Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B55DE20C9E9111EFBA795676762E951A.roa
File: B55DE20C9E9111EFBA795676762E951A.roa (raw, json)
Hash identifier: VoaqkmV6wyoLdEK3nsVs4rtLx10bwcWo77JQ7KCiZzM=
Subject key identifier: 9C:93:88:B6:60:24:F9:7D:E6:76:D3:4F:E5:D7:B9:73:97:A1:92:68
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 12A6
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B55DE20C9E9111EFBA795676762E951A.roa
Signing time: Sat 09 Nov 2024 11:56:52 +0000
ROA not before: Sat 09 Nov 2024 11:56:48 +0000
ROA not after: Mon 09 Nov 2026 11:56:48 +0000
asID: 7018
IP address blocks: 102.129.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4774 (0x12a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Nov 9 11:56:48 2024 GMT
Not After : Nov 9 11:56:48 2026 GMT
Subject: CN=672f4e04-ba0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:8a:d5:2e:24:cd:3a:44:4e:01:d3:b4:ae:
ac:3e:d5:70:e9:75:8a:10:6a:45:67:9c:48:dd:37:
99:aa:75:97:ab:68:3a:5f:e6:db:aa:3c:28:9b:d5:
dc:75:ad:36:d8:33:33:97:08:68:69:ee:aa:cb:30:
47:3d:72:bd:d6:77:7c:94:32:7e:16:aa:4e:0d:cd:
24:e2:49:ea:7c:03:35:31:9d:82:8d:4e:e8:43:64:
ce:33:8f:50:11:a4:d3:5e:27:2d:09:6b:e9:79:3e:
96:b9:6f:12:96:94:48:cd:d9:a2:c9:9f:b7:99:43:
21:71:86:b6:ea:1b:15:8c:40:d0:28:02:55:51:e8:
2e:03:da:e1:12:10:a4:6e:86:ca:ff:c3:8e:3a:cb:
92:bb:f0:6a:77:cd:ce:12:d6:b0:27:7d:fa:53:01:
d4:c2:f9:f2:01:41:d0:7a:55:17:20:f1:e3:b9:fe:
d1:ea:54:f6:0e:91:f6:29:dd:8a:7e:f9:6b:8f:f9:
89:43:2f:cd:c8:a4:c7:0c:f3:10:e3:49:eb:46:bf:
41:b0:2b:aa:6d:45:dd:be:c4:60:63:aa:99:a3:d7:
1d:eb:03:eb:fc:bf:2a:0d:90:65:53:e1:64:25:3d:
6b:e8:39:1d:64:42:50:1c:08:1c:fe:5c:74:44:9b:
5e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:93:88:B6:60:24:F9:7D:E6:76:D3:4F:E5:D7:B9:73:97:A1:92:68
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B55DE20C9E9111EFBA795676762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.194.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:b5:65:c0:0c:7f:15:19:93:dc:4e:76:5d:77:84:d4:b8:cd:
33:5f:b4:db:fc:bd:c6:f2:cb:59:83:8f:05:c9:31:da:59:da:
32:57:26:87:f8:92:95:e0:b5:40:b2:63:0d:1e:0e:d5:44:f8:
9c:64:9f:1e:69:b3:bc:bf:ac:be:22:ef:d2:d7:53:73:a4:a4:
bf:dd:06:cc:86:96:13:96:f2:2c:de:92:d6:25:0f:84:c5:fe:
0b:35:c9:bd:d4:ac:34:cc:9b:10:8d:9e:c0:f9:92:dd:0e:f3:
bb:b3:a3:a0:47:a4:6e:18:d8:a8:7b:ee:a5:8c:9f:04:9d:a7:
d1:5d:86:ca:2a:c3:04:68:fc:d4:61:80:6f:b6:be:2c:e4:90:
48:05:78:a6:01:5f:89:01:cd:65:b7:f7:e0:8a:ad:8e:89:b0:
58:88:19:b5:4a:99:06:90:fd:2b:be:36:a0:28:af:bb:b6:80:
74:95:15:dd:8a:ab:78:15:6d:1f:29:5b:cc:38:59:28:26:f3:
e1:1b:a8:69:39:e2:c4:69:99:2b:13:e1:94:12:3a:ea:be:83:
5b:55:39:02:b0:c6:e1:6d:3c:37:98:bc:fe:db:3a:e7:26:8e:
9d:5d:8d:8f:dd:35:44:1e:2f:e6:52:6d:f6:2f:07:50:88:a7:
c8:aa:33:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:27 2025 by rpki-client