Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E27E1FB427DF11EF99EE6EEF7CDC24C2.roa
File: E27E1FB427DF11EF99EE6EEF7CDC24C2.roa (raw, json)
Hash identifier: yCBoOgQC5dEbmxVNWUr1gC7IWPQgtGHu0lKwcDDkDtE=
Subject key identifier: 41:27:6B:A1:F3:FE:CB:13:15:58:F9:96:53:B8:C2:73:66:46:8C:6D
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 10D8
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E27E1FB427DF11EF99EE6EEF7CDC24C2.roa
Signing time: Tue 11 Jun 2024 10:46:40 +0000
ROA not before: Tue 11 Jun 2024 10:46:37 +0000
ROA not after: Thu 11 Jun 2026 10:46:37 +0000
asID: 13213
IP address blocks: 102.129.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4312 (0x10d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 11 10:46:37 2024 GMT
Not After : Jun 11 10:46:37 2026 GMT
Subject: CN=66682b10-7e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:72:40:ba:5c:d8:44:88:92:b2:2d:d1:09:f0:
19:65:0b:86:1d:e5:be:dc:e9:2c:70:87:0f:78:d3:
ac:d6:8b:6d:58:b7:ce:99:58:01:f4:c3:47:c3:1c:
f3:c4:7c:01:e8:56:81:e3:9d:aa:0e:77:3c:99:5b:
2a:61:fe:d3:44:4b:79:a3:1c:3c:f3:bc:e1:00:3c:
1c:dc:aa:05:71:18:57:59:fe:be:2e:0c:6e:8b:05:
4c:59:0a:1a:3e:7e:73:5d:31:9b:81:da:18:fd:7a:
6e:44:b2:a6:5d:bc:89:04:29:97:df:d3:16:a7:04:
f1:ad:91:25:19:44:5d:fb:d9:c6:38:65:37:32:87:
51:0a:57:47:c4:5a:4d:b9:f2:25:8c:d7:c9:85:e3:
0c:9e:b9:85:cd:49:9c:df:3b:ba:b4:59:37:e0:fd:
ea:87:c3:61:a6:45:74:3f:cb:07:23:da:61:e0:b8:
3e:b5:78:68:f7:f8:2d:b4:3b:f5:cf:61:d4:ac:b0:
e7:37:95:39:6c:0f:0d:ba:5d:36:f2:49:84:ff:01:
4e:ec:8c:dc:93:2b:e6:e7:e3:ef:46:fc:46:56:74:
fd:c6:a0:3a:e5:41:a9:b4:32:9f:14:8c:1c:be:90:
90:2b:3c:02:94:f2:80:05:6d:e8:c0:40:7d:56:35:
aa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:27:6B:A1:F3:FE:CB:13:15:58:F9:96:53:B8:C2:73:66:46:8C:6D
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E27E1FB427DF11EF99EE6EEF7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.212.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:d3:fc:82:6f:28:10:22:96:da:4c:b4:ea:d8:5a:ff:98:0d:
51:47:75:4b:61:70:73:a2:b3:c0:04:5f:a0:61:1d:94:8a:9e:
c4:b2:28:58:5a:f5:dc:ae:c6:78:d1:97:48:f4:30:f2:2d:0c:
3c:86:10:9c:e4:80:dc:d4:c6:98:37:bd:bc:24:fc:b5:b4:a8:
c9:26:b3:23:45:05:4d:53:d9:d3:2b:15:28:6e:f1:a8:54:6f:
be:4e:19:3e:c0:72:d4:c8:53:d2:5e:27:0d:1d:df:32:b6:2d:
0b:29:4b:79:68:f1:54:51:b3:fb:a1:15:11:1d:65:60:f5:b5:
f4:2c:45:41:7a:49:89:df:8a:41:8e:3f:a4:42:0f:5f:90:de:
f8:0f:65:59:05:75:56:dd:0c:a3:14:06:96:3f:d2:53:e5:4d:
81:40:65:35:85:1f:a7:df:76:9b:03:4e:a9:6e:3d:be:54:53:
05:fc:29:53:7a:4b:43:16:21:d5:62:d5:c0:81:c3:6b:c9:e2:
db:66:1a:48:c1:5d:08:9e:17:c4:eb:06:d1:55:95:92:81:92:
9e:ab:7b:73:84:b0:95:94:b3:6d:01:47:3e:10:eb:46:6d:53:
8a:69:95:a0:42:77:d1:1b:3f:38:3d:f8:dc:ee:2b:51:93:ec:
d8:dc:4c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:17 2024 by rpki-client on console-fra.rpki-client.org