Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AD234226A7EC11EF8206D47E762E951A.roa
File: AD234226A7EC11EF8206D47E762E951A.roa (raw, json)
Hash identifier: 1Ju17pnHdn5teVuXX4cv4cq5MpC62C8yKoWL7uQ8sqc=
Subject key identifier: B5:EE:48:4D:31:CC:A1:8B:C9:14:D1:E5:DB:1A:8B:D9:10:C0:F2:7C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 12E7
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AD234226A7EC11EF8206D47E762E951A.roa
Signing time: Thu 21 Nov 2024 09:40:43 +0000
ROA not before: Thu 21 Nov 2024 09:40:39 +0000
ROA not after: Sat 21 Nov 2026 09:40:39 +0000
asID: 62240
IP address blocks: 102.129.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4839 (0x12e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 21 09:40:39 2024 GMT
Not After : Nov 21 09:40:39 2026 GMT
Subject: CN=673f001b-eb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cb:3b:98:65:53:a4:2e:5e:d6:cd:39:72:87:
a0:7c:f6:f4:e1:33:87:98:6b:df:03:86:01:cd:a8:
81:5f:f6:71:7b:82:07:b9:39:9f:63:52:28:0f:c8:
b4:70:27:1a:b7:9d:0c:94:66:32:19:c4:2b:d4:7f:
e1:17:07:a1:64:15:cf:1f:21:ba:c3:ef:ac:06:40:
e2:1e:d4:d6:0d:0c:4b:1d:15:5d:c9:ba:df:2f:d3:
96:50:ad:cd:45:e2:d3:d2:bc:1f:fd:61:40:cb:e9:
91:03:7f:b8:36:5c:7b:6e:32:22:eb:16:fc:91:03:
9b:36:17:d1:03:69:00:c5:40:58:b5:40:56:eb:47:
ad:6f:af:9e:ff:52:10:cd:52:3e:66:10:1f:b6:47:
27:fd:03:3c:18:43:92:b2:95:37:58:60:7e:e8:4c:
5a:52:6e:14:bf:7a:24:9c:5b:1a:b6:ce:12:59:06:
a4:c3:b2:47:ad:5f:1d:e7:69:e5:f2:cb:01:e8:7c:
ad:a4:67:29:c9:35:80:4c:3a:29:c0:51:ab:c2:ca:
3c:e8:c1:fb:05:3f:55:a7:54:6a:55:31:be:2a:1f:
9e:83:fd:49:3a:bd:de:24:14:b0:ba:88:e5:b5:55:
19:ab:9a:23:ca:16:c7:0a:eb:6e:92:33:e1:c9:9f:
fc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EE:48:4D:31:CC:A1:8B:C9:14:D1:E5:DB:1A:8B:D9:10:C0:F2:7C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AD234226A7EC11EF8206D47E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.245.0/24
Signature Algorithm: sha256WithRSAEncryption
59:23:1d:31:d8:56:1a:11:d4:dd:2d:25:f1:00:41:02:07:96:
31:b6:9d:f6:b1:e9:db:8b:64:6d:57:b8:f3:52:79:1f:fc:34:
d3:c8:4b:83:46:3b:aa:82:24:87:c3:5b:ed:02:a6:2a:cb:ec:
e6:b7:9e:b6:46:b4:e6:a7:40:ba:0e:ca:9d:c3:5b:c2:6a:02:
80:38:19:ed:b0:91:62:da:1e:c5:3e:c9:25:aa:59:08:83:33:
d8:ff:69:39:a2:f9:31:ae:ce:45:34:34:da:43:ff:5c:a0:d8:
09:27:f7:8e:a3:1d:b0:8c:03:ea:ee:bf:17:91:97:7d:49:dc:
f8:11:42:ee:62:bc:76:86:31:b3:27:aa:61:52:0c:3e:b5:6f:
fa:69:0a:dd:d7:9a:9e:19:35:32:6f:89:22:76:2c:59:38:6a:
90:9c:fc:85:f4:98:99:73:84:be:51:35:53:5c:fd:4e:a1:41:
0e:7d:5a:e5:cc:c1:1f:e9:c0:c4:fa:d8:1f:50:56:31:91:d7:
fa:7e:db:3c:88:fa:be:33:38:7a:7e:30:82:da:2d:a5:09:b9:
be:01:0c:41:cb:31:c8:ba:e7:a5:74:5c:cf:b1:68:d0:b0:da:
63:3f:de:70:a2:bf:46:b9:29:b9:1f:5a:00:28:27:ce:82:e6:
96:35:82:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:16 2024 by rpki-client on console-fra.rpki-client.org