Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BD53852A644911EFBF8A3790762E951A.roa
File: BD53852A644911EFBF8A3790762E951A.roa (raw, json)
Hash identifier: 1MVZivk5PHjeGv9eKcwi5DQrLDKMJzlor6vJVEij29k=
Subject key identifier: DA:FD:FB:4A:B9:62:A5:9E:13:AB:0C:3F:84:B6:8B:0F:3D:DF:0D:80
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 11D1
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BD53852A644911EFBF8A3790762E951A.roa
Signing time: Tue 27 Aug 2024 07:55:34 +0000
ROA not before: Tue 27 Aug 2024 07:55:30 +0000
ROA not after: Thu 27 Aug 2026 07:55:30 +0000
asID: 212238
IP address blocks: 102.129.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4561 (0x11d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 27 07:55:30 2024 GMT
Not After : Aug 27 07:55:30 2026 GMT
Subject: CN=66cd8676-e143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:58:41:ad:43:b6:36:54:02:0a:39:58:7b:6a:
cb:46:9f:a4:c2:70:70:02:17:87:22:5d:6e:9b:c6:
f3:50:30:64:ed:da:eb:82:32:4e:d9:e2:e6:f9:f9:
01:2d:f2:ce:e0:1a:5e:d3:d3:55:ab:c9:19:5b:a3:
f2:96:6a:ff:a6:5a:91:b0:03:80:f6:54:9f:fc:17:
d0:ab:65:36:ce:ad:fd:56:f7:19:b0:c2:12:72:68:
a5:92:b6:e5:89:86:ae:62:ca:9a:dc:26:43:ce:23:
af:6b:01:56:62:d1:af:d0:cb:06:c8:a0:1e:75:91:
c6:87:8f:28:e0:0c:b9:eb:c2:5b:21:f2:35:af:d5:
9e:0c:8d:29:1c:32:10:e8:7d:ac:a2:db:db:fa:54:
1c:44:b6:f1:81:2a:44:18:9e:f2:b9:e9:82:9b:73:
fa:3f:88:50:13:ff:d5:c8:a3:61:bc:8f:7e:65:55:
35:5b:75:16:f0:4e:3b:70:65:f0:45:77:9c:85:b1:
f2:d7:43:c9:08:07:02:d0:40:d2:ec:01:81:c1:b5:
08:0f:17:42:2a:2a:a7:ae:10:5e:8a:3e:00:e7:61:
0c:27:5d:a2:57:44:ea:cf:28:69:a1:c5:33:fd:e2:
51:dd:cf:9f:7d:b7:48:0c:8a:1f:43:ba:99:bb:1c:
43:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FD:FB:4A:B9:62:A5:9E:13:AB:0C:3F:84:B6:8B:0F:3D:DF:0D:80
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BD53852A644911EFBF8A3790762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.143.0/24
Signature Algorithm: sha256WithRSAEncryption
00:de:aa:b2:b0:79:b8:e9:94:dd:e0:75:b0:14:e6:64:69:f7:
4d:93:06:5c:4c:47:2b:e8:c6:26:63:0f:4e:36:69:64:31:60:
38:da:91:07:4a:b3:3d:0f:0f:49:20:92:cc:b6:6f:5c:9d:4b:
4a:5b:f8:20:67:90:04:4c:28:87:14:04:fc:41:54:88:c7:bb:
71:a0:00:fc:15:4f:a3:d3:b9:fa:8b:67:95:4d:f6:d2:7c:87:
63:e2:a1:c8:91:3e:d6:9f:65:39:0b:1a:18:44:70:a3:d6:d3:
2d:09:2b:0a:c6:d0:85:8e:51:db:9b:bd:ba:2e:ca:fc:e9:c8:
20:21:71:ab:e1:bc:df:8e:bb:f0:df:c6:c2:76:34:a0:e8:d6:
9a:67:31:b8:1d:62:0e:b3:54:3d:25:01:44:e1:5d:19:45:cd:
ba:e9:e7:5d:41:89:f4:c6:91:48:8f:f7:e5:e1:d0:0c:df:8a:
25:05:04:84:72:05:e2:cd:7b:c0:36:ab:f4:94:9f:38:bf:ad:
69:09:fe:dd:3d:a4:91:19:1d:af:c9:f4:2f:52:cc:41:b8:4e:
44:a3:6a:38:dc:b8:31:b0:6c:39:d6:91:a0:67:47:40:32:21:
de:94:ef:75:c0:81:6a:5a:71:85:23:96:8a:d9:d3:8b:e2:f5:
29:f4:5f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:25 2024 by rpki-client on console-ams.rpki-client.org