Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AA8FA8CE37F011ED88189AD8F1222468.roa
File: AA8FA8CE37F011ED88189AD8F1222468.roa (raw, json)
Hash identifier: Xqk/ZUj3LfVuhaMcJ/SHYIj9Cu6Kjb5QtM8szzn+c7Y=
Subject key identifier: 5B:DD:DE:E6:4A:6E:F5:51:37:35:8F:A3:62:70:21:A6:CA:8C:C8:84
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 07F5
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AA8FA8CE37F011ED88189AD8F1222468.roa
Signing time: Mon 19 Sep 2022 07:57:11 +0000
ROA not before: Mon 19 Sep 2022 07:57:07 +0000
ROA not after: Fri 20 Sep 2024 07:57:07 +0000
asID: 1239
IP address blocks: 102.129.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Apr 2024 00:04:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2037 (0x7f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 19 07:57:07 2022 GMT
Not After : Sep 20 07:57:07 2024 GMT
Subject: CN=632820d7-07e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:23:91:77:25:f5:69:42:d8:95:7a:9d:57:d7:
78:4e:70:51:59:8f:32:ca:c5:38:80:7f:56:fd:0d:
bf:30:1d:ad:9a:b3:a0:b6:e2:25:8f:6f:12:c1:0e:
c6:de:73:a6:0a:16:dd:1b:65:2b:42:b8:a6:2d:ab:
2f:ba:ac:21:de:c5:03:0f:02:0d:6a:e2:bb:87:00:
4a:1c:4c:ac:8d:fb:30:81:48:3e:1c:40:84:3f:c2:
55:5d:03:19:c5:4e:1d:21:bd:37:7d:f6:fd:e7:57:
4a:8e:24:ff:21:68:70:a6:56:67:41:5b:31:9a:78:
6d:26:0e:08:5d:6d:ae:00:5e:17:50:4a:7a:29:30:
6e:b4:24:b6:b7:4c:aa:f7:76:2f:5d:d5:c5:05:a2:
60:b0:2f:24:2b:e8:47:17:42:5a:58:c7:d4:50:89:
50:ab:e0:89:57:6f:8a:61:b8:f9:b7:91:24:c8:e7:
89:54:2e:3b:c5:58:37:f4:e1:95:82:16:9e:3a:99:
a5:2e:ed:3c:30:30:3d:46:60:0f:8f:58:ac:a7:d0:
84:e8:13:46:57:c9:78:e6:ba:82:69:36:b6:a5:15:
eb:85:59:75:f9:09:08:ad:49:1e:20:d2:27:03:3e:
19:f3:89:f9:fe:68:46:7a:3e:c1:29:ce:96:76:f0:
6d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DD:DE:E6:4A:6E:F5:51:37:35:8F:A3:62:70:21:A6:CA:8C:C8:84
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AA8FA8CE37F011ED88189AD8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.162.0/24
Signature Algorithm: sha256WithRSAEncryption
37:ea:30:16:93:eb:f6:a4:4d:02:cb:5e:d9:17:4f:9e:85:02:
ff:c6:e6:16:fd:0c:c1:54:21:9a:7a:c3:b4:d8:a2:5a:92:6c:
87:26:d5:06:a4:a5:dc:47:e8:83:d5:99:00:95:8b:3e:61:23:
e8:d6:c4:5f:c5:0f:72:4c:92:26:1e:e8:c0:3d:42:a3:4c:ce:
4d:fb:44:17:81:ff:3d:ad:e6:2a:d2:47:6c:83:56:fb:10:ca:
2d:13:5d:fb:d7:26:c0:94:18:82:94:85:06:ff:ce:b7:85:41:
aa:da:39:74:26:dc:0c:8f:8b:fc:b8:ef:a7:10:dd:4e:d9:33:
28:93:44:80:be:0a:9a:10:a8:9f:fe:72:fe:49:74:55:c9:e1:
54:f3:db:a4:a4:9e:9f:5e:42:07:a7:b4:89:10:a1:a5:86:7f:
a7:56:0a:8a:00:06:26:a4:77:bc:68:86:32:fa:27:e1:69:0b:
cd:2d:61:a5:52:f3:1d:60:8a:2d:69:71:4a:01:41:d6:b6:01:
9b:11:8e:c0:87:86:12:a3:8d:3c:15:a6:b1:af:ea:c5:9f:72:
0a:2a:d7:77:04:75:e7:39:bc:bf:20:e7:f5:8c:9e:62:0b:07:
06:ec:c8:f2:ee:09:49:8b:6d:86:bb:18:7f:35:67:5b:3a:b9:
34:2e:a9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 02:02:28 2024 by rpki-client on console-fra.rpki-client.org