Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9957FABA457E11EE942F51584AD9E6FC.roa
File: 9957FABA457E11EE942F51584AD9E6FC.roa (raw, json)
Hash identifier: Iiih1WZnbXjH+vStUnkOlHxn2zqYEYoEcNRwhXkCIww=
Subject key identifier: 70:DC:59:9A:92:EA:27:75:A3:FD:A4:35:49:07:60:6B:38:A4:42:99
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0CEE
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9957FABA457E11EE942F51584AD9E6FC.roa
Signing time: Mon 28 Aug 2023 08:40:54 +0000
ROA not before: Mon 28 Aug 2023 08:40:50 +0000
ROA not after: Thu 28 Aug 2025 08:40:50 +0000
asID: 212238
IP address blocks: 102.129.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Apr 2024 20:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3310 (0xcee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 28 08:40:50 2023 GMT
Not After : Aug 28 08:40:50 2025 GMT
Subject: CN=64ec5d95-ecec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:44:4f:67:fd:ce:8b:9b:57:98:3c:54:a3:b8:
7d:d1:d6:42:e6:f3:f6:b0:43:3d:46:51:45:59:06:
13:c5:0c:ba:cb:72:bf:00:b5:28:d9:a3:8e:8d:17:
70:9b:98:82:6f:34:ee:e4:2b:9a:8a:63:16:83:a5:
3a:ff:7f:b3:0a:1e:89:73:8a:ae:03:4c:94:d7:e1:
3b:db:08:ca:9a:46:74:60:de:81:94:cb:e3:fb:78:
69:46:dc:b4:ea:04:3a:56:2d:3a:b9:2c:90:0f:12:
6e:9e:95:b0:5e:33:56:b2:9b:36:58:c4:55:21:22:
5b:e8:c3:56:ae:63:50:c7:c1:50:20:ab:0f:b9:21:
3a:6a:bd:c0:41:c9:3e:5e:d1:29:8d:86:38:d3:46:
93:85:54:18:c8:a9:c6:01:a3:f0:a8:22:97:e3:b5:
2a:b8:42:4f:26:9b:f9:24:98:66:3c:88:ff:91:dd:
4b:17:c7:b6:46:6c:14:f8:eb:ba:68:00:83:a2:0e:
90:f8:a2:d3:30:23:c5:d6:f8:bd:fa:aa:5d:88:b5:
2b:3d:e8:1e:56:72:d9:9f:63:63:34:07:79:e6:a5:
81:f4:3e:8f:b6:42:f3:d5:ca:ea:05:21:a6:75:f6:
82:85:7e:62:02:8e:ae:2c:b1:fa:07:3e:d6:1c:cc:
90:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DC:59:9A:92:EA:27:75:A3:FD:A4:35:49:07:60:6B:38:A4:42:99
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9957FABA457E11EE942F51584AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.163.0/24
Signature Algorithm: sha256WithRSAEncryption
45:3d:65:b0:5c:dd:83:40:cf:dd:d5:d4:57:f4:93:b3:3d:56:
46:f9:88:f3:de:50:82:85:30:ed:3c:7d:c7:14:46:af:c0:f6:
b0:6b:e6:04:0c:76:0f:5b:e0:76:2a:47:2c:70:ad:92:77:03:
d9:22:f5:2a:21:26:b7:1f:90:98:89:96:51:f2:17:65:b0:75:
06:3a:7e:30:e9:0c:5f:f3:b4:9b:21:cd:5b:3e:13:ab:53:a1:
0b:22:43:c6:30:60:71:c4:90:5c:1e:11:70:f4:c0:a0:e2:dc:
fc:26:a9:e7:3a:74:bc:7d:56:d9:e2:85:00:b5:c9:0c:62:06:
08:6c:6f:d3:66:55:48:0c:aa:d2:8d:9e:6c:82:ad:9c:5d:09:
3e:66:d6:c9:fa:8c:42:c2:74:4d:0e:f5:f9:33:7f:90:70:3c:
b3:c4:10:a3:af:ae:dc:74:8f:2c:1b:7e:3f:8c:51:49:df:71:
43:ac:53:b6:0a:7b:ed:ac:93:61:fd:e0:82:b5:03:21:84:d1:
8b:73:74:95:d2:33:14:0c:9f:72:74:88:ed:93:83:8c:73:08:
5e:53:bc:55:c2:d1:93:fa:60:03:dc:f8:a9:cb:d1:ad:ef:19:
4a:37:96:2f:a0:69:e8:70:86:88:e5:2e:83:e1:f1:b2:f3:95:
19:19:73:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 21:41:48 2024 by rpki-client on console-ams.rpki-client.org