Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9A76A0C25F3811EDA03700D2F1222468.roa
File: 9A76A0C25F3811EDA03700D2F1222468.roa (raw, json)
Hash identifier: JK70ZnGeNe1ZxWMoYmMQ2GbW9S2VdDH7pzN//41UoXU=
Subject key identifier: A7:D0:D6:86:5D:25:54:6C:7E:05:C3:D9:0A:85:64:3D:DB:C5:40:DB
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 08CE
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9A76A0C25F3811EDA03700D2F1222468.roa
Signing time: Tue 08 Nov 2022 07:40:23 +0000
ROA not before: Tue 08 Nov 2022 07:40:19 +0000
ROA not after: Fri 08 Nov 2024 07:40:19 +0000
asID: 147176
IP address blocks: 102.129.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2254 (0x8ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 8 07:40:19 2022 GMT
Not After : Nov 8 07:40:19 2024 GMT
Subject: CN=636a07e7-1027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e1:45:a5:a0:12:18:ec:a0:ad:27:5e:db:f3:
f3:81:9e:97:36:b8:b4:22:fa:1b:fb:4c:85:f1:53:
20:ea:fd:3c:34:39:84:63:c3:12:01:08:46:2f:ca:
fc:52:d1:7f:f9:fe:ff:75:d2:c0:b8:54:e0:c4:b3:
a7:5a:13:f9:5b:96:88:f0:de:d2:7f:1a:77:bc:f1:
82:91:73:5c:2a:99:cc:5a:63:01:49:98:d4:f5:33:
76:f2:ef:0f:1b:a9:fa:20:1e:a8:16:53:d3:97:76:
d7:4a:a0:16:f5:2b:1e:27:24:3b:c8:93:eb:44:eb:
55:4e:47:e7:d2:1d:cf:f8:c1:77:a1:5b:ee:a1:fd:
1c:22:50:fe:51:34:3a:fa:92:b0:33:f5:ac:3f:42:
68:f4:ed:4e:fa:c6:24:f0:8f:40:67:fb:60:ab:97:
c8:ec:b5:91:31:6e:35:3e:ee:4d:30:5b:6b:0c:cd:
27:56:fc:26:34:98:4d:56:97:cc:73:aa:4b:0c:58:
2b:c2:a5:f6:5e:9a:85:ea:c7:aa:d2:54:12:b5:ff:
e0:1e:1a:70:55:44:ee:22:ff:ac:cb:bb:85:d5:e6:
75:b3:58:fb:c5:65:d2:8a:6e:3c:93:82:eb:95:7a:
50:d7:d8:f8:47:bb:19:b4:28:98:05:e1:dc:d4:2b:
d7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D0:D6:86:5D:25:54:6C:7E:05:C3:D9:0A:85:64:3D:DB:C5:40:DB
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9A76A0C25F3811EDA03700D2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.139.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:fe:8f:72:a5:b5:6c:7e:6d:f1:25:ae:19:a5:39:4f:24:db:
7d:d6:ab:90:10:33:e9:6d:19:a5:de:ad:33:a7:46:3d:ff:93:
2e:08:a1:ce:e5:42:79:f7:0c:4f:1c:bb:1e:60:63:43:17:c5:
95:da:20:70:b8:b9:6b:bc:0d:fb:1e:0d:01:60:88:8b:3d:53:
c4:a0:2f:20:81:84:1e:42:0a:40:9b:94:1c:01:ff:0d:9a:7d:
34:3e:10:12:61:85:df:e3:79:01:b1:f1:4e:ae:2a:37:48:4b:
55:c4:52:66:50:2c:cb:e7:d5:0e:a8:5a:4b:b9:35:68:36:2c:
92:91:48:7a:bd:ac:69:4a:4b:34:fe:9c:94:2b:29:f1:f3:d9:
71:d1:6c:e2:a6:2c:1a:94:bf:09:ae:46:be:aa:9a:86:18:91:
9c:46:2b:e9:3d:58:96:d7:b8:db:08:9e:53:80:ba:47:1c:c7:
75:a9:7c:c3:34:9a:44:29:55:f9:7a:77:9d:49:9e:ed:ed:b9:
13:df:a8:d4:5c:5f:84:7f:ba:d0:c3:3c:88:38:cd:2c:86:f9:
d4:79:df:4f:a4:56:2e:67:e7:d8:ef:e1:d1:22:4a:50:b3:b2:
c9:00:cf:69:1a:12:72:26:58:17:a2:6b:54:5f:3d:94:aa:09:
8d:f1:ec:30
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCM4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMjExMDgwNzQwMTlaFw0yNDExMDgwNzQwMTlaMBgxFjAU
BgNVBAMMDTYzNmEwN2U3LTEwMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDV4UWloBIY7KCtJ17b8/OBnpc2uLQi+hv7TIXxUyDq/Tw0OYRjwxIBCEYv
yvxS0X/5/v910sC4VODEs6daE/lblojw3tJ/Gne88YKRc1wqmcxaYwFJmNT1M3by
7w8bqfogHqgWU9OXdtdKoBb1Kx4nJDvIk+tE61VOR+fSHc/4wXehW+6h/RwiUP5R
NDr6krAz9aw/Qmj07U76xiTwj0Bn+2Crl8jstZExbjU+7k0wW2sMzSdW/CY0mE1W
l8xzqksMWCvCpfZemoXqx6rSVBK1/+AeGnBVRO4i/6zLu4XV5nWzWPvFZdKKbjyT
guuVelDX2PhHuxm0KJgF4dzUK9ejAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUp9DW
hl0lVGx+BcPZCoVkPdvFQNswHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzlBNzZBMEMyNUYzODExRURBMDM3MDBEMkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgYswDQYJKoZIhvcNAQEL
BQADggEBAND+j3KltWx+bfElrhmlOU8k233Wq5AQM+ltGaXerTOnRj3/ky4Ioc7l
Qnn3DE8cux5gY0MXxZXaIHC4uWu8DfseDQFgiIs9U8SgLyCBhB5CCkCblBwB/w2a
fTQ+EBJhhd/jeQGx8U6uKjdIS1XEUmZQLMvn1Q6oWku5NWg2LJKRSHq9rGlKSzT+
nJQrKfHz2XHRbOKmLBqUvwmuRr6qmoYYkZxGK+k9WJbXuNsInlOAukccx3WpfMM0
mkQpVfl6d51Jnu3tuRPfqNRcX4R/utDDPIg4zSyG+dR530+kVi5n59jv4dEiSlCz
sskAz2kaEnImWBeia1RfPZSqCY3x7DA=
-----END CERTIFICATE-----
Generated at Fri May 3 03:10:42 2024 by rpki-client on console-ams.rpki-client.org