Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/82B9FACC19EC11EFBEF1B227017001B1.roa
File: 82B9FACC19EC11EFBEF1B227017001B1.roa (raw, json)
Hash identifier: j91kx6NkQJNtHTAOzNFFXXbgHNXWHSQLWDuRwwwhPX4=
Subject key identifier: 43:E4:89:3B:90:3A:B1:B9:F8:E9:52:6B:2E:DF:9F:D5:0F:3A:95:27
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1095
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/82B9FACC19EC11EFBEF1B227017001B1.roa
Signing time: Fri 24 May 2024 16:41:47 +0000
ROA not before: Fri 24 May 2024 16:41:43 +0000
ROA not after: Sun 24 May 2026 16:41:43 +0000
asID: 13213
IP address blocks: 102.129.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4245 (0x1095)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 24 16:41:43 2024 GMT
Not After : May 24 16:41:43 2026 GMT
Subject: CN=6650c34b-bae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:74:1c:74:85:5f:ee:f6:6b:f2:55:56:cf:3c:
57:da:8c:6a:10:3b:e1:80:3e:c2:f5:fd:b6:5e:f4:
24:5c:f8:9d:17:c2:c0:dc:65:46:15:23:67:c2:ec:
e5:7e:e2:fa:13:3a:2b:6e:29:2f:c3:bd:42:0a:1b:
09:96:4a:27:61:63:82:c3:65:6d:d3:83:bc:b2:93:
d7:ec:b2:dc:bd:8f:e0:78:54:79:f7:c6:5a:75:5d:
56:68:0c:c5:22:96:2d:85:7c:e4:c8:40:8a:bf:a2:
5e:d1:cd:06:96:cf:5e:05:91:72:1b:cd:b7:4a:69:
8e:13:42:3c:ed:b9:0d:ae:22:bd:ed:28:68:49:72:
2b:b2:9b:89:ab:ff:64:a1:15:f9:b3:fb:75:20:cb:
83:ed:b0:2c:c4:7a:47:26:cf:6f:88:b6:b0:5b:3b:
0b:22:fe:43:6c:35:04:67:a6:b5:c9:c9:86:36:fa:
0f:4a:35:7b:60:07:1f:41:b9:95:0e:60:77:41:96:
6f:94:43:cb:83:20:f2:e1:f8:de:d8:e3:99:52:23:
03:52:cb:66:77:31:bc:ba:d5:5f:0f:52:41:dc:dd:
98:da:88:15:bb:5d:1b:01:21:96:ae:4e:13:16:48:
6f:c9:c5:74:14:72:57:4d:af:04:f1:90:b8:a6:68:
58:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E4:89:3B:90:3A:B1:B9:F8:E9:52:6B:2E:DF:9F:D5:0F:3A:95:27
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/82B9FACC19EC11EFBEF1B227017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.238.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:3d:ca:a1:e3:8a:9c:4e:35:ba:4c:da:b7:9f:cb:34:27:08:
a3:19:92:62:9e:8c:08:e9:b9:88:cf:93:36:40:9f:2e:b4:bf:
8c:c8:6d:f1:9d:58:88:0a:58:0a:32:2e:0d:45:be:99:f4:ec:
72:3f:76:67:9a:15:31:c6:3e:b7:45:05:32:ff:7f:90:d7:df:
f1:73:0b:ec:d7:93:2d:77:30:11:aa:da:00:78:77:7b:8c:5a:
5b:32:49:a7:07:21:45:ea:0a:7a:b3:eb:6c:fb:49:51:00:76:
a9:6b:22:b6:9c:d1:b8:24:3d:e1:60:7d:9d:bf:0a:13:e8:d5:
8f:93:4b:76:9c:75:7d:9d:b7:38:e6:cb:f6:c0:1e:ad:db:af:
2c:50:3f:ea:fc:4d:35:ca:fb:4d:0f:19:e8:b4:54:bd:fd:4f:
3e:9b:1f:03:08:70:09:19:79:08:66:3a:cd:c9:8d:b8:a2:24:
5c:34:4c:eb:1e:95:dc:6c:4f:f2:ad:8e:54:e8:6e:61:01:51:
a1:ea:32:e9:ca:00:11:29:2f:75:84:6d:c2:79:30:0b:85:25:
1f:1b:da:6e:c9:cf:8b:8b:04:fb:77:2b:a3:f9:a4:40:b8:cb:
a2:f1:c9:46:c0:69:c5:f9:5d:b8:40:87:7f:cc:1a:a6:89:bc:
54:09:4e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:25 2024 by rpki-client on console-ams.rpki-client.org