Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/931B66FA3A9211EF88D1879D762E951A.roa
File: 931B66FA3A9211EF88D1879D762E951A.roa (raw, json)
Hash identifier: 1gCWjoY9C6pIVPkk8TKY0v+Yepchf9gzUC4dbI6JPEk=
Subject key identifier: E1:B0:E1:F4:8C:49:79:E7:C1:33:BD:4F:D6:0B:21:F8:A4:A8:6C:78
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 113E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/931B66FA3A9211EF88D1879D762E951A.roa
Signing time: Fri 05 Jul 2024 05:51:08 +0000
ROA not before: Fri 05 Jul 2024 05:51:04 +0000
ROA not after: Wed 05 Aug 2026 05:51:04 +0000
asID: 61317
IP address blocks: 102.129.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4414 (0x113e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Jul 5 05:51:04 2024 GMT
Not After : Aug 5 05:51:04 2026 GMT
Subject: CN=668789cc-f8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:37:89:a0:11:8c:16:aa:d2:8c:97:d8:8b:
f3:e5:a3:84:ea:b0:33:4d:55:e8:bd:4a:f8:3e:29:
94:00:d1:9d:72:1a:ee:57:19:6c:15:7c:df:6c:65:
72:a8:ec:86:b2:78:00:80:1e:6b:0f:67:17:93:cb:
f5:a5:64:e8:fc:50:06:79:75:40:13:e1:d1:cb:81:
77:d9:cb:0b:08:01:75:7a:3b:b5:bd:90:42:f2:d7:
e7:12:c2:be:78:be:f7:70:2d:d4:ef:38:e0:ea:9a:
0d:1a:e7:f9:76:94:b9:53:e1:0e:73:e6:14:91:41:
1f:c3:24:40:aa:26:33:20:ad:27:52:c5:58:7a:f6:
79:05:3a:fb:94:b5:37:32:8c:41:8b:fe:db:9d:a3:
ba:cd:a0:c2:a7:37:48:a3:06:65:ba:ca:52:08:39:
21:eb:5f:32:27:a5:fd:0d:b7:15:ae:5f:9e:45:e9:
3a:26:89:6e:8d:3f:f3:28:5b:45:30:a5:a0:9f:f9:
6d:48:e2:a6:cc:10:12:e8:77:e1:4c:f8:5c:b1:67:
05:cc:8f:e2:2d:e8:81:49:64:a4:87:f0:8f:ec:55:
18:71:6e:0e:6a:08:7b:bb:34:fb:d5:d3:a1:a6:4c:
25:a0:e2:3b:80:e9:ef:b0:18:54:39:4d:4b:6d:c6:
e1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B0:E1:F4:8C:49:79:E7:C1:33:BD:4F:D6:0B:21:F8:A4:A8:6C:78
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/931B66FA3A9211EF88D1879D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.134.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:b4:4c:0e:c1:5c:42:dd:d6:63:b1:68:d1:f8:c4:30:3c:e3:
85:30:e1:cd:fe:6d:e1:69:fb:62:d7:d7:86:8b:17:b5:bd:b0:
b2:ff:46:de:b2:f9:50:49:14:ce:55:79:09:1c:f3:7e:fe:1d:
f4:95:83:0b:a5:d9:22:30:66:f5:ae:27:54:c0:7f:c3:a7:64:
10:91:97:42:75:41:e5:9c:a8:cd:8d:52:55:bc:9d:84:f7:5b:
2b:4f:30:4d:e1:f3:9f:ce:43:1b:fa:57:db:93:4e:6e:e0:60:
f4:a5:43:a6:c4:c4:02:3c:94:43:7c:d8:95:a7:d3:4f:74:86:
cf:e7:35:19:28:04:ff:e3:6f:a9:fc:64:e9:77:7a:8b:3e:36:
79:12:e7:f3:83:39:c9:fa:c6:f7:5b:2d:10:0e:0d:6e:99:d7:
65:bf:25:05:8b:c9:ac:13:a4:06:57:6b:34:95:93:5a:ff:88:
21:74:90:91:2f:c5:aa:f5:2c:af:67:06:ff:28:6a:78:25:66:
bd:42:5c:3c:75:1f:a2:83:46:7e:41:12:f5:ce:84:f2:4a:e5:
84:29:ac:95:45:49:03:38:1f:9d:97:59:52:12:38:73:c1:bb:
06:1f:41:a7:49:e1:b2:a4:1c:76:4f:93:77:bb:24:06:43:36:
98:39:a0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:14 2025 by rpki-client