Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F638C05E951311EE82D8B058D25BE465.roa
File: F638C05E951311EE82D8B058D25BE465.roa (raw, json)
Hash identifier: iBuHx3Uo/jzefdN2W7QSyG3xdfEb4xGl/jk9LzLv7Gk=
Subject key identifier: 16:D8:1B:FA:14:73:7E:0E:E7:DB:86:16:4D:7B:19:A0:7B:14:12:3D
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0E74
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F638C05E951311EE82D8B058D25BE465.roa
Signing time: Thu 07 Dec 2023 15:19:06 +0000
ROA not before: Thu 07 Dec 2023 15:19:03 +0000
ROA not after: Sun 07 Dec 2025 15:19:03 +0000
asID: 60949
IP address blocks: 102.129.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3700 (0xe74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 7 15:19:03 2023 GMT
Not After : Dec 7 15:19:03 2025 GMT
Subject: CN=6571e26a-e023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:2b:ba:ab:84:fc:4b:09:46:fe:98:f9:95:
1d:d3:12:55:a2:d7:1b:88:63:ce:8d:c5:92:02:ea:
d6:6a:34:83:dc:96:54:36:0c:24:df:ca:9b:4b:c9:
de:87:f5:ed:b8:e4:cc:29:6e:45:00:08:44:62:44:
a6:57:62:c3:82:34:5d:9a:ab:af:91:ef:f4:11:d9:
8e:70:bf:bb:80:9b:cc:e2:ec:25:80:6b:78:04:d7:
05:cc:0d:6d:6c:86:7a:07:dd:46:b0:a9:e0:01:6b:
8f:c7:c5:53:df:91:8d:17:eb:f7:06:bc:0e:b1:1b:
48:01:e6:53:70:44:da:78:e7:95:f8:7e:05:a5:3b:
ce:82:2f:7f:2e:b6:de:73:8a:6b:8c:6c:1c:c4:05:
26:d9:9d:64:ee:e5:13:28:40:e6:c9:95:4b:d4:b8:
80:e6:f6:ab:fe:19:ea:c2:49:e9:e2:c3:7a:cd:89:
5a:99:a3:f4:87:57:13:48:06:1b:ff:28:9f:ce:b5:
bd:d5:d2:64:4b:94:09:69:65:14:33:eb:45:19:5c:
3d:72:6f:10:f5:2b:ca:aa:c4:74:90:4f:44:58:f4:
73:29:d8:db:62:f5:1d:f8:f3:41:57:1a:c8:37:ad:
18:0b:1a:10:3a:a6:63:5b:0c:d6:ec:b4:cc:d5:2c:
d4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D8:1B:FA:14:73:7E:0E:E7:DB:86:16:4D:7B:19:A0:7B:14:12:3D
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F638C05E951311EE82D8B058D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.206.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ae:8d:2a:fe:3b:37:3e:b2:6c:f4:fb:9c:a2:1b:86:04:d5:
bd:ce:d7:2e:9b:35:da:fc:c0:d5:35:76:24:79:5f:a3:c8:bb:
20:55:8b:a4:68:fc:77:da:85:20:1b:f8:8b:62:fa:66:25:47:
e2:58:27:21:42:9b:ac:4c:59:ed:71:c4:88:ef:f4:e6:05:1f:
89:88:fb:dc:1e:0b:12:a3:1d:ea:59:48:14:33:f6:87:23:61:
18:a6:0d:58:43:73:8c:a5:e1:49:c3:66:57:2d:5e:67:b5:f6:
c7:4a:7f:a1:ed:d6:e0:e4:34:d6:86:63:2c:bc:95:d3:54:39:
6b:3e:9d:e9:b7:2a:78:53:78:25:4a:6d:07:fc:8f:f8:4e:5a:
74:41:2e:be:d9:b2:7a:0c:9e:6c:34:22:c9:b9:45:d1:ac:a1:
42:57:63:3a:bb:21:70:b4:a0:89:c0:82:87:ea:ed:6b:bd:8e:
8c:73:4d:7f:21:38:a7:9f:1c:c6:0f:3c:d6:c7:6c:d0:dc:1c:
cd:d5:59:15:61:8b:98:4a:2f:12:9c:f6:19:81:f4:86:74:7e:
7c:8a:ca:ff:8f:a9:5f:00:b5:99:e3:02:b5:46:29:c4:7f:06:
07:d8:54:4d:f2:3e:a0:a8:5a:5e:dd:0d:80:63:b5:93:3e:b8:
72:6a:20:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:30:21 2024 by rpki-client on console-fra.rpki-client.org