Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EE8580E8A8A111EFA53C3F73762E951A.roa
File: EE8580E8A8A111EFA53C3F73762E951A.roa (raw, json)
Hash identifier: ruFqhhtaqHrpe3g+1MC7OVamCAUCMZ0REcU9Bw5L4Wk=
Subject key identifier: 3A:78:D9:DB:61:36:61:A6:C6:95:3B:5B:DF:A7:2B:A3:AF:2C:6F:13
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 12EE
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EE8580E8A8A111EFA53C3F73762E951A.roa
Signing time: Fri 22 Nov 2024 07:18:12 +0000
ROA not before: Fri 22 Nov 2024 07:18:08 +0000
ROA not after: Sun 22 Nov 2026 07:18:08 +0000
asID: 29802
IP address blocks: 102.129.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4846 (0x12ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF
Validity
Not Before: Nov 22 07:18:08 2024 GMT
Not After : Nov 22 07:18:08 2026 GMT
Subject: CN=67403034-8e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:23:35:dc:3b:0e:88:65:ce:e0:03:d1:b1:03:
06:b1:be:42:c9:0a:c5:66:c1:a3:df:e9:bd:c0:7a:
9e:32:c9:5c:dc:33:e0:d5:9e:d2:bc:72:ba:a4:75:
6f:92:89:19:99:db:40:8b:5e:79:c9:2f:89:bf:d1:
6f:50:88:f0:7b:b9:9e:a4:4f:67:7c:34:11:2f:7e:
ec:96:53:bb:44:1f:d6:c0:41:86:e1:14:52:e3:db:
78:b6:da:b9:41:5c:8b:6f:52:8c:ab:b8:7a:9a:e0:
57:bc:3c:90:f1:ca:98:9b:20:34:61:0a:51:3f:bd:
21:36:66:cf:2e:1c:86:ca:d9:10:e4:c4:fc:82:f7:
5f:2c:41:6b:11:a4:a2:29:bd:20:a0:17:17:f8:e1:
c5:2b:f8:43:bb:b2:ba:1c:fe:5c:a3:5b:4c:2e:24:
7d:47:09:82:12:7c:ac:75:16:6a:db:03:8a:c9:97:
32:15:83:8e:5b:0b:39:73:a4:12:63:bf:b2:ee:72:
ee:e9:a0:f4:1c:b2:4b:51:d1:e4:d5:b0:cd:08:40:
18:c3:a3:12:ed:4a:6b:77:c8:17:2b:02:a3:d0:af:
72:a5:cc:e2:79:08:43:d1:9e:95:38:6e:ef:56:6a:
5f:c9:e3:00:c3:07:ae:e1:cc:04:87:e5:4e:1b:a3:
76:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:78:D9:DB:61:36:61:A6:C6:95:3B:5B:DF:A7:2B:A3:AF:2C:6F:13
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EE8580E8A8A111EFA53C3F73762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.151.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:2b:64:b4:41:c8:1a:70:ce:dc:4a:73:1e:64:0a:2c:2f:a5:
61:ff:9f:ba:0c:45:81:ac:ad:46:e1:86:b2:67:8d:99:3f:e2:
fd:2f:dd:e6:04:3e:90:f2:4e:34:c1:7d:e7:1b:4d:4e:24:ca:
90:4d:d4:e7:ca:ef:fd:76:7d:c9:f8:c8:98:33:04:bf:7c:91:
cb:d5:3b:6f:cf:fe:7f:db:5e:24:ad:55:8c:76:f1:fe:dc:05:
8c:e1:5e:d6:27:ae:c8:ac:86:47:7e:89:e1:84:91:b3:11:fb:
93:47:fd:52:82:79:1e:ff:27:e2:ae:a5:c8:96:13:61:cf:da:
e5:8d:67:5f:a9:83:90:06:35:56:e8:e6:2c:8b:48:f8:a8:56:
21:27:a1:75:79:af:a0:96:1e:a8:93:74:22:53:2d:a7:c4:16:
b5:3e:42:52:14:54:f9:b3:b1:0e:1c:90:dc:78:96:37:f9:00:
64:59:c3:f3:3f:84:4d:54:b7:4e:46:2c:0a:56:fd:8a:38:fb:
f8:3d:6b:b8:06:69:13:5e:58:40:ce:f3:80:75:61:bf:4d:6a:
3d:46:f3:93:77:72:72:45:4c:a9:fc:2d:80:f6:ec:a1:d5:6a:
48:a5:f8:ee:95:e0:5a:4f:ab:77:b3:a6:56:3b:5e:f4:9f:79:
8a:1e:46:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:38 2025 by rpki-client