Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/964AE77A4E4B11EFA7DE9AAA762E951A.roa
File: 964AE77A4E4B11EFA7DE9AAA762E951A.roa (raw, json)
Hash identifier: J0ytIIj/i/q1qhWHp2QV56sEAusZiw/5LVH07zUGZM4=
Subject key identifier: 83:F3:FE:CF:CE:A1:D6:32:E3:83:E4:59:4A:FE:C0:FE:44:F5:49:77
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1191
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/964AE77A4E4B11EFA7DE9AAA762E951A.roa
Signing time: Tue 30 Jul 2024 08:13:22 +0000
ROA not before: Tue 30 Jul 2024 08:13:19 +0000
ROA not after: Thu 30 Jul 2026 08:13:19 +0000
asID: 9009
IP address blocks: 102.129.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4497 (0x1191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 30 08:13:19 2024 GMT
Not After : Jul 30 08:13:19 2026 GMT
Subject: CN=66a8a0a2-8946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:10:35:16:dc:eb:d0:bf:f2:e2:1f:06:f8:
fb:f5:05:ee:6c:6f:e4:1c:45:42:0d:b7:2a:80:1f:
f3:9d:de:99:0f:2c:61:e3:e8:a5:ea:64:bf:ba:08:
1f:37:12:26:4c:3e:7e:71:a1:79:be:ae:72:58:d3:
c5:8c:f4:62:1b:21:16:24:e6:06:e1:6f:0a:bb:71:
ae:0a:a0:07:51:b0:fc:93:c8:cb:bc:ee:f5:08:84:
cb:ff:4a:c3:13:7f:61:4f:e1:a9:68:51:65:0f:9b:
d6:54:be:d8:20:36:a7:63:19:2f:f1:ae:c5:b8:12:
7f:3f:ff:28:b5:77:43:7a:9a:be:78:b6:b9:09:63:
40:a7:59:86:51:25:8f:5f:fe:c2:5b:f6:27:16:a1:
4f:4a:e5:03:5b:64:a1:bf:ef:e3:cf:de:3c:d3:0f:
27:08:22:73:bf:3a:2a:1c:6e:60:fc:8e:c4:9e:18:
c6:78:32:75:09:d8:82:83:c5:52:23:87:a2:50:ab:
89:bd:1d:02:1c:6a:6c:31:9a:45:02:94:aa:a1:3d:
a3:39:ba:70:5a:32:7a:09:eb:3d:b7:cc:09:2b:ef:
1b:f6:81:52:86:07:a4:95:2e:05:4d:d8:ac:4a:33:
ce:a6:71:49:58:48:a0:28:cb:bc:27:af:de:c8:e8:
3c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F3:FE:CF:CE:A1:D6:32:E3:83:E4:59:4A:FE:C0:FE:44:F5:49:77
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/964AE77A4E4B11EFA7DE9AAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.160.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:54:63:e8:3b:a5:c2:17:de:8f:a6:b4:f6:f0:8f:ec:c1:f7:
67:9d:a3:d2:e5:b8:fc:5d:eb:a8:88:b3:c5:da:64:c6:a9:45:
d6:e1:7c:e4:68:d9:f5:4f:e6:ad:2b:c4:6f:fe:e4:d0:6c:6c:
02:a8:20:2f:77:5a:9f:37:12:1b:29:1e:36:39:1c:c7:2b:3e:
22:b7:7d:8d:82:4c:d8:af:29:02:6c:3c:cd:23:d0:f9:38:6e:
2d:e9:6f:27:42:93:ba:d8:27:36:0c:23:a2:36:58:f4:ef:e2:
d6:e5:39:72:74:1e:29:85:f3:2e:37:b2:f8:36:66:32:38:76:
b1:70:45:af:a7:b8:b8:34:f9:a5:a2:61:46:33:1c:5b:00:b2:
47:5f:3c:8a:e8:07:17:9f:06:0a:21:9b:83:95:1e:9b:33:b8:
05:6f:2b:08:c2:45:59:61:3c:b7:d4:bf:e0:2c:d8:e2:69:ec:
a7:37:d0:20:4e:b2:18:9a:9e:78:cb:ab:9f:9c:bc:79:9b:0a:
9b:8f:1a:bd:cf:60:2b:fa:ca:e4:95:59:db:bc:84:37:6e:a6:
0c:d0:e7:27:17:e4:b7:8c:a4:db:ae:30:f6:9b:94:2f:01:59:
0f:f4:2c:e2:1a:5f:2c:7e:dc:0c:13:da:4f:05:01:5d:cb:28:
a6:48:fc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:59 2024 by rpki-client on console-fra.rpki-client.org