Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ABEB916CED0511EEA5DFBFBE775412E6.roa
File: ABEB916CED0511EEA5DFBFBE775412E6.roa (raw, json)
Hash identifier: yK1I3LOu4FM8F23UhU2yoycjZKQkROsgXdsnUbit6eI=
Subject key identifier: 01:4D:9A:BB:4F:E6:2C:27:42:71:0E:11:EE:62:F2:CD:54:54:FC:8A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 102C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ABEB916CED0511EEA5DFBFBE775412E6.roa
Signing time: Thu 28 Mar 2024 13:18:31 +0000
ROA not before: Thu 28 Mar 2024 13:18:27 +0000
ROA not after: Sat 28 Mar 2026 13:18:27 +0000
asID: 14445
IP address blocks: 102.129.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4140 (0x102c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 28 13:18:27 2024 GMT
Not After : Mar 28 13:18:27 2026 GMT
Subject: CN=66056e27-3eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1c:c7:7c:73:8e:19:6d:05:50:50:d7:fc:49:
54:dc:84:14:15:3f:b1:56:1e:fe:46:70:b7:e0:b6:
54:7e:d8:59:6f:8b:1a:6e:67:eb:d2:29:da:ac:b4:
29:82:dc:b8:55:45:21:95:57:d1:cd:13:2d:a2:4c:
cb:62:fc:05:98:87:f8:8b:57:e6:1d:fa:db:9c:8e:
0b:c0:d7:08:31:fb:d7:01:d7:bb:12:97:19:6f:34:
29:b3:95:b3:34:6c:3b:3e:1e:50:f1:a1:af:e9:3d:
4f:b1:20:64:78:19:76:e0:0f:9d:0e:c7:fb:15:74:
70:c3:9c:f9:77:24:60:a9:e4:42:7d:12:6a:81:71:
0f:f9:8d:24:3c:51:8a:a4:8f:a3:98:32:f0:cf:c3:
e7:1b:bd:93:20:a4:32:94:f0:f1:e5:42:e7:63:00:
7d:8e:db:da:60:60:3f:97:d7:b6:0f:29:77:b0:77:
77:2b:7e:35:e0:dc:60:80:a1:8c:23:36:77:31:ec:
09:5f:94:09:23:8e:b1:b5:43:2f:3c:a1:31:43:ef:
f5:a5:7a:6d:36:46:6a:45:14:c4:c2:63:06:ab:9a:
b1:24:37:4f:b5:89:8a:7c:82:e8:d1:e9:9a:0f:d5:
2f:46:61:69:82:b1:83:60:d1:0b:43:4f:fb:17:8e:
28:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4D:9A:BB:4F:E6:2C:27:42:71:0E:11:EE:62:F2:CD:54:54:FC:8A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ABEB916CED0511EEA5DFBFBE775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.245.0/24
Signature Algorithm: sha256WithRSAEncryption
43:89:b6:fb:9c:2a:ec:b6:1a:1b:56:71:e6:9a:e5:02:17:40:
6f:ba:0d:f8:51:70:49:d8:f3:1d:a5:b0:60:94:b3:0c:33:50:
66:9b:f2:26:e8:d4:0a:6a:72:30:82:c1:5a:24:76:b3:51:1c:
35:5f:07:69:92:87:8c:ff:1b:dc:96:2a:ce:a3:d9:6a:d3:0d:
fa:37:d2:49:f2:6d:77:96:ab:66:52:a9:79:96:2c:80:cf:4a:
ab:86:2c:f1:40:7c:52:14:a7:8d:22:b7:e7:e8:a3:48:d2:4c:
dd:9d:cf:b1:b1:28:33:6b:6a:8f:d6:d1:ca:99:79:9b:45:24:
08:12:b0:7d:ab:19:dc:b5:1d:54:a9:40:7f:87:ec:f3:4d:88:
94:bb:da:07:d7:5d:b1:07:94:b2:89:10:54:4d:cf:bf:cf:ad:
4a:92:11:5e:72:eb:0d:5a:be:15:fd:9a:b0:e8:04:dc:44:53:
d2:2a:65:1b:ac:37:72:a3:97:9e:e8:73:9c:72:89:20:16:91:
4b:22:0a:65:99:e6:ed:10:da:da:cc:37:25:86:b2:94:3e:c2:
fb:82:82:3c:f4:d7:e7:43:a9:90:0b:d3:c3:8a:a4:1b:56:5f:
46:38:b6:c2:d5:08:d7:76:2b:34:ab:a7:f6:4f:e5:b6:1f:4d:
b4:1b:61:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:30:21 2024 by rpki-client on console-fra.rpki-client.org