Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A6BB870EA50311EFA8D198AE762E951A.roa
File: A6BB870EA50311EFA8D198AE762E951A.roa (raw, json)
Hash identifier: uwf2ZizkI1/EQXcpoAdvPRSj15mWy8Z6UGZI3Q0EH2A=
Subject key identifier: 18:98:9E:3D:29:24:6B:A6:03:88:48:BF:BB:7B:25:07:EB:93:A4:76
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 12BC
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A6BB870EA50311EFA8D198AE762E951A.roa
Signing time: Sun 17 Nov 2024 16:47:37 +0000
ROA not before: Sun 17 Nov 2024 16:47:33 +0000
ROA not after: Tue 17 Nov 2026 16:47:33 +0000
asID: 29802
IP address blocks: 102.129.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4796 (0x12bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 17 16:47:33 2024 GMT
Not After : Nov 17 16:47:33 2026 GMT
Subject: CN=673a1e29-9026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f0:11:4b:1e:10:08:62:44:29:cb:7d:38:f8:
48:b7:e5:dc:1c:8d:89:c6:2f:98:9f:01:92:19:d2:
c8:df:6e:08:f3:28:7f:01:b7:49:08:62:91:ca:4d:
01:0b:5e:88:69:fb:41:b0:54:83:8d:35:b0:5c:c0:
f6:1b:30:77:3c:11:93:89:59:84:f7:4c:01:1f:6e:
e5:e5:3b:82:7b:b1:6a:55:65:63:b1:7c:84:a6:f4:
c8:e2:bb:57:b1:c4:2c:f9:e2:3c:ec:9c:17:ef:1d:
88:29:63:46:4b:6b:57:1d:36:14:ca:83:52:bd:db:
1e:2b:c2:76:57:37:83:4c:95:80:59:87:57:bb:b6:
f5:23:1a:f9:d4:ad:61:9a:53:61:72:b7:8c:fe:2b:
9b:eb:a8:52:9a:a7:75:f1:e2:00:0f:c5:d8:82:02:
43:39:40:e2:fc:69:3b:fd:d0:cd:f3:d3:7b:aa:b1:
94:5b:a3:8f:77:34:e4:b4:28:6a:de:5c:b2:44:05:
8a:ad:a2:09:14:97:1e:28:d1:56:b8:22:67:4f:56:
e0:c4:23:90:08:79:04:0f:df:4f:c6:7e:5e:42:fa:
21:00:bb:5f:de:18:06:a9:cf:f1:69:9d:03:33:41:
fa:19:71:bd:4f:85:29:ee:9d:98:21:8a:f3:c2:ad:
1b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:98:9E:3D:29:24:6B:A6:03:88:48:BF:BB:7B:25:07:EB:93:A4:76
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A6BB870EA50311EFA8D198AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.134.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:87:9c:9d:41:06:cb:3e:e0:61:ed:db:74:3a:b8:56:15:79:
47:b2:e2:ae:7c:bc:0a:19:5a:84:07:31:f3:c6:4c:8a:8c:6a:
0f:13:99:52:be:2c:92:d7:7a:ff:54:1a:e0:eb:dd:ef:48:14:
15:64:f1:77:cd:d6:3e:cd:86:b8:08:f8:d8:3b:10:f9:6a:96:
26:66:59:65:13:36:3c:66:7f:a9:28:0f:85:74:88:b9:64:c8:
fe:87:4b:74:f5:d1:ab:51:c8:e0:a4:19:18:15:7e:be:c7:f9:
e7:92:de:f6:fd:4a:90:36:7d:ad:ba:e3:c8:e8:8d:bf:46:cb:
d2:12:a1:80:95:c9:58:8b:f9:c8:56:b2:83:0f:7a:45:f4:0a:
31:69:a3:cd:2c:5f:8e:ea:e9:ca:93:4e:a6:19:80:67:3f:1c:
dd:e6:36:48:5b:e1:79:79:f4:a8:f9:57:c2:72:9b:6d:4d:61:
b1:f1:8d:59:3f:b5:3b:4d:9f:d3:ae:5f:81:a9:9a:23:af:39:
e8:d0:bd:cc:b6:16:b2:c3:23:a2:7f:46:c7:37:ac:a9:10:dd:
3c:26:f8:ce:4b:bf:11:87:40:03:a1:14:e2:d4:0f:ff:0a:2b:
9a:58:80:f8:db:79:0b:eb:ea:74:d1:c9:21:ff:c8:94:59:25:
63:07:e9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:16 2024 by rpki-client on console-fra.rpki-client.org