Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DBB5924A7FEE11EFBA592A4D762E951A.roa
File: DBB5924A7FEE11EFBA592A4D762E951A.roa (raw, json)
Hash identifier: 44e+6go5eb2GQDOjS2WX6AU683YBptd1YvclzOFBCZA=
Subject key identifier: C7:6B:60:73:FB:E4:04:34:26:5B:76:31:9E:1D:28:31:D2:55:54:7E
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1220
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DBB5924A7FEE11EFBA592A4D762E951A.roa
Signing time: Tue 01 Oct 2024 12:15:34 +0000
ROA not before: Tue 01 Oct 2024 12:15:28 +0000
ROA not after: Thu 01 Oct 2026 12:15:28 +0000
asID: 53340
IP address blocks: 102.129.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4640 (0x1220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 1 12:15:28 2024 GMT
Not After : Oct 1 12:15:28 2026 GMT
Subject: CN=66fbe7e6-bd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:36:5c:f7:d4:80:b5:1f:f6:2b:8e:65:cf:
82:93:42:5c:ab:19:9b:b0:da:a7:bd:b0:f4:30:85:
c8:df:9f:b0:f6:0f:cf:c5:b3:a4:e2:0f:71:97:79:
65:5e:9b:b4:b2:f1:12:7d:3d:fe:7d:bf:48:a5:1e:
05:1d:0d:8e:56:a5:22:c1:e8:58:f4:df:95:77:ab:
f8:a0:79:bb:4e:78:c6:90:f9:72:75:3d:8b:74:ab:
50:91:e0:2e:91:36:bc:36:fe:6f:46:21:eb:08:d7:
e5:d3:c2:15:09:37:61:12:51:68:3d:11:06:8b:c2:
2b:0e:27:5f:54:e3:d8:b1:48:18:3d:ac:3b:4f:3b:
08:57:8c:80:b3:b4:3a:30:87:66:69:06:b1:6d:bc:
14:e7:53:47:78:3e:61:95:74:96:00:93:c1:33:eb:
10:db:46:64:b9:f1:1b:13:ce:0a:44:a2:c5:8e:42:
cf:1f:b4:ae:8a:ee:24:0c:27:78:c1:6a:28:49:30:
44:f8:e8:75:1f:34:0a:7b:b9:1b:64:43:f3:54:1e:
dd:ef:27:ab:14:79:94:f6:89:ba:bb:8a:96:89:b4:
a9:61:ac:c2:26:08:ee:1d:61:ca:fd:85:e7:c7:ee:
93:cd:64:4b:52:94:93:49:e9:e8:e4:8e:d1:8f:d3:
cf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6B:60:73:FB:E4:04:34:26:5B:76:31:9E:1D:28:31:D2:55:54:7E
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DBB5924A7FEE11EFBA592A4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.131.0/24
Signature Algorithm: sha256WithRSAEncryption
02:ff:9b:50:d2:a0:6a:34:fd:bc:23:27:c1:08:3f:af:e8:af:
d8:a2:b0:8e:de:18:45:01:ab:16:3d:f8:56:43:df:8f:3b:5d:
b0:c6:31:8c:19:3e:7a:4a:c9:27:de:00:2c:a4:0b:09:e9:23:
c3:67:56:58:96:5b:cb:06:6a:f6:80:6a:db:4a:f9:f0:36:f4:
f7:fe:c5:fa:54:af:a5:6f:d1:43:83:36:6c:5f:4f:a4:1b:62:
ce:c6:44:40:68:a6:66:07:6b:a2:c0:7c:85:9a:de:f1:a0:2f:
5d:57:ba:22:40:5a:0c:b9:9a:78:d6:5b:35:3c:ce:2c:64:31:
7e:89:41:29:1d:40:11:db:ba:1d:1e:42:03:95:91:d3:37:01:
34:a4:82:3a:70:5f:b7:37:59:22:b2:a9:fd:4e:d6:6a:e5:e0:
cb:1a:56:98:96:78:42:b4:60:d4:47:13:28:66:fa:b1:bf:4a:
71:2f:6e:c9:22:9b:21:98:da:b0:19:3b:94:95:8d:5b:86:21:
86:45:e8:01:de:b2:67:0e:47:b4:fd:f7:57:82:8f:e3:e4:70:
bb:c3:40:37:ec:a7:ec:77:d1:1b:16:eb:30:24:05:1a:b5:50:
7c:15:03:75:90:cd:21:8c:52:35:46:51:01:b6:9c:5d:82:81:
a8:1c:7c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:19:41 2024 by rpki-client on console-ams.rpki-client.org