Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7254A71CE37511ED8CE3510D306D8C1D.roa
File: 7254A71CE37511ED8CE3510D306D8C1D.roa (raw, json)
Hash identifier: iHdn9EgdqrZVnqwELaZlYHvMBw6rZvqe9i4gek9Yqkw=
Subject key identifier: 57:A9:EC:C2:1B:6D:48:99:D3:17:69:A7:AA:DA:03:BA:76:31:C2:FD
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B35
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7254A71CE37511ED8CE3510D306D8C1D.roa
Signing time: Tue 25 Apr 2023 14:28:29 +0000
ROA not before: Tue 25 Apr 2023 14:28:24 +0000
ROA not after: Thu 24 Apr 2025 14:28:24 +0000
asID: 64267
IP address blocks: 102.129.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2869 (0xb35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 25 14:28:24 2023 GMT
Not After : Apr 24 14:28:24 2025 GMT
Subject: CN=6447e38d-2041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:75:bb:e1:8a:b4:e3:f3:8f:de:23:2a:46:c3:
78:e6:71:1c:75:61:14:3c:4f:86:5e:4e:a9:c2:8a:
a6:db:94:cd:7a:2d:5e:db:84:2d:d5:ba:7c:bb:d0:
cf:72:22:cd:b5:53:82:db:6f:61:91:2c:92:0f:df:
08:ad:f4:94:cc:b6:3a:c0:12:c3:d3:d8:be:e2:a0:
7d:b7:7a:a3:d0:c9:3f:bd:98:a9:c2:40:16:60:a3:
eb:57:f5:e0:4c:a8:53:89:f7:88:d9:fb:58:be:05:
0c:49:ea:20:57:ee:c7:77:fd:ac:65:ce:d3:11:e9:
83:bd:58:80:03:e8:33:c8:36:1c:2a:b9:bd:48:25:
7e:ab:ac:bc:63:27:7b:32:22:bb:d5:38:44:81:52:
55:fe:a9:86:b9:4b:83:90:42:c0:75:50:a5:14:91:
0a:65:d9:2f:18:bb:8f:a3:01:cc:91:a4:ef:cf:41:
7c:47:2a:06:ae:e2:0b:c0:3e:4b:23:51:c2:53:63:
a8:ed:9d:1f:51:5e:10:56:24:4b:dc:b7:5b:21:a0:
94:ba:00:b9:14:cb:cb:1e:2f:f3:c8:7e:10:11:b2:
48:85:e2:16:f9:a2:37:c3:bd:41:31:24:78:99:e4:
84:53:50:42:07:9b:1a:cb:97:0d:4e:83:1c:55:2f:
9a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A9:EC:C2:1B:6D:48:99:D3:17:69:A7:AA:DA:03:BA:76:31:C2:FD
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7254A71CE37511ED8CE3510D306D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.247.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:f9:16:96:90:9e:3b:84:2c:ec:ba:20:26:5e:87:83:7b:5e:
20:49:7b:4a:be:22:a3:af:88:ea:d9:4a:fe:12:f6:86:0a:e0:
96:ad:91:10:0d:9b:e4:54:cf:56:b9:16:2f:32:3d:7d:c3:11:
a4:16:18:8a:c8:72:f8:4d:4e:42:a5:3f:3f:6b:09:2d:37:22:
ba:cf:14:c3:d8:a6:17:65:df:bf:69:c0:b8:39:c1:54:14:4d:
f4:a6:0e:08:82:b6:75:a7:ef:39:d4:c4:14:cf:51:46:0d:5b:
db:9b:a0:a5:05:a6:05:b1:79:6c:63:99:b5:3c:d1:82:15:25:
df:d4:a1:4e:c5:3c:c2:ba:4b:2d:5b:7f:8c:7a:2f:42:05:9b:
fc:4a:9f:15:ef:84:b7:ea:1a:e3:f7:1b:2b:26:c5:b8:89:4f:
3b:7d:83:30:7a:04:00:04:54:08:f3:94:d9:e6:71:ac:a3:e2:
80:6c:56:d2:23:a9:29:b2:b6:8c:2c:1a:2f:06:29:f8:5d:6f:
9c:25:a4:88:58:18:3c:20:b6:ff:42:90:29:7f:26:2f:4c:95:
b6:0e:81:7e:c6:40:10:63:d1:45:5d:40:d7:5a:94:02:f6:63:
8d:f3:72:95:f2:ea:c9:16:e2:21:64:c0:b4:c5:5d:8f:35:44:
5f:00:67:1a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCzUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzA0MjUxNDI4MjRaFw0yNTA0MjQxNDI4MjRaMBgxFjAU
BgNVBAMMDTY0NDdlMzhkLTIwNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXdbvhirTj84/eIypGw3jmcRx1YRQ8T4ZeTqnCiqbblM16LV7bhC3Vuny7
0M9yIs21U4Lbb2GRLJIP3wit9JTMtjrAEsPT2L7ioH23eqPQyT+9mKnCQBZgo+tX
9eBMqFOJ94jZ+1i+BQxJ6iBX7sd3/axlztMR6YO9WIAD6DPINhwqub1IJX6rrLxj
J3syIrvVOESBUlX+qYa5S4OQQsB1UKUUkQpl2S8Yu4+jAcyRpO/PQXxHKgau4gvA
PksjUcJTY6jtnR9RXhBWJEvct1shoJS6ALkUy8seL/PIfhARskiF4hb5ojfDvUEx
JHiZ5IRTUEIHmxrLlw1OgxxVL5rVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUV6ns
whttSJnTF2mnqtoDunYxwv0wHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzcyNTRBNzFDRTM3NTExRUQ4Q0UzNTEwRDMwNkQ4QzFELnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgfcwDQYJKoZIhvcNAQEL
BQADggEBAFr5FpaQnjuELOy6ICZeh4N7XiBJe0q+IqOviOrZSv4S9oYK4JatkRAN
m+RUz1a5Fi8yPX3DEaQWGIrIcvhNTkKlPz9rCS03IrrPFMPYphdl379pwLg5wVQU
TfSmDgiCtnWn7znUxBTPUUYNW9uboKUFpgWxeWxjmbU80YIVJd/UoU7FPMK6Sy1b
f4x6L0IFm/xKnxXvhLfqGuP3GysmxbiJTzt9gzB6BAAEVAjzlNnmcayj4oBsVtIj
qSmytowsGi8GKfhdb5wlpIhYGDwgtv9CkCl/Ji9MlbYOgX7GQBBj0UVdQNdalAL2
Y43zcpXy6skW4iFkwLTFXY81RF8AZxo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:16 2024 by rpki-client on console-fra.rpki-client.org