Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B5DFB21E464011EE8B255A434AD9E6FC.roa
File: B5DFB21E464011EE8B255A434AD9E6FC.roa (raw, json)
Hash identifier: E914odVUrmmyx606r25Qe+b23o8mODu8o/KUpUkTr0U=
Subject key identifier: 5B:2E:61:A5:69:EB:0B:93:DF:4A:BF:A7:AB:34:78:70:9E:CF:C4:08
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0CF6
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B5DFB21E464011EE8B255A434AD9E6FC.roa
Signing time: Tue 29 Aug 2023 07:50:24 +0000
ROA not before: Tue 29 Aug 2023 07:50:20 +0000
ROA not after: Sat 30 Aug 2025 07:50:20 +0000
asID: 212238
IP address blocks: 102.129.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Apr 2024 20:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3318 (0xcf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 29 07:50:20 2023 GMT
Not After : Aug 30 07:50:20 2025 GMT
Subject: CN=64eda340-f84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:84:d7:a0:6c:00:ff:df:a6:35:26:b2:4d:0a:
11:a5:48:8b:73:70:05:7d:49:98:aa:7b:3c:2a:57:
72:44:8c:5d:74:4a:71:44:52:2d:ab:db:94:0b:7c:
18:fb:99:3f:1f:b0:ea:0f:33:62:d4:e1:be:40:dd:
ba:a9:1a:c1:c2:86:f7:fc:da:d9:fc:de:37:f3:aa:
6b:c1:7d:4f:43:49:a4:4d:bf:b7:a4:12:d8:29:fe:
5a:3a:ba:3d:12:d2:d3:cb:17:5e:f9:c2:91:1e:62:
f2:a3:1e:6f:65:e7:15:80:51:85:d8:ee:84:2a:c5:
69:27:71:ee:81:b3:c1:55:71:d0:0e:6c:7a:3c:7e:
52:1c:2e:8b:d4:e1:15:72:ae:3b:29:b6:8f:3a:e9:
97:42:e0:3d:e4:df:05:35:53:52:0e:ea:97:e9:e8:
02:dc:b4:00:14:38:39:51:09:e4:54:d8:36:1a:e4:
1d:93:ca:40:e8:81:ac:33:d5:27:c4:26:0f:39:ff:
cf:15:10:f7:f2:0b:e3:53:8e:e3:d6:dd:75:ac:4c:
14:18:d7:80:94:56:01:47:33:6c:38:cd:19:22:b4:
f3:89:38:61:7c:cc:fd:92:c7:97:45:bc:20:e9:6f:
40:e7:e7:f1:86:3f:ea:ad:38:24:45:1f:01:b7:72:
8d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2E:61:A5:69:EB:0B:93:DF:4A:BF:A7:AB:34:78:70:9E:CF:C4:08
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B5DFB21E464011EE8B255A434AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.204.0/24
Signature Algorithm: sha256WithRSAEncryption
50:a1:7c:a5:6b:fa:80:98:8c:3e:0f:6c:50:7d:6d:14:ac:00:
ec:51:8f:e4:85:a8:07:8c:07:ce:d8:68:05:2a:ba:d8:b1:9e:
1e:c9:61:83:dd:03:8e:77:2e:04:cb:46:32:9b:e7:3f:c9:06:
35:a5:f5:c3:21:a2:89:fa:0e:5b:90:88:d6:c9:bf:ae:2e:15:
58:2f:88:9e:ee:7c:a4:c3:0e:50:83:d5:9f:64:46:bd:ea:a4:
3b:b4:a3:30:b3:d9:8f:98:bd:36:a1:c7:78:dd:a6:ac:3f:20:
4e:dd:4f:45:ca:46:cb:35:1a:0c:24:69:d8:c2:4e:0a:57:35:
4f:fa:a8:c2:50:c7:b0:fc:54:43:cb:f9:10:80:1f:9f:2f:5e:
a6:72:2b:fa:1b:ea:d1:7e:56:38:e3:f4:18:45:08:b3:69:cd:
ca:a3:c4:d3:9b:47:f4:d3:32:55:69:ac:d3:e6:0c:5c:fa:77:
ac:b7:71:b0:d5:c6:1b:57:00:3d:ea:40:f4:f8:ae:59:e6:c1:
c5:d5:97:8f:96:b9:44:3a:aa:2a:35:79:ac:79:4f:ac:a6:e3:
79:95:59:ad:46:d7:6b:e4:71:9e:41:d0:12:ac:3a:2f:fd:1f:
56:93:17:fd:76:b4:3f:a8:94:7e:6f:93:f9:7f:33:97:ad:bf:
6f:86:7b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 21:41:48 2024 by rpki-client on console-ams.rpki-client.org