Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C216E4F6B55A11EEAC3D2B4C775412E6.roa
File: C216E4F6B55A11EEAC3D2B4C775412E6.roa (raw, json)
Hash identifier: 7yEEIdoSYOh7Padh2FnWoWV42YeBBkLcRlXM8+l6MEk=
Subject key identifier: B3:1D:EF:E1:A8:DE:E7:20:9B:10:D8:DC:43:0D:98:B6:27:0F:55:FD
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0F0B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C216E4F6B55A11EEAC3D2B4C775412E6.roa
Signing time: Wed 17 Jan 2024 17:06:30 +0000
ROA not before: Wed 17 Jan 2024 17:06:26 +0000
ROA not after: Sat 17 Jan 2026 17:06:26 +0000
asID: 21682
IP address blocks: 102.129.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3851 (0xf0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 17 17:06:26 2024 GMT
Not After : Jan 17 17:06:26 2026 GMT
Subject: CN=65a80916-6cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fa:d6:ec:b6:36:0f:99:7c:e2:ee:3a:38:71:
34:95:cb:22:8f:51:84:ab:fc:f4:7c:14:d2:ad:0e:
7a:c2:06:82:b2:56:fa:a7:72:3b:b0:55:90:13:39:
0f:bd:d3:bb:39:3a:fd:09:96:81:3c:6e:74:12:52:
2d:f2:4c:2c:ef:0d:f8:75:59:8b:6c:93:2a:e1:75:
4f:b5:6c:d3:32:fc:6b:34:ed:a8:99:90:12:3a:c6:
e8:ba:c2:df:e9:6a:0f:ec:15:c0:1e:d2:ca:5d:77:
4b:18:8d:43:80:ac:ff:8c:73:7f:7b:2c:83:df:79:
60:1c:c6:8d:e4:20:29:bf:6b:2d:e4:d9:21:f9:c9:
e1:aa:cc:9b:a0:e3:f8:78:a4:32:72:e4:6b:21:93:
5c:6e:6d:3a:23:62:6d:66:78:11:aa:97:1e:78:e1:
e4:4c:8f:56:4e:dc:29:4b:07:48:6c:46:87:71:60:
55:2a:0b:ba:4f:6e:8d:b5:20:a6:e9:3a:41:49:bb:
72:0f:43:35:b9:29:17:90:fb:57:85:aa:4c:c5:bf:
cd:10:3e:85:8e:9c:3c:87:06:fe:11:f0:94:40:00:
26:27:51:9d:98:6c:62:dd:37:a4:ae:4e:4e:c6:6c:
8d:91:e0:8d:26:af:a2:b5:50:0a:f4:00:2e:13:6e:
71:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1D:EF:E1:A8:DE:E7:20:9B:10:D8:DC:43:0D:98:B6:27:0F:55:FD
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C216E4F6B55A11EEAC3D2B4C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.130.0/24
Signature Algorithm: sha256WithRSAEncryption
77:2c:af:f6:76:bd:2e:76:a8:24:79:9b:19:94:ec:11:41:27:
a3:b9:d2:06:98:02:12:99:27:b3:f9:1d:1c:60:a3:0d:8e:8e:
52:f8:21:bb:bd:ae:cb:c1:44:e7:f3:f2:8d:c5:8b:ae:b8:2c:
bc:18:d0:76:c4:b5:19:41:c5:48:cd:72:05:07:53:96:17:92:
97:9a:03:11:e6:54:ed:1b:7f:04:c4:04:8e:cc:19:cf:3b:0f:
f2:05:6d:70:8b:f6:12:1e:35:3a:28:0b:cd:a1:dd:ca:23:54:
f4:44:fa:7e:ba:7e:6b:cf:aa:1b:77:ae:bc:a6:35:c2:4e:8b:
aa:49:d1:de:4f:98:f5:47:f2:45:d0:84:14:a1:92:02:37:0d:
d8:11:f7:86:68:41:14:91:ec:21:ec:89:b5:7f:35:bd:42:c9:
80:9d:c4:b7:67:67:72:b4:58:e9:44:54:5a:0a:93:fe:90:e1:
33:3e:97:ea:4c:39:c7:cc:cd:12:62:cd:e6:36:e2:f4:7a:d4:
a2:75:1a:eb:e8:f0:bc:fa:9c:b9:b4:a4:f4:5c:10:e3:a9:a0:
25:12:da:cf:3a:87:3a:dc:dc:9f:fb:9b:36:e2:f2:0b:e4:ca:
f9:a0:6e:96:a0:d7:a0:79:43:d6:39:69:3a:ec:19:85:cd:9c:
0f:f2:ee:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:30:21 2024 by rpki-client on console-fra.rpki-client.org