Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7FF0ED98A7DE11EF9B8C0AA5762E951A.roa
File: 7FF0ED98A7DE11EF9B8C0AA5762E951A.roa (raw, json)
Hash identifier: NQTLRo9bvFFq3+wDN8Un4JiF9abd6YqKNdQ3qMK78yw=
Subject key identifier: AB:14:FA:1A:01:73:5E:54:76:BD:52:21:D5:CD:58:C9:A1:81:A1:36
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 12DA
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7FF0ED98A7DE11EF9B8C0AA5762E951A.roa
Signing time: Thu 21 Nov 2024 07:59:14 +0000
ROA not before: Thu 21 Nov 2024 07:59:10 +0000
ROA not after: Sat 21 Nov 2026 07:59:10 +0000
asID: 151106
IP address blocks: 102.129.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4826 (0x12da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 21 07:59:10 2024 GMT
Not After : Nov 21 07:59:10 2026 GMT
Subject: CN=673ee852-8aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:53:2e:b5:25:33:ee:6c:9c:41:34:c8:c4:50:
38:87:6c:26:f0:17:9b:2c:e2:7a:63:7e:de:34:1e:
59:91:80:9d:b1:96:1a:8c:cd:e3:da:8d:02:3a:f0:
c7:41:22:cb:35:17:16:8a:7d:ce:7e:05:06:f9:89:
80:a7:48:ff:64:1d:f0:58:84:6d:27:6b:ee:4a:8f:
9d:b7:ee:b1:34:ef:0c:9c:55:4c:37:3e:9e:fc:58:
b2:30:e1:62:52:b5:29:b6:a7:d2:ec:b8:25:28:bc:
68:0c:ee:5a:5f:56:3c:34:06:f0:d9:d1:c7:4c:b8:
68:a6:57:78:2e:2a:2e:aa:3b:f0:f2:f1:8c:d3:f6:
a1:b9:2b:51:f5:82:25:2c:93:5e:33:60:1c:8a:c3:
76:56:f9:3f:ba:06:db:b0:60:8d:7a:d0:0f:04:a6:
ca:45:ae:82:2e:b9:6e:29:71:75:fa:7a:1e:d5:9e:
97:51:11:de:a3:a7:fb:b7:92:2a:e0:c8:33:3f:42:
0d:d7:5f:7a:6f:f9:4e:17:e5:d1:b9:ab:fc:17:b8:
4d:02:22:c5:4f:a0:bd:53:ee:4b:94:5b:71:63:51:
80:f8:db:c7:09:74:54:f3:6d:af:a0:3c:11:46:e2:
d2:2e:9e:0c:a7:59:d3:e3:d1:36:59:aa:95:84:3f:
f5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:14:FA:1A:01:73:5E:54:76:BD:52:21:D5:CD:58:C9:A1:81:A1:36
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7FF0ED98A7DE11EF9B8C0AA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.209.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:c0:f6:58:c0:27:46:dd:e9:8f:4b:23:f7:d3:dc:d4:03:8b:
98:ed:de:ff:5e:ee:37:e3:00:08:bd:99:7d:95:1a:21:7b:3e:
1b:94:29:bc:5a:f7:a5:f4:ba:ec:33:a1:ae:1a:47:57:b2:73:
99:b1:4d:bf:21:c9:90:74:03:bb:b6:c9:24:4d:11:4e:ac:92:
38:8f:a2:9e:d9:34:82:88:64:00:4c:0d:fd:b7:51:e7:f9:3d:
73:81:0b:54:02:ce:db:ad:bd:b2:7d:53:35:cf:71:1e:a5:8b:
4a:45:67:ea:8c:d4:32:3a:f6:94:14:e2:1c:c9:6b:c8:2f:cb:
4e:82:a0:b8:9a:4a:12:72:f3:4f:ca:a9:da:3c:77:bf:d4:d4:
dd:c0:af:c5:c2:4f:b0:2f:b2:07:15:ac:a1:35:6a:e3:78:e4:
7c:5b:8f:77:85:f7:e3:6b:d9:ec:48:7a:2b:81:72:f4:be:4e:
3d:0b:f6:c7:58:91:25:b6:0a:a2:74:ab:93:70:9d:18:4b:82:
ae:1e:10:4e:7e:b6:b7:05:c1:89:48:0d:2c:24:2c:31:f6:00:
2d:88:d1:09:ce:7a:c7:d7:af:6c:53:f0:9e:95:f9:22:ba:07:
03:23:fa:df:0e:67:96:c2:d6:ae:6c:96:4e:ab:09:33:2a:bd:
83:4e:5f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:16 2024 by rpki-client on console-fra.rpki-client.org