Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E8F97682ED0511EEBEBDA9BF775412E6.roa
File: E8F97682ED0511EEBEBDA9BF775412E6.roa (raw, json)
Hash identifier: oPbGSZPnfIHKgmdOoXhkyxsJav6aa5CueNfJmi2pZys=
Subject key identifier: 0E:F3:51:BB:CF:38:C9:9E:BF:C5:00:B4:6D:E1:8E:4D:87:B8:BB:00
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 102E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E8F97682ED0511EEBEBDA9BF775412E6.roa
Signing time: Thu 28 Mar 2024 13:20:13 +0000
ROA not before: Thu 28 Mar 2024 13:20:10 +0000
ROA not after: Sat 28 Mar 2026 13:20:10 +0000
asID: 14445
IP address blocks: 102.129.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4142 (0x102e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 28 13:20:10 2024 GMT
Not After : Mar 28 13:20:10 2026 GMT
Subject: CN=66056e8d-1830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c5:75:50:af:ff:d1:cc:f9:d5:e0:43:b1:2c:
8e:1a:5e:10:51:59:c4:65:dc:06:da:2d:db:67:d7:
83:88:3f:31:6c:18:7d:ca:5a:43:b0:f5:70:53:90:
a8:a5:33:3a:67:26:df:0c:c3:d5:95:d6:3d:b3:c0:
ac:f1:30:be:d0:1d:ff:96:de:3b:60:5c:55:e6:e5:
d5:14:9b:2d:f8:4a:a3:1d:3a:93:27:93:8d:4f:5e:
41:b5:bc:17:76:c8:92:4b:15:23:a9:33:40:04:c7:
b1:08:19:b8:31:7b:77:a0:a8:4e:71:81:ec:82:7e:
b9:45:39:43:8f:77:39:bd:3f:f6:00:97:63:f5:39:
bb:ed:f8:de:ec:54:ab:e2:ab:bf:c4:4c:35:fc:0e:
e1:06:d8:5c:93:fa:bb:14:49:b4:ae:d9:d0:fd:f3:
4c:f6:30:79:a4:94:74:da:57:13:fc:41:62:ad:ee:
b9:b9:cd:cf:ca:ee:f8:64:a2:03:25:6f:c9:c1:0c:
2e:f6:15:f8:32:9e:6c:4e:a4:e9:37:27:29:83:ef:
08:84:00:64:5c:a6:8d:5d:c8:27:ba:65:a9:1d:30:
47:01:af:4c:1d:24:6f:90:fb:79:a0:cf:cf:c8:3f:
18:00:18:01:31:b4:1f:82:52:54:db:bc:36:3e:b3:
59:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F3:51:BB:CF:38:C9:9E:BF:C5:00:B4:6D:E1:8E:4D:87:B8:BB:00
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E8F97682ED0511EEBEBDA9BF775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.165.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:c9:bf:74:75:90:7a:0d:27:86:93:2c:90:80:92:e9:65:1e:
4f:04:a7:49:bf:52:58:a6:e6:c2:fd:d2:20:5f:c5:9a:a5:b7:
86:7e:38:ee:33:41:52:d2:71:e2:7b:89:ec:a1:a4:e3:be:f6:
83:9f:fb:34:f1:0f:00:8a:70:9b:30:50:6c:ed:3a:9f:d4:58:
16:32:d8:71:c2:16:97:db:53:b4:14:21:c2:ba:9b:e4:3f:45:
88:58:cd:91:1e:5a:5f:ef:e6:e6:3d:21:14:29:9e:61:9c:31:
f8:66:ee:6b:9e:b0:e2:b4:b9:05:c1:7c:e8:24:a3:92:0a:f6:
91:37:36:95:ac:c9:12:3f:df:0c:10:9c:0b:c0:c6:e2:70:53:
54:af:e2:17:31:a3:10:0a:3f:30:aa:11:37:6f:f2:7c:9d:ed:
f6:17:6c:b6:35:a0:45:8d:ed:c3:ef:6d:e9:f3:8f:f3:f9:de:
c4:b9:d5:8d:74:86:80:47:09:c0:30:f2:89:50:54:ae:83:8b:
b1:5d:1d:aa:51:7d:86:b9:83:f0:cb:04:70:1e:04:82:14:2a:
27:aa:00:45:86:0a:d1:b8:6c:68:cf:ad:1e:2e:49:17:b7:30:
35:af:d3:7e:c2:d5:e7:c0:3d:d8:58:a3:9e:0d:7a:56:5e:9d:
fa:b0:08:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:42 2024 by rpki-client on console-ams.rpki-client.org