f:03:dc:c9:8a:aa:fc:23:14:d1:45:f0:98:5a:
c5:6b:5c:a7:46:dc:3c:af:34:2e:98:84:a2:3d:63:55:36:a2:
f7:d9:fd:66:97:6a:1e:c4:7b:57:f9:50:2c:28:8d:de:6e:c7:
3f:a0:02:57:b5:4f:29:cb:6a:5a:f2:03:9e:34:74:d3:b5:79:
81:1e:3f:cd:dd:d8:a4:06:4b:98:1e:40:54:a1:50:43:fe:46:
e2:97:af:d2:8a:57:0a:49:f2:f1:85:e0:40:61:75:cf:57:ba:
04:5e:7c:47:a7:97:e1:78:10:96:29:ca:3a:cd:35:88:31:2f:
e0:c7:a6:29:15:fb:b1:b5:56:97:8b:64:14:1d:bd:b0:08:db:
3f:b6:3c:14:48:fa:04:af:6f:df:b8:90:68:7f:11:ea:10:40:
3a:24:11:be:72:c0:91:7c:7e:f1:4b:ba:8c:ca:92:c0:50:fa:
f8:bc:25:f6:77:40:1c:85:b6:ac:8f:8a:dd:20:c7:0b:5b:3b:
00:d3:42:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:24 2024 by rpki-client on console-ams.rpki-client.org