Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/915AA0B6EFCE11ED9DBE2B384AD9E6FC.roa
File: 915AA0B6EFCE11ED9DBE2B384AD9E6FC.roa (raw, json)
Hash identifier: T/dyLu47g2P5U2dH78o5AkeKwG8M6cFxp2eQZUfgUbY=
Subject key identifier: 15:05:F0:ED:93:EB:0E:98:91:D2:CA:7E:84:65:53:7F:C8:0A:71:0B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B65
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/915AA0B6EFCE11ED9DBE2B384AD9E6FC.roa
Signing time: Thu 11 May 2023 07:36:40 +0000
ROA not before: Thu 11 May 2023 07:36:36 +0000
ROA not after: Sat 10 May 2025 07:36:36 +0000
asID: 61317
IP address blocks: 102.129.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Apr 2024 00:04:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2917 (0xb65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 11 07:36:36 2023 GMT
Not After : May 10 07:36:36 2025 GMT
Subject: CN=645c9b08-5f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b4:e0:74:1a:6e:22:51:38:7e:6c:d4:f5:76:
28:47:43:e6:30:ee:03:b7:33:d8:d4:dc:e9:67:b3:
4d:6a:49:5e:93:55:3b:31:45:e4:78:fb:18:95:01:
62:1f:4d:9f:e9:ba:76:27:f9:5f:d9:c6:ce:41:c6:
7a:dd:dc:4c:e0:23:36:7f:fd:07:93:87:f2:96:04:
c7:4c:83:80:4a:e2:a1:57:1d:06:d7:96:eb:9e:c2:
58:63:f5:41:fe:b8:8a:00:6a:74:60:07:ad:d2:31:
09:20:6e:c1:7d:5a:30:69:5c:43:7c:ce:e8:08:5b:
37:bf:59:7c:48:3a:ac:d6:ba:bb:40:35:dd:0a:a8:
19:f0:34:23:fe:be:cb:66:45:8e:a9:62:f5:4d:77:
73:e5:7e:94:8b:27:8b:5e:61:a7:34:2b:b3:11:12:
e2:8e:0f:1d:1b:ae:4f:84:82:40:d0:44:75:15:77:
69:03:eb:97:10:59:1d:86:0d:3c:2b:3d:ca:94:c5:
81:bd:b8:56:c0:5a:d7:27:00:94:de:9a:05:5a:c9:
f1:bc:44:74:85:00:b4:98:70:eb:0f:52:2d:64:12:
06:e5:39:34:4b:ef:c1:bb:b9:0b:7d:96:9a:02:f6:
9a:52:d8:2d:46:30:0a:49:13:35:40:9e:13:01:2c:
fc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:05:F0:ED:93:EB:0E:98:91:D2:CA:7E:84:65:53:7F:C8:0A:71:0B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/915AA0B6EFCE11ED9DBE2B384AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.151.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:52:ac:71:fc:00:01:50:9a:70:26:52:ce:09:10:ab:c8:2e:
6c:fb:f3:dd:77:5d:5b:09:f2:e5:0a:c7:1f:03:61:5c:bd:34:
61:3a:2e:84:21:f1:0d:12:57:e5:f1:79:44:53:c9:0c:08:a5:
4f:12:21:e2:17:90:88:ac:81:24:c3:d5:4c:61:71:71:90:d3:
58:2f:88:c6:92:52:65:bc:8d:2e:d7:2c:2d:0c:c4:3c:b3:39:
9b:25:ee:b0:79:88:52:aa:9c:ef:f0:42:30:bd:77:88:4b:b5:
01:41:e7:23:08:18:77:38:a9:ae:1a:df:29:89:e9:d9:3c:28:
f6:b0:b4:1f:65:9d:4b:3d:47:71:7a:05:52:ad:22:7d:42:31:
25:8b:1e:f4:2f:16:75:34:af:2b:ef:fa:0c:13:43:22:55:23:
89:33:74:c5:14:20:0b:71:3f:e7:38:98:20:27:d3:b9:90:fa:
33:2d:34:0a:d3:8f:8a:a5:61:0e:d4:5b:4a:29:77:af:2a:2b:
0d:7a:93:91:01:c4:49:84:73:f6:77:30:80:23:3e:f4:8e:eb:
86:5a:70:d2:fd:7e:1f:70:7e:3b:7b:82:f5:9e:be:e5:2f:e6:
33:b6:cb:93:14:a7:16:80:ff:92:4d:52:e7:fc:4e:9d:2e:d8:
ef:2b:5b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 02:02:28 2024 by rpki-client on console-fra.rpki-client.org