Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D97DD1183EC611EF85395981762E951A.roa
File: D97DD1183EC611EF85395981762E951A.roa (raw, json)
Hash identifier: qyMsGh8GWMLd1YnVg5GHXZGuOcUqD/QzXYlpsmGTH5c=
Subject key identifier: AE:30:10:C5:6D:3F:DC:02:D7:54:DF:25:D3:56:A1:FC:BB:9D:47:41
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1153
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D97DD1183EC611EF85395981762E951A.roa
Signing time: Wed 10 Jul 2024 14:15:25 +0000
ROA not before: Wed 10 Jul 2024 14:15:21 +0000
ROA not after: Fri 10 Jul 2026 14:15:21 +0000
asID: 1239
IP address blocks: 102.129.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Oct 2024 00:19:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4435 (0x1153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 10 14:15:21 2024 GMT
Not After : Jul 10 14:15:21 2026 GMT
Subject: CN=668e977d-4efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6f:11:f6:51:14:59:45:9f:7c:f1:5a:8b:0c:
03:25:be:bd:25:d0:de:22:93:c7:28:bd:e8:3e:42:
5c:0f:3b:85:42:f1:aa:74:0d:09:57:67:a8:2b:18:
82:3b:1d:93:77:50:02:c4:61:0c:61:c9:50:4f:0f:
97:70:3c:94:4f:54:34:76:4c:d6:5a:ab:73:ce:6f:
a6:f3:d3:ba:3d:9a:a5:ef:95:f2:8d:f5:d4:d7:1f:
22:42:17:a3:be:7b:7c:90:15:e9:dd:b1:eb:b9:d8:
d5:5c:ce:5e:42:86:62:fe:2b:c1:e7:70:da:34:42:
3f:99:56:79:52:5c:4d:e2:45:1a:9b:bc:cf:41:00:
7f:10:05:8c:04:0a:36:65:85:b8:43:f5:d3:a8:b5:
b1:bf:a8:fc:d9:19:08:ea:8d:3a:3b:4c:50:42:99:
2f:b0:13:6c:5d:c5:8a:58:d4:a0:ef:6e:c6:3a:11:
25:99:35:f4:27:a7:cd:b4:44:bc:e5:77:a5:f7:27:
04:87:f2:0c:a5:75:3a:ed:bd:b2:57:84:03:10:80:
06:bf:d4:16:5a:5f:10:66:ee:1d:b6:ba:98:2a:15:
74:bb:c2:86:a5:c9:b3:b3:17:2a:22:e7:de:f5:4f:
1e:d4:f5:98:55:d3:1b:72:63:b8:45:4d:b6:a7:f2:
77:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:30:10:C5:6D:3F:DC:02:D7:54:DF:25:D3:56:A1:FC:BB:9D:47:41
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D97DD1183EC611EF85395981762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.130.0/24
Signature Algorithm: sha256WithRSAEncryption
68:8e:b3:6b:15:ba:61:9c:9d:ba:08:7d:25:a8:0c:ff:6c:f6:
52:ea:d6:75:0e:5a:7e:5c:5d:b5:c7:f5:c4:5a:94:38:c7:c9:
03:27:66:a9:50:50:1b:2e:4c:00:84:ff:5f:f3:28:02:1d:02:
29:4a:1b:b2:55:ff:c0:77:33:79:f3:4a:74:22:74:92:53:a3:
8c:30:35:43:58:f4:bb:4c:b3:d3:a3:69:65:b7:53:09:2c:a9:
58:5c:7c:3f:2c:c1:17:dd:5a:66:23:c7:e1:73:3b:d5:b7:13:
e8:c4:d4:0e:f6:7b:02:e2:37:be:ec:64:a2:62:dc:2f:b0:74:
8e:62:2d:49:4c:2f:8f:a8:3b:36:6b:c5:87:af:92:ef:07:d0:
3d:ea:73:1c:bc:6a:74:7d:b5:02:9e:6c:6c:83:09:0e:6f:74:
52:8b:d9:5a:e9:4c:47:75:f3:b1:e5:fc:6c:82:a9:1c:80:da:
93:4d:27:0b:9a:2d:db:10:03:d5:9d:7a:92:c9:33:fa:f2:f2:
12:0c:0b:5a:37:75:72:89:00:32:5b:52:54:21:f0:1d:9a:0b:
a9:9a:c1:f3:00:3e:d1:8e:85:47:d1:77:61:24:6c:67:4f:06:
10:38:eb:d5:0f:97:c7:c7:22:b2:30:ce:d5:17:23:92:eb:1b:
82:d2:12:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 09:35:35 2024 by rpki-client on console-fra.rpki-client.org