Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B5AE4338F64D11EEA0EBDE67775412E6.roa
File: B5AE4338F64D11EEA0EBDE67775412E6.roa (raw, json)
Hash identifier: Z9JHNgcUfd7QIGVDBckqRmZPfUS/JxNEt1DtWcS3iYc=
Subject key identifier: 6F:99:23:02:78:BC:53:C0:DF:55:62:E7:88:B3:AE:67:7A:69:39:36
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 104A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B5AE4338F64D11EEA0EBDE67775412E6.roa
Signing time: Tue 09 Apr 2024 08:46:52 +0000
ROA not before: Tue 09 Apr 2024 08:46:48 +0000
ROA not after: Sat 11 Apr 2026 08:46:48 +0000
asID: 996
IP address blocks: 102.129.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4170 (0x104a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 9 08:46:48 2024 GMT
Not After : Apr 11 08:46:48 2026 GMT
Subject: CN=6615007b-364f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:43:5c:54:88:82:38:f5:a3:c5:1f:72:e0:11:
00:a7:4b:c0:fd:2e:b4:27:c6:ed:64:9d:21:ba:d8:
48:7b:e5:20:1d:66:6c:97:62:ed:54:c5:51:32:41:
60:de:43:61:42:f1:12:f6:f7:b6:dd:d0:af:d5:c5:
b5:65:2f:06:a6:ea:a1:35:34:05:db:45:3c:f5:f7:
05:03:bf:9f:13:83:38:22:af:71:49:27:28:69:88:
ee:f9:f7:85:4e:18:94:94:a8:02:cc:44:64:db:a8:
ae:8c:20:67:32:75:a1:86:9c:9e:91:cd:f7:ce:49:
c8:b3:7f:62:4f:54:a9:02:8c:4c:b0:29:c6:d8:9a:
ab:32:73:40:52:b7:5b:2f:30:97:da:a8:a2:8d:e7:
c5:bd:b3:d4:45:34:cd:bb:a7:64:f4:bd:92:29:8d:
76:eb:78:dd:b3:15:d5:81:7f:17:50:75:1a:12:3d:
42:09:00:ff:4c:23:cf:9e:4b:e8:7d:9c:6f:7a:55:
4b:eb:00:54:70:4c:ef:31:4e:92:58:6f:ee:fd:23:
60:da:3c:4c:80:0b:d0:8d:94:5b:c2:d6:eb:5b:a7:
12:8d:54:6d:3c:59:d5:22:b7:dd:f0:eb:1f:e4:4b:
61:22:19:24:d4:58:a4:9d:df:d0:de:ff:a2:df:e4:
12:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:99:23:02:78:BC:53:C0:DF:55:62:E7:88:B3:AE:67:7A:69:39:36
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B5AE4338F64D11EEA0EBDE67775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.194.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:68:25:cb:36:bc:39:84:cb:6c:a5:76:f9:05:cc:57:9a:7b:
cd:52:49:04:f8:ed:55:48:49:89:d3:6b:a3:da:4e:ab:89:e5:
0a:c6:25:ea:32:42:bf:17:8a:01:92:64:78:7a:1b:2e:e7:a2:
66:a4:7c:7e:0e:02:da:10:d0:5e:c5:21:55:5f:8b:8a:72:e1:
18:bf:c1:af:62:3e:9b:31:f1:d3:5a:ce:69:b5:ca:4b:0d:b4:
a3:0a:c1:e8:42:30:e8:73:4f:20:7a:80:3f:00:65:20:a6:02:
34:40:86:a4:b6:b8:12:e2:81:2a:18:c5:73:08:2f:3e:f2:0c:
ba:74:30:b7:b4:5d:cf:e0:af:34:62:a7:bc:ac:03:8a:4e:e7:
35:66:b6:75:7e:52:ff:db:83:4b:45:5c:6d:ee:3f:0d:83:00:
57:50:f4:7e:f0:e9:63:30:fd:f3:98:53:93:9d:5d:7f:6a:87:
3a:90:99:21:6b:68:36:f0:c9:a9:ec:66:d9:fe:a3:33:24:0a:
64:2b:9c:6b:91:95:f7:f3:5c:ac:9d:f1:72:1f:62:ec:ff:af:
c1:56:60:59:f0:88:6c:ec:f1:3d:a7:34:ee:84:ce:3e:a2:cd:
6c:7d:82:20:d6:c3:ce:50:28:25:b2:11:00:b4:ff:29:85:d1:
1a:ff:e1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:30:21 2024 by rpki-client on console-fra.rpki-client.org