Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/85DBFE8C297111EF9D1AA2237DDC24C2.roa
File: 85DBFE8C297111EF9D1AA2237DDC24C2.roa (raw, json)
Hash identifier: pqlP9rogUDY5TcWMcFdUofDK1rITN6a4fYfaKFxmfvM=
Subject key identifier: 10:F8:C7:8A:27:96:DB:21:BD:8A:15:C8:2E:A6:F0:12:1C:36:00:68
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 10E5
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/85DBFE8C297111EF9D1AA2237DDC24C2.roa
Signing time: Thu 13 Jun 2024 10:41:43 +0000
ROA not before: Thu 13 Jun 2024 10:41:39 +0000
ROA not after: Sat 13 Jun 2026 10:41:39 +0000
asID: 9009
IP address blocks: 102.129.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4325 (0x10e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 13 10:41:39 2024 GMT
Not After : Jun 13 10:41:39 2026 GMT
Subject: CN=666acce6-a1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:84:34:1a:68:6a:91:b9:44:27:0c:c7:3b:c4:
81:ce:fa:d8:3a:32:2e:ab:5d:6a:f3:52:16:e6:f2:
92:71:5c:0d:0b:b4:0f:d2:3f:13:e1:d4:85:d9:32:
9c:40:5f:22:cc:95:ab:35:cf:4c:b2:da:2e:10:01:
0a:4b:c8:43:ae:e7:4b:a6:8f:cd:a5:c9:30:b8:e1:
48:87:ca:41:a4:eb:53:d4:fe:44:2e:fa:34:cf:8a:
3c:d8:96:63:58:f7:80:32:e9:e7:d1:c2:0a:97:0b:
62:4b:c9:ae:58:58:a7:b0:2b:8f:c7:ff:04:24:f2:
46:c9:de:14:f2:1d:98:bd:a6:b1:ca:73:14:6c:13:
93:d7:89:d4:96:1b:fe:7a:25:64:58:63:52:04:81:
f0:a3:84:bf:b6:b4:9b:2c:c0:57:8f:0e:65:5e:93:
04:0c:33:2b:c7:f9:b9:c3:4a:8b:fa:d8:3c:ee:ac:
93:63:c1:d7:04:cc:c8:a7:c2:c9:0c:b3:9f:9a:9c:
07:cd:d1:8b:b0:8f:d6:2c:b7:84:ea:27:0b:a7:d9:
10:52:19:e4:10:c2:b5:cf:bd:b3:89:c6:9c:37:ce:
74:f9:4d:83:c6:3f:6c:56:1e:a3:75:d9:17:e3:ea:
a9:29:7a:f2:93:84:39:0e:a8:4e:36:43:31:ed:f5:
43:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F8:C7:8A:27:96:DB:21:BD:8A:15:C8:2E:A6:F0:12:1C:36:00:68
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/85DBFE8C297111EF9D1AA2237DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.193.0/24
Signature Algorithm: sha256WithRSAEncryption
47:72:d9:28:da:0d:88:28:ce:8d:a2:63:90:ab:5a:80:a7:23:
a3:65:fb:d3:21:32:fd:c6:be:4a:22:75:bb:ff:a0:26:d6:0c:
fb:97:06:9e:8a:5f:c0:9b:29:c3:42:3c:71:14:ca:3d:86:1a:
e2:b7:6e:2c:95:ba:1b:4d:f9:10:ea:7f:6f:e3:ec:91:5c:d5:
f7:e0:5d:5f:61:68:a2:c3:5d:df:93:1e:2c:37:75:90:f1:6b:
2e:09:99:c4:75:07:92:c6:8a:18:ad:58:10:9c:58:85:e4:01:
4d:59:92:37:7a:5c:29:0f:43:76:11:5d:09:10:68:1b:4e:6c:
9f:0b:14:62:62:c9:86:b9:40:02:c2:89:af:22:90:85:d0:91:
9f:8c:7f:51:58:66:01:e7:72:7c:29:34:fc:c6:a5:d4:0c:10:
e7:3a:7a:65:93:c9:c0:84:67:0a:cb:c3:ab:7c:44:f2:83:fd:
18:03:ee:f1:09:4f:4f:36:0f:32:50:23:e7:93:25:a9:8a:fb:
f2:43:c9:d3:43:e4:66:9c:55:a9:d9:3d:40:60:61:14:67:b2:
01:5a:08:74:9f:82:0f:05:f4:81:df:88:c8:97:59:63:0b:94:
c2:a0:52:c4:de:5d:81:f8:c7:1f:bb:de:fd:4e:48:1a:9e:5b:
d8:da:d9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:59 2024 by rpki-client on console-fra.rpki-client.org