Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D857D880856411EF99D885AE762E951A.roa
File: D857D880856411EF99D885AE762E951A.roa (raw, json)
Hash identifier: J4Ifsl4xsRUVLEG1iGNorJO8H4z9TpwzHYHymz12BSM=
Subject key identifier: 2D:6E:4E:CA:9B:EC:15:7F:80:9E:85:A9:87:54:C0:AE:F6:B4:A4:2D
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1242
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D857D880856411EF99D885AE762E951A.roa
Signing time: Tue 08 Oct 2024 11:02:44 +0000
ROA not before: Tue 08 Oct 2024 11:02:41 +0000
ROA not after: Thu 08 Oct 2026 11:02:41 +0000
asID: 26042
IP address blocks: 102.129.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4674 (0x1242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 8 11:02:41 2024 GMT
Not After : Oct 8 11:02:41 2026 GMT
Subject: CN=67051154-5753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:ae:25:81:a4:e2:61:a2:4e:85:77:81:b8:
a1:19:d1:8f:ef:9b:89:b1:9f:4e:a2:66:c9:83:56:
98:67:ff:39:75:f6:a8:34:d2:91:d9:98:d2:4a:c7:
87:ae:91:d0:74:9e:e8:48:61:18:18:1c:b3:47:19:
6f:95:e9:2a:14:ae:ce:27:ae:05:f9:32:28:37:75:
e0:7e:74:c2:3f:44:5b:b2:0a:d2:6e:e5:fe:09:de:
41:86:e1:2b:56:ac:1f:e4:68:17:af:09:c4:34:22:
7d:8d:aa:c2:ab:cf:3a:d4:dc:9f:c1:b0:b9:f6:00:
95:e4:77:0c:6a:00:61:5b:d8:6c:cb:ed:ca:c0:97:
da:0d:02:1f:82:9a:06:e7:04:82:15:e6:4f:a2:9d:
2a:30:3a:19:5b:c0:95:b2:80:1e:5e:74:97:d6:17:
97:06:3b:5f:64:5a:12:7d:72:91:2c:89:23:23:e4:
15:f2:15:33:34:e2:28:54:05:28:9e:1f:28:08:a7:
07:72:a3:a1:8a:ab:6b:47:a9:74:f2:28:f6:84:7c:
fc:27:ba:16:82:78:bb:dc:fd:20:65:ec:ba:3f:a7:
b0:77:75:eb:78:0d:0c:6b:bc:88:ea:a3:88:25:c3:
87:e0:4c:6b:64:19:b8:8d:da:25:07:dd:5a:69:f5:
9e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6E:4E:CA:9B:EC:15:7F:80:9E:85:A9:87:54:C0:AE:F6:B4:A4:2D
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D857D880856411EF99D885AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.215.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:cf:f1:2c:0f:e5:c1:6a:ee:0b:f8:b2:48:5f:1d:c0:ce:24:
bf:79:af:2e:e3:0a:4f:48:62:07:3f:c0:16:cb:68:c2:6f:6d:
0a:67:de:92:ed:15:65:b9:48:cd:70:17:d2:62:73:22:a4:65:
c8:02:36:f4:25:9b:89:a0:02:0c:2c:ea:4f:5e:dc:6c:9a:a8:
07:ba:01:62:d4:77:eb:01:21:a1:29:9c:b0:1e:82:5b:aa:cc:
6a:6c:08:9e:bb:19:f6:86:e4:80:80:e7:25:f9:7c:76:fa:66:
64:9f:f5:f2:18:e6:1d:73:bd:b3:e2:f6:a6:1f:93:8b:93:61:
b3:43:e7:bd:40:8c:a1:0d:59:25:31:6e:f4:d6:38:97:53:69:
e1:a1:8d:6a:fe:cc:c6:1d:18:a6:e1:cd:2c:14:2e:14:85:7a:
94:ae:87:73:64:3d:aa:70:72:3c:55:a8:15:c1:99:7c:7a:b6:
08:ee:a2:db:99:d2:ae:74:55:85:fd:b2:cf:29:8f:b2:8b:1d:
92:d9:77:15:08:79:8c:fc:b6:05:1e:40:c3:ef:02:81:07:1e:
0a:8e:0d:f1:04:4d:be:cf:53:b9:42:29:76:6e:35:81:df:26:
45:8c:9c:85:6e:6b:17:e3:96:46:da:da:f5:2a:39:88:3c:4b:
02:31:f9:cf
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEkIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNDEwMDgxMTAyNDFaFw0yNjEwMDgxMTAyNDFaMBgxFjAU
BgNVBAMTDTY3MDUxMTU0LTU3NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9x64lgaTiYaJOhXeBuKEZ0Y/vm4mxn06iZsmDVphn/zl19qg00pHZmNJK
x4eukdB0nuhIYRgYHLNHGW+V6SoUrs4nrgX5Mig3deB+dMI/RFuyCtJu5f4J3kGG
4StWrB/kaBevCcQ0In2NqsKrzzrU3J/BsLn2AJXkdwxqAGFb2GzL7crAl9oNAh+C
mgbnBIIV5k+inSowOhlbwJWygB5edJfWF5cGO19kWhJ9cpEsiSMj5BXyFTM04ihU
BSieHygIpwdyo6GKq2tHqXTyKPaEfPwnuhaCeLvc/SBl7Lo/p7B3det4DQxrvIjq
o4glw4fgTGtkGbiN2iUH3Vpp9Z51AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQULW5O
ypvsFX+AnoWph1TArva0pC0wHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0Q4NTdEODgwODU2NDExRUY5OUQ4ODVBRTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgdcwDQYJKoZIhvcNAQEL
BQADggEBALnP8SwP5cFq7gv4skhfHcDOJL95ry7jCk9IYgc/wBbLaMJvbQpn3pLt
FWW5SM1wF9JicyKkZcgCNvQlm4mgAgws6k9e3GyaqAe6AWLUd+sBIaEpnLAegluq
zGpsCJ67GfaG5ICA5yX5fHb6ZmSf9fIY5h1zvbPi9qYfk4uTYbND571AjKENWSUx
bvTWOJdTaeGhjWr+zMYdGKbhzSwULhSFepSuh3NkPapwcjxVqBXBmXx6tgjuotuZ
0q50VYX9ss8pj7KLHZLZdxUIeYz8tgUeQMPvAoEHHgqODfEETb7PU7lCKXZuNYHf
JkWMnIVuaxfjlkba2vUqOYg8SwIx+c8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:17 2024 by rpki-client on console-fra.rpki-client.org