Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FA5E51FA857B11EEA076A0704AD9E6FC.roa
File: FA5E51FA857B11EEA076A0704AD9E6FC.roa (raw, json)
Hash identifier: qVDefy6rpXimQm3IhAVHa8FwIXpv1+ImJRTRkFIs8ns=
Subject key identifier: 1E:1C:29:97:C9:2D:1C:AB:06:0F:4D:12:C4:A8:2E:24:64:0A:32:DC
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0E3F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FA5E51FA857B11EEA076A0704AD9E6FC.roa
Signing time: Fri 17 Nov 2023 19:03:22 +0000
ROA not before: Fri 17 Nov 2023 19:03:18 +0000
ROA not after: Tue 26 Nov 2024 19:03:18 +0000
asID: 11426
IP address blocks: 102.129.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 01 May 2024 09:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3647 (0xe3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 17 19:03:18 2023 GMT
Not After : Nov 26 19:03:18 2024 GMT
Subject: CN=6557b8fa-e7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:83:b4:3f:95:9a:82:c5:ba:7c:8b:97:65:14:
a8:95:5f:ad:e9:5c:df:85:37:61:31:ba:1c:39:d5:
85:61:35:a9:b7:1d:f6:37:13:9c:0a:3f:33:6a:93:
93:a2:17:c8:79:fe:9f:87:85:3b:35:a0:ad:e1:53:
9e:f6:5e:34:73:36:0b:28:54:87:06:a5:b7:fc:2e:
67:1f:a9:e2:a7:63:13:4c:45:d1:87:8a:4a:7f:96:
9b:94:db:1e:34:e0:cb:20:e9:74:3f:92:8d:12:b0:
71:ec:94:2a:d9:bd:c4:46:af:2d:66:98:d9:02:a6:
41:8c:43:54:73:44:5e:32:c9:ed:47:5c:7a:b7:c8:
11:d7:70:e8:37:38:bf:a1:6c:de:17:e6:f3:e1:40:
30:5d:f1:38:f5:d6:60:e5:62:96:2f:aa:80:54:3b:
29:64:d2:32:4f:92:74:2f:19:24:05:7d:dd:e7:96:
8f:75:ae:4a:c1:9f:9e:b3:f5:34:0c:be:85:25:15:
52:87:79:c1:3e:a0:c1:63:94:ad:e0:50:f7:f4:38:
93:7e:2c:b1:62:f1:6e:2a:95:2a:8a:e7:8c:45:7d:
84:fb:c4:8d:9a:a8:96:24:e2:92:c5:bf:47:2f:57:
4d:6f:c8:44:61:39:5c:a4:42:22:14:4a:01:b9:7b:
ff:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1C:29:97:C9:2D:1C:AB:06:0F:4D:12:C4:A8:2E:24:64:0A:32:DC
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FA5E51FA857B11EEA076A0704AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.179.0/24
Signature Algorithm: sha256WithRSAEncryption
70:a9:f6:77:25:bf:f8:ff:b4:5e:8e:b8:d3:95:70:5c:04:9f:
c7:23:4a:69:10:9d:b0:6e:c7:0f:dc:16:75:0a:47:e4:3e:e1:
bc:03:cf:26:62:c0:82:64:7e:ae:1c:cc:8d:ed:f6:91:21:29:
fd:a6:2b:dc:46:3a:7f:49:d0:a9:bf:d2:c3:1e:63:99:8f:eb:
24:65:86:32:66:cb:d3:44:ca:8f:87:9b:54:0b:2c:45:f3:30:
40:29:8f:c8:16:02:f4:0b:66:5a:de:fa:3e:8f:f1:1b:1e:64:
bb:37:66:d7:24:8f:40:8b:f2:bd:48:17:2b:fa:73:5a:16:83:
97:2d:9d:04:9e:d5:2c:8e:87:9a:de:5f:df:58:c8:7c:09:98:
1f:39:7b:6d:a1:71:07:e3:e4:84:0b:35:f0:01:90:c5:17:70:
92:ec:1d:3f:2d:37:f6:59:5a:c8:0f:88:52:0b:ae:7b:9d:96:
a0:e2:0d:34:db:b1:a1:97:6e:42:24:b1:a7:0e:a7:64:a7:5a:
7c:c9:45:cb:70:0d:30:f9:3c:51:fe:b9:d0:a7:ac:f2:7a:f4:
1a:5e:5e:ef:57:59:cf:e7:2e:2b:6a:0b:0c:97:50:50:ef:94:
35:cc:69:40:47:c4:1f:3d:7b:e5:04:12:f1:2f:ba:88:e5:03:
45:78:62:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 02:03:11 2024 by rpki-client on console-fra.rpki-client.org