Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8090C334DF2311ED983488F82F6D8C1D.roa
File: 8090C334DF2311ED983488F82F6D8C1D.roa (raw, json)
Hash identifier: 0NjYnyI3EmbcYFldL0SWIpvHsvlxTFn/P5Ar+1atGcM=
Subject key identifier: 6B:6F:7E:A1:59:CC:58:C7:67:6E:A2:EC:0D:1B:A4:BF:D1:8D:0B:A1
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B26
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8090C334DF2311ED983488F82F6D8C1D.roa
Signing time: Thu 20 Apr 2023 02:31:49 +0000
ROA not before: Thu 20 Apr 2023 02:31:46 +0000
ROA not after: Sat 19 Apr 2025 02:31:46 +0000
asID: 174
IP address blocks: 102.129.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Apr 2024 20:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2854 (0xb26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 20 02:31:46 2023 GMT
Not After : Apr 19 02:31:46 2025 GMT
Subject: CN=6440a415-e242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fa:c6:dd:d4:20:51:c5:7c:34:5a:7e:df:dd:
e1:e1:ca:ab:8f:7f:a5:3a:11:48:7f:ab:c3:dc:12:
d0:b1:2c:a7:35:f5:ae:e6:25:f1:40:f2:e2:d2:69:
5e:a4:05:89:b8:28:de:c9:b6:85:82:38:d9:5d:52:
2c:13:fa:61:28:e0:ab:dd:0b:d0:f3:71:7e:60:7e:
12:b6:c8:25:20:14:db:a8:6e:8c:37:b4:da:62:6d:
bd:68:c4:b4:e9:a1:c1:50:fe:12:06:7b:c8:2d:ff:
ca:7b:02:27:54:8f:0c:65:7a:a5:2b:96:3b:10:09:
a4:60:b3:50:83:bf:4b:79:bb:e5:0c:d2:0f:a5:a2:
b6:4b:99:eb:34:74:b4:fa:ba:08:05:c9:b7:0f:95:
6e:f2:3a:a4:16:97:88:06:83:15:eb:23:75:5d:32:
42:c2:6e:bd:87:d9:1f:38:85:f6:49:e6:57:90:b6:
f0:4a:6e:a4:86:51:5f:18:0b:02:06:35:39:ae:e3:
7b:d8:c4:87:aa:26:0c:e2:b8:4f:01:39:65:93:66:
52:83:27:56:16:c3:fe:cc:af:c4:fd:56:19:18:62:
d5:32:4b:76:8e:3a:cf:fb:f3:43:2e:e0:3b:d5:3c:
db:87:0c:95:0f:c8:2c:9c:64:00:66:f1:e0:4b:d6:
05:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6F:7E:A1:59:CC:58:C7:67:6E:A2:EC:0D:1B:A4:BF:D1:8D:0B:A1
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8090C334DF2311ED983488F82F6D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.145.0/24
Signature Algorithm: sha256WithRSAEncryption
58:c4:7c:00:e5:1f:c6:1a:56:1e:75:68:e5:5a:de:57:a5:67:
0f:16:8c:4d:8a:6b:29:e1:15:2f:d6:e8:56:94:63:9d:ef:a2:
4d:b1:b8:3e:d2:6a:b8:52:35:3c:79:35:43:0a:8a:17:bc:6d:
75:2b:6d:cc:b7:d0:18:be:6e:af:69:94:a0:3d:de:d8:fa:d9:
0b:95:eb:88:13:7e:80:b8:47:2c:66:fc:4c:00:4a:9e:f2:e9:
83:16:ae:10:c2:96:5c:ed:20:54:05:85:12:9e:a5:fe:f3:52:
04:4e:48:7e:0c:eb:6d:f4:20:90:49:a0:97:f1:03:4a:b3:12:
f0:90:ae:d6:36:85:7b:d3:30:b2:6b:15:ee:8f:70:d8:4c:76:
0f:34:a3:4a:4f:c2:68:c8:b9:3f:d0:66:2c:c9:dd:95:41:7f:
ad:b8:15:7c:2e:46:e7:bf:ec:cb:67:f6:3e:1d:15:84:ca:94:
39:fa:4f:84:d9:f0:44:ac:04:8b:54:ac:f6:8a:6d:92:0c:9f:
cd:f4:7a:93:dd:f6:0c:fe:b9:00:76:8d:6b:2d:5e:7e:90:67:
cb:26:e3:b5:b6:01:a5:e2:75:89:e1:e2:2b:2b:a1:80:99:1d:
bd:10:aa:dd:29:92:bd:24:a2:92:84:3c:7b:8c:34:c1:ed:00:
2a:ab:e8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 21:41:48 2024 by rpki-client on console-ams.rpki-client.org