Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FDB7B726B42D11EDBC6C787CF1222468.roa
File: FDB7B726B42D11EDBC6C787CF1222468.roa (raw, json)
Hash identifier: a2Wk/xSpMZRHjpxCp+YDSOs2bVyKB3R22QdSg1eQgi0=
Subject key identifier: 99:31:40:50:B4:6E:76:A1:5C:C1:1C:C3:A9:32:37:51:F9:76:4F:00
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A74
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FDB7B726B42D11EDBC6C787CF1222468.roa
Signing time: Fri 24 Feb 2023 10:28:34 +0000
ROA not before: Fri 24 Feb 2023 10:28:30 +0000
ROA not after: Sat 22 Feb 2025 10:28:30 +0000
asID: 61317
IP address blocks: 102.129.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 00:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2676 (0xa74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 24 10:28:30 2023 GMT
Not After : Feb 22 10:28:30 2025 GMT
Subject: CN=63f89152-8e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b2:fa:1f:6f:f3:86:b9:33:93:e1:bb:6e:f7:
5b:e9:91:3b:05:68:10:ee:55:49:26:39:70:df:33:
ff:b5:44:a1:0d:b0:e2:3b:d4:b9:3a:e0:8d:5e:cb:
0a:f2:1f:e3:30:ea:59:1b:7f:f4:1d:c3:d0:f1:d8:
5d:89:dd:70:cf:85:67:69:a0:ae:75:da:23:dd:50:
d2:ef:84:bd:60:ef:f8:e0:c4:e8:98:5e:c6:23:20:
6f:12:1a:88:b3:4a:2e:94:df:57:e2:0a:0e:77:54:
be:04:99:16:67:73:1a:18:c4:1b:47:ec:31:6c:0e:
a8:29:00:b9:0e:f5:44:41:6f:8f:02:39:76:50:c1:
a1:21:88:1e:17:f4:35:55:c0:e4:dd:34:1d:b4:e9:
da:a4:1b:77:cf:af:d2:38:b5:73:72:26:67:5c:e7:
e9:b2:26:01:c2:de:49:75:13:d3:1e:cd:63:f3:44:
7a:b0:dd:55:a3:58:4c:87:a3:3f:a1:06:ae:90:7e:
26:04:01:92:22:f8:48:17:2d:cb:8a:ba:ae:6d:35:
ea:40:a3:8b:39:3d:ad:54:81:58:f3:e1:07:e4:0e:
79:f4:dc:f4:81:9a:0a:53:b7:22:2e:2c:cd:ee:15:
1c:7a:57:19:3b:c1:05:d2:f6:32:73:ec:da:cf:96:
75:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:31:40:50:B4:6E:76:A1:5C:C1:1C:C3:A9:32:37:51:F9:76:4F:00
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FDB7B726B42D11EDBC6C787CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.196.0/24
Signature Algorithm: sha256WithRSAEncryption
01:51:16:9e:de:05:d5:13:23:15:fb:da:9a:fb:d1:41:88:5f:
29:c2:14:12:fd:a7:7d:5e:bc:c5:fd:82:aa:1a:db:40:46:fe:
5d:f7:14:7b:83:19:0e:8e:71:96:72:0b:2e:ab:a0:27:78:03:
53:b4:e3:aa:3b:98:4d:40:12:0c:0e:a6:97:a7:65:c2:73:ae:
90:b1:57:e2:f9:1e:33:f8:c0:ae:c5:3c:62:59:3c:eb:d1:93:
85:b2:99:e4:c3:b5:af:7d:f1:c2:a3:79:09:3e:25:30:be:80:
85:3e:5a:83:99:56:f7:c3:fc:21:c2:61:31:4b:98:18:79:0b:
9c:e8:8c:ff:95:29:4b:9b:1e:35:93:fa:01:02:c3:2d:36:64:
87:1d:4e:c5:c0:84:3a:ab:32:89:9a:48:95:96:8d:55:d0:7c:
ec:31:d5:15:74:a2:78:5b:26:3d:85:56:40:bd:20:94:80:44:
cb:2a:bf:92:7f:c9:9f:c4:f6:a6:3b:4e:8e:fd:9f:3c:fd:91:
3b:ca:ed:29:71:35:9d:de:33:d3:3f:6b:fb:eb:a5:1e:40:4f:
41:77:da:a3:db:ce:6f:b5:70:5e:05:21:1b:05:8e:94:15:7d:
0b:8d:f3:96:b6:56:10:1e:c5:b5:94:64:c2:1c:8f:cf:5a:e1:
97:89:88:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:10 2024 by rpki-client on console-ams.rpki-client.org