Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EF4EC3B2B42F11ED952FC182F1222468.roa
File: EF4EC3B2B42F11ED952FC182F1222468.roa (raw, json)
Hash identifier: X2rSWruQtsJlY/WsfpZCWwRukA/Qr1tGykochZJ88Z4=
Subject key identifier: B1:4E:11:55:BC:11:CB:01:7F:98:10:B8:62:50:6C:70:78:03:27:04
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A94
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EF4EC3B2B42F11ED952FC182F1222468.roa
Signing time: Fri 24 Feb 2023 10:42:29 +0000
ROA not before: Fri 24 Feb 2023 10:42:25 +0000
ROA not after: Sat 22 Feb 2025 10:42:25 +0000
asID: 61317
IP address blocks: 102.129.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2708 (0xa94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 24 10:42:25 2023 GMT
Not After : Feb 22 10:42:25 2025 GMT
Subject: CN=63f89495-3a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ef:0a:59:1e:c2:f3:7a:6b:cd:12:f9:d0:8d:
e7:af:f5:4b:97:99:01:51:bc:83:6f:2b:d7:6b:13:
29:c9:72:49:b6:1a:c6:65:4c:30:ab:1a:06:ea:de:
f3:70:18:77:9d:46:62:c1:66:ba:12:a6:14:46:b2:
83:04:b1:f4:34:d0:47:15:42:a4:c7:c0:28:db:90:
a1:6c:4f:5f:a5:79:59:61:c4:aa:99:da:77:bc:ed:
03:16:75:5b:4d:95:7c:a3:62:2f:b5:42:2f:a2:22:
a5:1f:d0:40:78:70:23:21:26:a6:79:3d:07:87:ea:
af:a1:b9:bb:87:be:75:82:35:5f:84:4f:41:65:bd:
6a:c9:ca:27:6c:24:ce:8d:79:bf:ff:d3:84:4b:84:
87:bc:d9:6d:0e:8c:67:64:01:69:bf:bd:88:c6:9a:
49:c3:1c:59:0c:99:38:4d:b5:c3:35:6e:d5:6b:70:
10:5d:a9:ec:18:81:b8:8a:01:06:44:32:a3:48:16:
1a:70:13:9f:fa:c9:a8:fb:6b:34:fb:23:e0:b7:94:
17:67:2c:9e:f5:b3:ef:ae:34:be:2f:b1:8b:fb:0e:
9b:f0:9f:56:c7:5d:87:5e:06:eb:4c:f6:af:9f:e5:
02:06:40:d3:14:34:bb:42:33:f3:2f:7d:73:9e:6b:
a7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4E:11:55:BC:11:CB:01:7F:98:10:B8:62:50:6C:70:78:03:27:04
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EF4EC3B2B42F11ED952FC182F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.249.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:47:66:28:82:12:c9:5d:a0:29:9f:fe:d3:63:ab:ba:b0:12:
cf:d5:5a:a0:a9:dd:97:ed:d0:92:e8:ec:27:7b:fa:ef:5e:0e:
54:36:4f:60:0d:86:22:1f:b7:69:54:38:f6:92:11:ee:08:c9:
a2:bf:a5:16:5a:b5:5d:ff:fb:de:7d:e7:6d:29:9e:77:27:b5:
24:1b:e3:5f:98:48:98:a7:5e:9a:82:1b:b6:51:d0:96:7a:7e:
6d:e7:24:3b:a5:5c:44:5a:0f:7d:2f:16:54:79:f5:5a:b1:43:
49:1d:84:eb:9f:26:88:93:1d:43:96:73:ca:b5:41:af:43:35:
43:f1:a0:67:4f:5e:0c:aa:85:af:0b:2e:54:a5:0c:79:2f:35:
0e:68:7a:0c:1d:16:52:ad:27:b8:62:c7:5c:a0:93:58:5a:db:
67:8e:fd:b2:59:a9:6d:c5:30:78:cd:7f:db:4d:f2:2e:6b:69:
57:6a:1a:17:9b:4d:fb:57:5c:1f:66:d5:c5:04:e9:d9:60:49:
cd:29:dc:10:fa:1f:be:0f:bf:2c:57:6c:0b:1c:e0:8c:30:78:
92:9b:86:c1:96:ec:fd:3c:34:24:8a:04:36:8e:5b:34:67:9f:
e7:bd:ff:9e:d6:a7:46:5f:fa:43:47:58:c8:a2:52:e8:a3:fc:
5a:b0:76:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:11:00 2024 by rpki-client on console-ams.rpki-client.org