Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/85FEB910169B11EF9CC2F620017001B1.roa
File: 85FEB910169B11EF9CC2F620017001B1.roa (raw, json)
Hash identifier: dC0H+zVqgSQCflMg40eh6fyAkYDHCswfUUAWIA4QyP8=
Subject key identifier: F1:39:ED:44:77:DF:58:9E:B8:0F:B3:70:D7:79:A2:E4:9D:C4:68:43
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1088
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/85FEB910169B11EF9CC2F620017001B1.roa
Signing time: Mon 20 May 2024 11:24:30 +0000
ROA not before: Mon 20 May 2024 11:24:26 +0000
ROA not after: Wed 20 May 2026 11:24:26 +0000
asID: 9009
IP address blocks: 102.129.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4232 (0x1088)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 20 11:24:26 2024 GMT
Not After : May 20 11:24:26 2026 GMT
Subject: CN=664b32ed-267b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6d:20:cf:f2:be:49:d0:05:e1:ec:7f:0a:5b:
ad:dd:f9:0e:20:38:32:62:58:40:35:cb:95:1a:37:
cc:ec:3d:eb:6f:06:76:27:73:81:5b:b0:49:01:d0:
01:87:ea:71:5c:a1:f3:42:3a:15:13:47:a9:04:6b:
d0:23:56:e5:d3:53:b2:df:3b:74:a3:fa:f7:02:14:
4a:2c:ad:52:5a:bf:d0:a2:b9:3e:e4:68:e7:cf:fe:
dd:81:54:58:71:55:00:75:c6:04:2c:48:b2:23:59:
6e:07:a4:24:9f:c1:9c:44:9d:73:55:46:c3:08:00:
62:ea:f8:b1:75:e2:dc:ec:12:f9:d6:98:57:60:6a:
05:28:58:b3:11:d6:8c:b1:19:63:78:8e:f6:b1:fb:
53:d5:ff:79:38:b3:b9:e9:32:8c:a5:e2:18:18:96:
a3:2b:22:53:cc:dc:3c:e1:93:43:68:10:0d:36:8a:
12:0c:74:85:27:05:08:51:92:ea:47:4e:b5:b8:10:
39:01:f7:a9:33:02:a1:bd:7a:74:bc:2c:4e:31:78:
97:30:34:a8:d3:a1:65:68:a4:33:31:e3:e8:4a:01:
1f:c1:66:b3:40:ae:11:dc:09:f4:70:93:6e:28:53:
f3:6b:a0:dd:9c:f0:64:69:45:64:47:be:07:b1:35:
91:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:39:ED:44:77:DF:58:9E:B8:0F:B3:70:D7:79:A2:E4:9D:C4:68:43
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/85FEB910169B11EF9CC2F620017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.205.0/24
Signature Algorithm: sha256WithRSAEncryption
47:5b:72:9c:10:eb:81:4b:fe:9e:15:7b:83:3b:f7:fc:a1:4e:
db:56:d4:72:a2:8e:bd:2e:15:28:61:a0:80:da:c8:26:d8:e3:
d8:c3:dd:9f:ee:d1:ac:aa:41:72:cb:a7:72:da:b3:8f:e3:4d:
dd:39:37:8f:5f:51:9f:62:03:f5:bc:6a:70:69:d3:8b:68:7a:
52:e6:7c:a8:c2:88:3c:a4:ea:9d:26:ce:67:bd:d2:45:db:ed:
7b:65:8b:cf:47:c1:d2:5b:f2:ce:ff:50:85:23:40:20:62:b1:
56:c8:38:20:a7:fe:dd:5f:9e:81:f8:da:68:6a:43:82:c6:9f:
8c:75:a5:2f:60:0e:6f:30:11:2d:03:46:43:a4:58:4f:f1:78:
06:2d:68:4d:a4:1c:88:a7:4d:b1:95:0e:08:ab:ca:4c:bc:c7:
50:91:24:8c:7f:fe:c9:51:b4:3b:2c:e1:c7:8b:ac:77:ff:4d:
8b:39:b5:72:d2:03:df:4b:be:79:83:36:51:bf:51:b6:34:e1:
b9:f3:1d:e6:c7:a4:75:70:cf:fa:47:42:9b:9d:47:68:bd:bf:
4b:9a:b3:46:36:18:50:9f:a6:7b:9c:e8:f9:34:54:7b:f0:08:
7c:25:63:30:50:c7:e0:b3:a3:c9:e2:ec:cd:b0:3c:10:13:0d:
ed:11:1f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:11:00 2024 by rpki-client on console-ams.rpki-client.org