Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B92CE63AD49811EE93CC146A775412E6.roa
File: B92CE63AD49811EE93CC146A775412E6.roa (raw, json)
Hash identifier: Gv25bWJ1VeKG0xtBXAjT4OU35alqeJ4MtDswx5oOnHE=
Subject key identifier: F7:C6:BA:42:AE:9D:36:93:B5:C1:3A:17:B1:D0:E5:F4:00:AD:CA:4C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0F8C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B92CE63AD49811EE93CC146A775412E6.roa
Signing time: Mon 26 Feb 2024 11:18:10 +0000
ROA not before: Mon 26 Feb 2024 11:18:07 +0000
ROA not after: Thu 26 Feb 2026 11:18:07 +0000
asID: 208949
IP address blocks: 102.129.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3980 (0xf8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 26 11:18:07 2024 GMT
Not After : Feb 26 11:18:07 2026 GMT
Subject: CN=65dc7372-23ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:38:98:ef:39:9c:8d:32:cf:35:73:56:10:
33:6c:b9:8c:9a:b7:84:ff:d8:25:0a:69:37:9a:82:
a0:47:30:bc:20:9b:8c:8b:af:2e:fc:2d:44:8b:16:
c2:ff:53:5f:3d:03:11:46:f5:db:38:46:e7:df:2a:
f2:ac:f2:40:cf:c1:ee:65:6b:a7:a4:37:16:0b:a6:
eb:6f:ea:db:15:48:b6:c5:60:56:22:3c:f1:10:b9:
33:0b:48:45:af:6d:30:fc:d1:40:04:1e:29:a3:d9:
1e:ba:1f:30:46:63:56:eb:e8:ec:1b:45:f2:40:eb:
61:62:04:32:be:14:f3:b6:22:df:9e:d3:96:57:b2:
16:91:2f:2e:38:ea:32:8f:6c:26:c2:e3:33:6b:61:
69:75:63:6a:e1:2d:a3:7f:30:34:dd:0d:cb:5f:4b:
b1:44:27:a0:69:92:ca:97:5c:56:e9:46:73:d6:bd:
2e:be:6c:57:56:53:5b:19:c0:4a:2a:79:43:0b:5e:
17:61:30:27:c4:36:f0:fd:7d:e6:67:96:a1:4c:dc:
fe:0b:8b:7d:b8:4f:aa:0e:b6:0e:aa:a6:de:78:14:
f9:16:ea:b3:d5:df:dd:a0:51:77:ea:d9:65:62:f7:
4f:9d:05:dd:c5:aa:4a:5d:3c:15:77:7f:d0:79:78:
a8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C6:BA:42:AE:9D:36:93:B5:C1:3A:17:B1:D0:E5:F4:00:AD:CA:4C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B92CE63AD49811EE93CC146A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.200.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ef:83:0a:a8:c7:f4:15:72:c7:03:24:7b:88:be:6b:cd:16:
7d:4f:6b:32:10:70:ea:06:16:8a:db:96:53:b9:6e:ef:4f:f4:
b9:19:41:30:71:c0:68:a1:e9:8a:c8:73:20:51:b2:07:e9:ab:
c6:cb:6e:2a:10:c0:05:aa:41:9e:5d:53:e3:3d:7a:98:2f:98:
d6:da:d7:b5:66:5c:20:11:93:ad:a3:5a:32:8a:96:e4:e4:30:
ff:3d:4a:75:e3:7e:e1:bc:57:f1:4c:83:ac:f4:20:2c:ba:46:
06:b3:19:1a:de:10:b6:6a:ec:c7:c6:9d:b2:9f:71:42:63:98:
65:cc:73:6d:5d:58:50:57:03:3d:db:db:7f:b7:3c:21:2d:2b:
98:72:0b:3c:5f:36:5b:2d:e6:98:e8:0a:31:7a:61:a3:52:fe:
47:0c:8e:6e:5b:11:c9:51:3c:f9:28:28:6c:d3:ec:7f:73:f4:
bd:90:80:34:0c:30:e6:8d:07:8b:ae:d9:00:89:f5:b5:12:69:
88:9c:16:e4:9f:bb:51:b5:9d:af:e9:66:a6:7f:d1:09:25:8c:
33:4d:4a:5b:ef:d9:01:e2:1f:13:6e:be:83:fa:06:d2:7f:7b:
71:12:0a:2e:5f:ef:eb:74:b7:0d:e0:40:cc:ee:f5:cb:7f:93:
26:35:72:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:42 2024 by rpki-client on console-ams.rpki-client.org