Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CB715D46904311EF92F59E53762E951A.roa
File: CB715D46904311EF92F59E53762E951A.roa (raw, json)
Hash identifier: SK5Zt5bFx2D5uO3wfnseH2wa2vTL4HflbEdZT5HtokI=
Subject key identifier: FB:B0:F6:97:CF:B4:80:9F:AA:77:2E:3D:6B:DF:40:93:CD:03:43:25
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 127D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CB715D46904311EF92F59E53762E951A.roa
Signing time: Tue 22 Oct 2024 07:03:52 +0000
ROA not before: Tue 22 Oct 2024 07:03:48 +0000
ROA not after: Thu 22 Oct 2026 07:03:48 +0000
asID: 20473
IP address blocks: 102.129.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4733 (0x127d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 22 07:03:48 2024 GMT
Not After : Oct 22 07:03:48 2026 GMT
Subject: CN=67174e58-ec38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:41:46:08:6c:2e:f2:c2:03:11:be:0b:2f:e7:
72:8a:35:bd:11:3a:69:d9:7d:a8:40:4b:cb:73:62:
1c:ed:b5:bd:f8:8e:c1:31:fe:1f:91:26:63:8f:df:
2d:b7:de:49:b1:01:c7:e6:ef:a3:a1:3d:c3:80:a1:
92:b9:d9:ec:2d:49:8c:8d:aa:02:39:9e:96:a9:5c:
90:3f:2a:7f:49:b9:50:af:90:f5:d6:ce:52:71:17:
dc:d4:1e:0f:ff:a4:36:47:d1:36:f2:de:bb:1b:98:
b8:26:9c:26:70:e5:86:9f:b2:e8:f2:57:eb:56:79:
fb:99:ef:24:2e:08:79:eb:1a:3d:4f:da:4b:66:d4:
33:82:78:f1:45:e4:a3:cc:67:18:a1:69:e8:b3:cc:
d0:88:4e:fd:2a:59:e1:55:3a:20:7d:7e:a9:12:0b:
c0:a1:29:64:be:f9:e3:4b:ee:51:22:00:88:39:ca:
9f:52:84:83:11:1c:3c:89:30:45:49:a6:2f:c1:56:
fb:96:76:b8:3c:98:32:67:03:6a:91:6a:92:aa:6e:
9b:4d:68:05:78:b4:42:b8:9c:f6:47:69:f7:43:29:
04:7f:3f:69:17:d2:fc:b4:4e:e4:ac:ec:2a:af:c0:
1e:b1:52:9f:da:5c:33:2e:07:e2:e2:85:46:2b:66:
be:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B0:F6:97:CF:B4:80:9F:AA:77:2E:3D:6B:DF:40:93:CD:03:43:25
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CB715D46904311EF92F59E53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.207.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:f4:6a:9b:89:56:28:dc:2c:05:8c:a5:88:8f:c8:d1:03:68:
79:0b:3a:66:2a:37:5e:35:10:94:56:92:75:46:ab:a6:8e:27:
84:02:7d:6f:8f:b6:93:8e:20:08:d5:29:03:38:43:72:53:04:
98:8d:6a:db:6a:b4:b5:4f:d4:19:3b:f3:d6:3a:c8:70:65:d6:
8e:3f:9a:09:40:9f:be:19:fd:fd:06:6a:b5:5a:c1:7b:cd:9b:
85:95:5c:95:47:ce:93:2b:fc:6a:1b:19:f0:34:e1:0d:eb:db:
27:35:76:8a:1d:cf:fb:15:d1:dc:03:e5:8b:ba:bb:0e:74:71:
a9:4f:ca:85:35:90:8d:1e:3a:f3:5e:80:24:09:2b:13:52:e0:
30:2d:85:ae:af:1f:a8:e7:79:c4:2e:a3:79:d6:03:92:2e:b0:
6c:e5:a3:9c:0c:6c:23:47:b3:e0:28:30:ba:20:89:0f:ff:58:
d7:54:d2:5d:6a:75:98:21:45:3e:ef:ab:17:f4:40:4b:d0:f4:
7e:53:e4:fa:c6:80:6e:7f:3f:78:f2:63:2e:10:6d:cc:ae:17:
5b:4c:8b:93:2a:a2:65:ad:7a:f2:90:2d:29:74:55:3b:e9:ee:
99:86:e7:8a:3a:12:af:b1:61:1d:1c:9d:aa:3e:34:3e:89:c6:
1d:cd:f4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:17 2024 by rpki-client on console-fra.rpki-client.org