Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CD51816AA7DE11EF8CF974A7762E951A.roa
File: CD51816AA7DE11EF8CF974A7762E951A.roa (raw, json)
Hash identifier: +xckFF6YmBcqJhEGFxE8ar6AwOZi5IaMeunsLu0kelk=
Subject key identifier: 78:D6:96:DE:CA:C9:EF:92:C6:58:B8:54:A0:BB:A5:81:E2:F4:70:99
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 12DC
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CD51816AA7DE11EF8CF974A7762E951A.roa
Signing time: Thu 21 Nov 2024 08:01:24 +0000
ROA not before: Thu 21 Nov 2024 08:01:20 +0000
ROA not after: Sat 21 Nov 2026 08:01:20 +0000
asID: 151106
IP address blocks: 102.129.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4828 (0x12dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 21 08:01:20 2024 GMT
Not After : Nov 21 08:01:20 2026 GMT
Subject: CN=673ee8d4-45f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7a:0d:e4:bb:18:7c:91:02:4f:cf:bf:12:9e:
c0:33:8f:2e:0b:ce:29:76:2c:b2:1f:72:7e:a3:45:
91:d1:0e:14:b1:f7:5d:c7:9a:ee:91:82:8c:a2:46:
95:41:f1:09:99:b7:76:a2:5b:ff:71:b3:83:f5:e5:
db:39:d8:3a:b1:e3:4d:c8:95:13:80:3d:5a:52:c6:
ca:5f:b9:eb:21:e0:23:68:c4:3f:8c:9e:2c:bf:83:
fa:57:3f:54:4d:91:27:bf:5b:7b:a5:57:e4:b6:f4:
dd:83:9e:9b:63:3d:58:62:8a:d4:72:bd:95:81:0b:
8b:92:7c:9a:d5:61:2c:c5:5e:26:05:37:f7:5a:9f:
e4:62:49:04:fe:ed:58:90:f9:67:4e:2a:24:a6:20:
82:dd:b6:c0:08:fb:46:ae:da:f9:95:0a:22:79:3f:
5d:f6:43:8a:58:f4:c2:4b:ea:91:5c:77:78:37:59:
58:6e:60:7b:24:29:b3:47:8b:a1:c5:d8:74:4c:4d:
3f:53:09:4f:10:7c:41:e1:21:be:09:0a:04:b7:cc:
df:7f:a3:72:59:ca:ab:a0:b2:e5:94:fa:09:cf:3e:
a6:94:c3:1a:be:3c:77:72:80:c4:ca:f2:ba:1f:d4:
7f:47:31:1d:7e:e7:df:06:0c:64:60:88:30:06:95:
64:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D6:96:DE:CA:C9:EF:92:C6:58:B8:54:A0:BB:A5:81:E2:F4:70:99
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CD51816AA7DE11EF8CF974A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.135.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:72:60:55:74:64:88:cd:82:8d:a9:b8:6f:56:15:d0:45:05:
07:d3:83:ff:44:7b:a4:ae:07:4a:37:9f:40:9d:3d:cb:37:15:
b4:4e:49:0b:d9:53:01:a0:bd:60:2e:0a:f1:78:e3:5e:fd:64:
42:2b:1b:4a:47:1a:7f:06:f9:27:94:14:0d:75:6d:d1:95:1a:
bf:bd:41:a8:86:fc:23:ce:b2:43:ce:6d:07:5f:f4:e9:69:21:
e2:72:1d:c3:b1:d2:3d:65:cc:cf:da:fb:13:80:11:1c:70:78:
ae:ca:45:a8:77:33:da:af:55:24:2f:03:39:0c:66:05:15:cb:
d2:2c:73:98:4e:96:ab:f6:b7:2c:19:ef:2a:a4:cc:5c:97:80:
8d:14:69:cd:32:1a:fe:19:16:fe:d6:d6:3a:1c:9a:9e:47:01:
2a:66:73:18:97:7a:ed:b7:95:4e:b6:7c:88:e7:f7:4b:9f:d6:
56:8d:19:59:3e:61:24:0b:38:c2:6c:08:9c:03:09:ed:4a:c5:
c2:ec:c2:cf:ce:99:86:65:c0:ea:a1:d7:d4:d1:87:0f:32:9a:
15:10:ed:19:8d:8b:73:19:b4:49:56:2f:b1:5c:3b:a8:47:45:
22:81:e0:25:e1:d8:89:0d:8d:ba:53:82:6f:2a:82:a5:f7:5a:
90:2e:2d:fc
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEtwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNDExMjEwODAxMjBaFw0yNjExMjEwODAxMjBaMBgxFjAU
BgNVBAMTDTY3M2VlOGQ0LTQ1ZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCfeg3kuxh8kQJPz78SnsAzjy4Lzil2LLIfcn6jRZHRDhSx913Hmu6Rgoyi
RpVB8QmZt3aiW/9xs4P15ds52Dqx403IlROAPVpSxspfuesh4CNoxD+Mniy/g/pX
P1RNkSe/W3ulV+S29N2DnptjPVhiitRyvZWBC4uSfJrVYSzFXiYFN/dan+RiSQT+
7ViQ+WdOKiSmIILdtsAI+0au2vmVCiJ5P132Q4pY9MJL6pFcd3g3WVhuYHskKbNH
i6HF2HRMTT9TCU8QfEHhIb4JCgS3zN9/o3JZyqugsuWU+gnPPqaUwxq+PHdygMTK
8rof1H9HMR1+598GDGRgiDAGlWQ/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUeNaW
3srJ75LGWLhUoLulgeL0cJkwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0NENTE4MTZBQTdERTExRUY4Q0Y5NzRBNzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgYcwDQYJKoZIhvcNAQEL
BQADggEBALNyYFV0ZIjNgo2puG9WFdBFBQfTg/9Ee6SuB0o3n0CdPcs3FbROSQvZ
UwGgvWAuCvF44179ZEIrG0pHGn8G+SeUFA11bdGVGr+9QaiG/CPOskPObQdf9Olp
IeJyHcOx0j1lzM/a+xOAERxweK7KRah3M9qvVSQvAzkMZgUVy9Isc5hOlqv2tywZ
7yqkzFyXgI0Uac0yGv4ZFv7W1jocmp5HASpmcxiXeu23lU62fIjn90uf1laNGVk+
YSQLOMJsCJwDCe1KxcLsws/OmYZlwOqh19TRhw8ymhUQ7RmNi3MZtElWL7FcO6hH
RSKB4CXh2IkNjbpTgm8qgqX3WpAuLfw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:17 2024 by rpki-client on console-fra.rpki-client.org