Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A0CCEB949DE211EF979EEFA8762E951A.roa
File: A0CCEB949DE211EF979EEFA8762E951A.roa (raw, json)
Hash identifier: 04exgE1VmG3R7e8ZdZdNgo0/YAvHZ6En9wF9BCTzHHg=
Subject key identifier: 1E:76:AC:4A:CE:6F:53:B0:40:E3:DB:40:9A:C5:8F:A7:D6:4B:23:3F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 12A3
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A0CCEB949DE211EF979EEFA8762E951A.roa
Signing time: Fri 08 Nov 2024 15:03:36 +0000
ROA not before: Fri 08 Nov 2024 15:03:32 +0000
ROA not after: Sat 07 Nov 2026 15:03:32 +0000
asID: 174
IP address blocks: 102.129.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4771 (0x12a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 8 15:03:32 2024 GMT
Not After : Nov 7 15:03:32 2026 GMT
Subject: CN=672e2848-8313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:80:c1:c3:d2:7e:9b:6d:44:d5:66:31:d8:28:
df:cd:6f:6b:ea:4d:dc:ed:2d:f4:ff:c1:31:02:95:
a9:1a:8c:2f:4c:fa:0f:cc:f6:3b:d7:fa:87:a5:28:
f3:65:01:c4:9e:49:e0:6a:01:5f:de:d5:74:92:7e:
3e:d4:e1:74:1c:c1:5a:ac:42:fe:6e:91:1b:3d:8e:
61:cf:19:fd:16:ae:aa:ba:e7:bf:b3:85:d3:58:dd:
28:13:77:68:d3:6f:da:c3:b2:37:96:29:70:c4:10:
fa:6c:e2:3c:f3:9c:51:22:4a:a3:80:c9:47:77:17:
82:d1:e1:68:16:58:23:d3:ab:a4:bb:74:85:e2:22:
66:0e:2f:40:06:8d:7f:54:e5:84:39:02:26:cc:a5:
41:c8:02:8d:ac:60:6c:a0:84:e4:40:1e:ef:0e:85:
0f:56:53:75:80:8e:9d:5f:98:95:3b:79:02:12:be:
0a:cd:e8:c8:47:68:ff:15:76:d6:ab:9c:0e:75:02:
11:da:08:6a:f7:31:32:42:50:6a:00:36:2b:ef:70:
17:9b:3a:e2:fc:cd:44:91:3c:46:c2:44:8f:bf:a2:
85:56:bb:bd:10:f3:2a:f6:f2:b9:66:14:c6:b4:77:
81:90:18:f0:73:88:c2:f5:69:09:8c:53:7d:b4:2e:
a7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:76:AC:4A:CE:6F:53:B0:40:E3:DB:40:9A:C5:8F:A7:D6:4B:23:3F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A0CCEB949DE211EF979EEFA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.234.0/24
Signature Algorithm: sha256WithRSAEncryption
06:b5:a9:cc:22:2f:a2:dc:2a:ed:1e:bf:75:86:f0:49:62:e0:
a5:68:20:fd:cf:d5:5a:b2:af:41:a2:69:8a:76:8e:e8:b2:96:
1c:f9:29:e6:16:f5:e4:63:30:fb:12:52:00:61:c5:7d:da:c5:
89:0f:c8:76:40:25:c2:2a:95:b9:2b:43:54:9b:be:b8:4b:62:
4f:10:76:f6:45:59:9f:da:51:f2:df:61:0e:09:6c:0f:fc:ee:
54:0a:1e:38:8c:20:c3:20:d6:e1:74:e5:aa:6c:e5:dd:1c:d0:
2c:6f:98:ed:ba:63:17:cf:b4:ab:70:9a:74:2f:4d:71:2f:d1:
fa:54:57:dd:0b:2d:db:ac:ac:49:54:f0:3b:32:a5:4a:48:86:
e2:56:80:8c:0e:d6:00:45:1c:d3:03:97:77:0a:8f:51:3a:fc:
bb:c9:2c:fd:82:ed:77:26:83:04:d6:7a:c2:18:39:c3:38:b1:
af:c1:b0:3c:29:22:59:cc:31:54:a9:49:cb:aa:1b:9e:07:90:
d0:30:1b:13:a9:d6:73:0e:49:52:6c:d0:0f:3c:3d:22:73:b0:
87:8f:ee:8d:f8:4a:35:43:1c:1c:bf:e7:a3:3e:e8:2d:84:2e:
fc:69:de:6f:76:6a:84:7e:da:2b:bf:fb:44:4b:8f:db:49:2b:
84:81:33:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:11:00 2024 by rpki-client on console-ams.rpki-client.org