Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9A5C2EA627DA11EFB0CFBB4C7DDC24C2.roa
File: 9A5C2EA627DA11EFB0CFBB4C7DDC24C2.roa (raw, json)
Hash identifier: M/wVIEUwBZcRvPfAtSVC2huSbqvJ6qvlLr6Vdu0WC+c=
Subject key identifier: 65:C3:4C:91:7C:C0:E6:E4:2E:50:CF:A9:81:A8:E5:F5:50:F1:9A:BC
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 10CD
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9A5C2EA627DA11EFB0CFBB4C7DDC24C2.roa
Signing time: Tue 11 Jun 2024 10:08:52 +0000
ROA not before: Tue 11 Jun 2024 10:08:48 +0000
ROA not after: Thu 11 Jun 2026 10:08:48 +0000
asID: 9009
IP address blocks: 102.129.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4301 (0x10cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 11 10:08:48 2024 GMT
Not After : Jun 11 10:08:48 2026 GMT
Subject: CN=66682234-a291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ef:f0:4f:4f:38:a0:a6:69:84:46:6a:ee:01:
78:87:76:4a:7f:bc:b6:70:e0:54:ac:0c:d1:c5:f8:
82:3a:ec:c3:59:32:8c:1a:af:12:1b:7b:04:9c:f1:
4d:6e:a7:6a:7f:86:6b:55:d9:95:f6:84:a3:d9:19:
28:99:38:65:0c:d2:3c:a1:c2:bc:bb:f7:a6:3d:43:
f1:09:10:b5:3a:7b:18:ad:14:21:07:01:41:be:3e:
3c:72:60:74:54:55:e7:4c:55:87:d7:14:00:54:26:
6c:7f:70:26:86:6c:55:41:9f:3c:29:30:f6:83:8e:
e1:8a:0a:2a:0e:32:35:c4:3b:ec:d3:82:a7:1a:2e:
6c:d2:45:22:af:fb:3d:e6:5d:bd:a9:8c:8a:36:bb:
60:c0:6f:72:ce:f1:97:33:bf:31:38:23:79:99:b4:
c3:cc:65:df:30:38:2e:ae:fa:3e:4d:32:6a:e9:64:
08:bf:df:38:64:0a:d5:8a:69:a0:ac:0e:90:bd:61:
fc:ee:6c:87:a2:3e:11:f9:f5:2e:dd:ed:66:8e:4c:
ec:fb:fb:49:65:45:0a:08:3c:e5:12:96:fc:c4:92:
e1:aa:e7:b7:8f:61:e9:67:e7:98:9d:c9:be:de:f7:
03:8b:69:5c:16:24:19:d0:47:93:99:db:ca:ec:7e:
de:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C3:4C:91:7C:C0:E6:E4:2E:50:CF:A9:81:A8:E5:F5:50:F1:9A:BC
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9A5C2EA627DA11EFB0CFBB4C7DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.129.0/24
Signature Algorithm: sha256WithRSAEncryption
85:15:8e:80:41:8a:b6:6d:1f:04:c8:18:51:20:46:98:97:12:
74:f1:7b:1b:3c:a5:80:c0:d2:01:df:2c:1d:ef:a5:3b:c5:8b:
39:56:a6:a0:b5:5b:c7:f6:0b:b6:57:7a:fb:de:65:06:09:c1:
7c:89:b2:b3:7e:ef:ef:78:e8:fa:3a:01:02:17:83:51:78:34:
f4:fc:bf:3e:cd:f7:2e:4c:56:8b:42:a0:4f:76:58:62:a0:93:
a4:db:9f:c6:34:d8:66:ca:c1:6b:96:57:a1:29:f5:af:0f:54:
17:ab:c8:fc:4e:d4:34:3e:02:99:a8:80:05:01:cb:1c:22:1a:
0d:d3:f7:68:ba:77:76:0f:fc:5d:bf:f2:69:45:fc:09:64:f3:
ac:2b:b5:79:54:60:89:cc:35:18:b0:52:4e:84:d2:28:43:11:
af:50:e2:cc:d5:4f:5f:45:e5:fd:b0:fb:db:90:98:8b:03:34:
32:6a:ae:00:fd:ec:59:35:5c:ef:b0:80:76:db:06:67:84:93:
0a:37:6e:4b:38:4a:2c:ad:46:da:ab:6a:fc:94:a2:97:bc:d9:
84:e1:a3:7e:01:04:b1:44:dd:5b:d5:2b:46:01:b6:58:fb:0b:
ca:4b:5b:19:6c:37:3a:79:30:a2:2d:6f:2d:2e:9a:ae:07:db:
78:62:c0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:59 2024 by rpki-client on console-fra.rpki-client.org