Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DD36ECFC3E8911EDA4E532E0F1222468.roa
File: DD36ECFC3E8911EDA4E532E0F1222468.roa (raw, json)
Hash identifier: 8YtqSIrDM4J+9NyGvE7JYRqjmCIFeY5RMj9Tg/qRpJY=
Subject key identifier: 42:86:D0:E4:98:8C:38:91:82:F2:82:0B:1C:51:2F:9B:79:36:24:5E
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 080B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DD36ECFC3E8911EDA4E532E0F1222468.roa
Signing time: Tue 27 Sep 2022 17:28:56 +0000
ROA not before: Tue 27 Sep 2022 17:28:53 +0000
ROA not after: Mon 30 Sep 2024 17:28:53 +0000
asID: 212238
IP address blocks: 102.129.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Apr 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2059 (0x80b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 27 17:28:53 2022 GMT
Not After : Sep 30 17:28:53 2024 GMT
Subject: CN=633332d8-2c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:91:ae:65:65:aa:ec:2f:ce:51:7f:e5:fd:7a:
d6:d7:09:28:40:ee:fd:d0:78:86:54:1f:fa:59:4d:
8e:6c:91:18:f1:ae:4c:10:05:83:ea:df:30:a7:66:
cc:e6:a5:bb:11:f5:57:66:a1:5c:3f:4e:82:dd:af:
63:80:c4:e5:c6:5c:79:64:6c:91:37:9a:28:99:aa:
4f:4c:87:d2:ed:07:6c:f9:21:89:c5:ef:62:15:8d:
98:60:a6:4a:7e:a8:dd:d3:1c:51:bd:d3:05:c0:6c:
16:7e:2e:df:1e:c0:a0:8a:3c:eb:6c:eb:5b:2e:08:
6a:88:27:81:53:45:50:95:db:0f:f0:c0:1b:33:42:
15:73:a4:11:c0:85:5f:5c:87:52:18:06:fd:83:9c:
55:1a:d3:32:16:76:9b:2a:ad:2a:f2:ec:56:bb:13:
cf:58:6d:c7:26:42:5b:9d:d6:a7:1c:75:29:1c:03:
7f:8a:dc:a9:02:90:bf:08:33:ec:ed:75:c3:d1:65:
02:0c:f2:4d:1c:9b:a7:c1:b0:8f:e6:2a:14:d8:b5:
c2:a8:d3:9e:1f:4c:88:ac:7a:9c:31:9c:7e:3c:7f:
39:9a:94:03:5c:e9:b6:8e:7d:4f:68:2f:59:b2:2f:
ee:a4:b2:df:56:5a:85:85:b6:ba:f4:1e:39:3d:b8:
39:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:86:D0:E4:98:8C:38:91:82:F2:82:0B:1C:51:2F:9B:79:36:24:5E
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DD36ECFC3E8911EDA4E532E0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.181.0/24
Signature Algorithm: sha256WithRSAEncryption
55:20:c0:47:2d:1f:76:d0:c4:f0:8c:3a:49:a1:f6:cd:b7:2d:
6d:1f:79:bf:8c:5a:8c:f0:c3:14:35:3e:01:0c:22:a9:3d:65:
f0:56:2e:17:7e:f9:70:b5:d3:62:d1:9d:e2:c8:bd:2b:b8:84:
ed:73:4c:11:7b:0d:9d:51:08:d5:af:d8:1c:52:60:2f:8e:d9:
22:26:5c:b7:2d:f8:77:9d:36:62:f6:f9:54:a0:79:6a:67:2d:
ee:6b:7a:37:7d:bb:50:b4:01:e8:c5:47:03:c3:f9:63:4d:02:
0a:7e:7b:a1:fc:ae:81:45:23:3a:17:3a:56:ba:0f:03:50:e4:
f9:08:bd:4e:fc:0c:93:07:1c:0c:fc:27:8d:99:41:90:64:6e:
55:d6:ed:17:ea:fc:d7:e2:94:d2:ab:bb:2c:38:7a:25:38:98:
5d:c1:50:fe:de:10:b6:03:e4:16:00:93:07:ce:00:cd:46:8f:
5d:8c:23:7e:3c:3b:05:ea:94:9a:38:d4:95:1b:31:37:c1:8d:
e4:3d:47:3b:11:9c:18:9b:77:a3:12:53:eb:05:39:08:14:a1:
e6:92:e3:9a:59:40:0a:88:6e:42:f1:c8:6f:98:59:1f:f8:56:
88:c0:0a:1b:c7:80:be:ba:fc:44:1d:1c:a9:c3:03:e1:a9:78:
91:94:63:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 02:45:17 2024 by rpki-client on console-fra.rpki-client.org