Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8F8E274E9DE211EFB9BAE8A8762E951A.roa
File: 8F8E274E9DE211EFB9BAE8A8762E951A.roa (raw, json)
Hash identifier: ILuD6vsaf7Td9+GOnDikL9jDmaZcw9FD+P2NIiGIa/4=
Subject key identifier: 45:C3:0E:2E:7D:A7:F9:81:62:51:01:C7:B1:91:11:AE:32:DF:EA:99
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 12A1
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8F8E274E9DE211EFB9BAE8A8762E951A.roa
Signing time: Fri 08 Nov 2024 15:03:07 +0000
ROA not before: Fri 08 Nov 2024 15:03:04 +0000
ROA not after: Sat 07 Nov 2026 15:03:04 +0000
asID: 174
IP address blocks: 102.129.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4769 (0x12a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 8 15:03:04 2024 GMT
Not After : Nov 7 15:03:04 2026 GMT
Subject: CN=672e282b-2c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:db:a2:a0:8a:e2:3c:6b:25:02:46:d8:f8:
ac:44:a0:d4:c1:9a:a9:ae:3c:72:24:e9:69:8f:c0:
9c:eb:6d:a4:7e:e0:5b:11:c3:02:8e:f0:99:0f:5b:
3f:bb:0d:eb:b0:7f:21:4e:6c:46:2f:a7:4a:6e:bc:
a8:6c:b0:1a:1a:63:e8:5a:cd:df:d2:dc:c2:20:b2:
ca:1a:bd:9f:ca:c7:a3:49:f0:fc:0d:10:f4:34:90:
ac:dc:c4:bc:2d:6d:f7:99:28:86:bb:58:96:aa:c5:
60:f0:8c:b5:b0:46:78:41:7b:85:b7:52:14:40:19:
76:28:e1:ff:58:6c:e7:af:30:e8:58:a8:61:63:30:
99:a6:fc:de:5a:f5:07:ef:69:31:17:45:17:d5:a6:
1e:7f:6a:25:01:fc:a3:e9:1a:66:1f:c8:25:29:e3:
8b:59:30:bb:fb:e6:c6:47:53:f0:f4:4a:e4:8e:32:
50:b0:5e:71:ae:3b:69:84:44:5f:b6:4f:5c:00:e2:
72:c3:bd:90:1a:aa:b1:e4:97:9f:ea:9c:b9:a1:45:
cb:fa:57:a1:2b:dc:70:a6:13:dd:2f:da:20:84:bb:
19:c8:5c:23:9f:66:e7:3f:eb:e1:e4:19:dc:a0:5b:
1a:30:5e:b7:f4:3b:0f:cf:b9:2f:5a:35:91:cd:9c:
ae:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C3:0E:2E:7D:A7:F9:81:62:51:01:C7:B1:91:11:AE:32:DF:EA:99
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8F8E274E9DE211EFB9BAE8A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.232.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:a2:9e:7a:12:75:71:72:3c:13:6c:c1:ce:8b:2a:52:19:6b:
88:e4:35:6e:61:57:7b:32:71:cf:52:45:66:ab:bb:c4:40:40:
4b:c1:99:71:b7:32:45:4d:f9:b4:04:ba:62:8c:f1:d6:8b:66:
3e:1c:f4:61:c8:df:5b:02:6d:fa:ab:33:a0:0f:6d:47:22:f4:
12:e1:e5:6f:2b:78:47:43:02:c3:1e:ea:c0:07:4c:53:47:8a:
3e:f6:e5:6c:b8:1b:57:7f:77:75:be:e0:87:b8:9d:81:79:8a:
b4:78:ec:bf:34:39:c2:2e:53:10:8a:b6:1a:c7:53:1c:e2:b0:
3b:df:4f:14:1f:97:d3:65:60:13:09:d1:aa:1b:e4:f2:8a:47:
83:a9:12:4b:5e:d0:ab:7f:d3:cd:cd:98:94:b8:3d:75:46:e9:
2e:48:d9:d8:20:01:d7:f7:42:f7:74:33:30:ee:ce:b8:53:2f:
66:52:e4:ed:2b:80:13:a4:18:93:47:1f:0f:7a:79:c7:d0:dc:
17:8a:34:07:bf:47:3a:68:a3:1d:8e:f4:cf:8f:b5:a7:73:85:
41:d2:b8:23:5a:4c:84:af:db:42:e5:b0:2e:99:6b:2d:33:a0:
b9:47:7a:77:e1:dc:f2:66:34:cb:d3:c9:4e:87:48:54:4f:91:
5b:40:c9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:16 2024 by rpki-client on console-fra.rpki-client.org