Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F8A06FD8B16911ED85B0E891F1222468.roa
File: F8A06FD8B16911ED85B0E891F1222468.roa (raw, json)
Hash identifier: L8VZYnTzbX1R+mW1gcaeKVbxKx7F6DWuHYnCQrVRlRA=
Subject key identifier: C0:22:4E:6D:F4:10:4E:16:33:0D:B6:90:CF:C1:0B:2B:3F:AD:4D:C1
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A2A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F8A06FD8B16911ED85B0E891F1222468.roa
Signing time: Mon 20 Feb 2023 22:00:22 +0000
ROA not before: Mon 20 Feb 2023 22:00:18 +0000
ROA not after: Fri 21 Feb 2025 22:00:18 +0000
asID: 64267
IP address blocks: 102.129.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2602 (0xa2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 20 22:00:18 2023 GMT
Not After : Feb 21 22:00:18 2025 GMT
Subject: CN=63f3ed76-7541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:61:ad:1e:89:27:e6:f7:36:b3:6f:e8:05:
cf:f0:df:92:16:cb:1d:a9:d7:af:71:1c:1a:43:29:
28:69:4f:fb:f0:c0:b3:e0:cc:0d:d3:ac:f0:43:3d:
ab:48:d9:2e:9f:5e:c7:23:03:cc:0d:a7:88:b5:67:
6b:f2:11:9f:41:62:d7:7c:d8:1c:68:c8:ce:72:72:
03:18:bc:bf:b2:44:af:54:16:3b:e8:5d:74:04:12:
d2:27:89:d6:b5:61:73:54:a4:3b:73:64:f3:31:6c:
32:9f:ab:f8:42:e5:76:3c:9e:f3:e4:d7:bb:c9:bf:
98:12:1b:0c:db:97:45:ef:ac:08:80:28:dd:a3:c1:
d8:8d:3d:ca:12:cb:90:65:ff:16:c0:d4:7f:10:8a:
9f:2d:a9:3c:9a:80:b1:72:bf:d6:26:81:98:d0:4e:
6e:d0:b3:7a:86:6a:e9:05:8c:dc:86:74:16:b3:ef:
3f:8c:90:bb:27:b3:e5:b1:0e:b7:95:8c:49:52:70:
3b:67:a1:33:3b:e9:ee:55:3e:c3:00:e2:39:1f:e1:
b3:1c:5b:4d:a1:de:0a:3f:c3:6a:6f:17:ba:54:4e:
97:15:63:2a:d8:a4:3d:bd:ee:f8:d4:52:2f:b4:2c:
0a:c4:fd:b6:2f:36:2b:ce:68:1e:1d:77:97:d3:ac:
92:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:22:4E:6D:F4:10:4E:16:33:0D:B6:90:CF:C1:0B:2B:3F:AD:4D:C1
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F8A06FD8B16911ED85B0E891F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.244.0/24
Signature Algorithm: sha256WithRSAEncryption
02:a0:5a:83:33:2e:b8:fa:4b:af:06:cd:4f:90:33:2d:f7:37:
71:11:c7:90:c4:7e:23:56:98:97:da:34:65:60:f4:b4:d5:de:
ee:3a:5c:11:46:67:dd:e5:69:93:25:6b:c1:bf:a1:8e:ce:f8:
37:b8:dd:55:d8:c7:35:b9:91:36:b8:6a:ba:fc:07:51:15:12:
de:7b:b7:7b:f2:23:49:95:8b:69:81:3c:89:d6:de:09:e3:f3:
9b:1e:8e:4f:24:a0:61:5e:bc:58:5a:d8:81:22:ea:08:03:9b:
c4:9a:f4:5f:0b:61:1f:a1:dd:3a:49:af:09:24:a1:23:2b:2a:
56:1b:f5:d0:e9:5f:8b:33:fe:41:3f:80:ab:66:cc:9f:7e:13:
cf:e9:66:b0:f5:ae:b2:32:8f:b6:b7:cd:3d:99:d4:40:f1:c7:
83:f5:c6:a3:92:0c:f7:5b:0e:8b:69:4d:3f:fd:b8:cb:04:51:
5f:5a:7c:f1:da:55:b8:6f:22:d5:8c:fe:d3:b1:d0:db:98:2b:
4f:7f:0a:66:61:42:4f:33:19:ae:30:37:cf:1e:8c:8c:d9:a8:
dc:a9:9f:6d:20:fb:df:87:c8:a3:5a:73:67:2f:c9:ec:6f:a5:
4e:92:07:f7:2d:cc:36:e1:94:cb:c0:5d:c4:09:af:e9:0b:bd:
08:50:0f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:42 2024 by rpki-client on console-ams.rpki-client.org