Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/89940250DF9C11EEAC25FA95775412E6.roa
File: 89940250DF9C11EEAC25FA95775412E6.roa (raw, json)
Hash identifier: GXGYeT2/FFXPyTXvle0zWOm97NlsidC9G0XRdx/oazs=
Subject key identifier: 85:C3:4A:48:04:80:E6:1B:44:22:89:DB:15:5B:8C:54:B5:B2:7F:08
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0FC8
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/89940250DF9C11EEAC25FA95775412E6.roa
Signing time: Mon 11 Mar 2024 11:43:11 +0000
ROA not before: Mon 11 Mar 2024 11:43:08 +0000
ROA not after: Sat 14 Mar 2026 11:43:08 +0000
asID: 212238
IP address blocks: 102.129.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 30 Apr 2024 00:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4040 (0xfc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 11 11:43:08 2024 GMT
Not After : Mar 14 11:43:08 2026 GMT
Subject: CN=65eeee4f-d655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:fb:e0:16:18:1f:d9:41:a9:6c:80:6f:0c:
30:f1:5e:cf:b8:a6:2f:34:79:49:39:3b:3c:73:16:
e0:5d:4b:f1:25:8b:0d:ef:ab:11:fb:c5:8f:f6:8b:
29:c3:c8:df:46:64:0a:84:f8:d3:ce:3d:13:28:f2:
c8:4c:fd:c8:38:69:bc:28:a0:9f:94:ae:0e:c9:3a:
b4:83:ae:be:b3:c3:9f:c0:ec:2a:da:93:43:0e:1a:
82:78:8b:0d:00:fb:d0:c6:9c:b3:b5:df:d8:75:3e:
f2:88:23:00:46:a9:f6:42:15:54:94:4d:c6:1e:ef:
b5:8a:b7:1a:ce:31:03:e6:e9:77:ee:eb:1e:97:4d:
39:58:ba:b3:e3:5f:ed:19:8e:67:f8:c3:af:9f:d4:
fc:4a:5b:af:66:05:0d:0b:da:6d:dd:29:2b:99:8a:
e4:45:f7:09:47:f6:7c:58:67:b0:8b:4e:da:9a:63:
25:04:0b:e0:d7:7e:8f:b3:bb:92:4d:94:ed:29:47:
6a:0b:aa:b8:45:cc:e4:48:2d:46:fc:1a:e9:44:69:
98:e5:54:aa:5d:04:5d:c0:0c:14:a7:aa:2e:6c:90:
ad:10:5c:9b:32:af:39:93:19:3e:81:15:f2:68:2c:
1d:d8:73:d9:c5:e0:7b:64:88:aa:31:72:b5:f6:a3:
56:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C3:4A:48:04:80:E6:1B:44:22:89:DB:15:5B:8C:54:B5:B2:7F:08
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/89940250DF9C11EEAC25FA95775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:b4:e5:ad:22:5f:57:1e:73:f8:7a:2f:c1:a4:49:29:db:d6:
05:7c:6f:6e:09:45:ad:65:95:10:13:70:64:61:4f:b1:6f:77:
ec:6c:7d:8e:66:30:9c:6d:e3:a5:54:01:02:bf:f4:8f:cd:c9:
a6:51:c4:f1:7e:68:55:0e:9d:64:62:a5:b8:81:23:e9:f5:92:
7e:9c:e4:f1:27:ec:98:fc:42:eb:a6:41:9f:1d:e5:a4:db:5e:
63:75:07:c6:39:24:e4:bb:6b:42:ca:3c:ee:44:af:45:18:0a:
dc:42:06:24:f1:2a:23:ec:af:f7:32:f5:13:c5:b6:4b:fd:9f:
bb:ac:00:57:8b:52:63:52:be:49:1f:22:39:d4:3c:1f:7e:87:
30:62:11:9f:6a:62:71:43:04:4a:c7:06:dd:ce:af:c5:9c:78:
9a:87:46:bb:60:4a:b7:7e:ed:18:63:84:36:4d:1b:c8:af:3d:
0a:ff:5d:2f:0a:76:4d:32:d2:3b:64:ea:28:24:ea:2e:85:99:
70:a9:d9:0a:0e:20:5b:78:73:55:73:8f:74:42:c0:07:c9:bc:
7d:35:3f:68:18:4e:07:aa:59:51:44:88:dd:8b:4a:de:d1:5c:
a0:4b:bf:d1:62:fa:9d:f7:af:48:c4:66:f6:a3:40:1f:c0:b4:
a1:39:a4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:12 2024 by rpki-client on console-ams.rpki-client.org