Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FDF8D758142A11EEA5D2C72A4AD9E6FC.roa
File: FDF8D758142A11EEA5D2C72A4AD9E6FC.roa (raw, json)
Hash identifier: Qn8+ZqEsvNVMCQfei3BbplEpSx5oK/E+MMjFdTkE67A=
Subject key identifier: EE:68:FA:24:D6:23:AD:25:D4:C8:B5:68:EF:D8:3E:5E:6B:27:36:E4
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C27
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FDF8D758142A11EEA5D2C72A4AD9E6FC.roa
Signing time: Mon 26 Jun 2023 14:08:58 +0000
ROA not before: Mon 26 Jun 2023 14:08:53 +0000
ROA not after: Wed 25 Jun 2025 14:08:53 +0000
asID: 37677
IP address blocks: 102.129.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3111 (0xc27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 26 14:08:53 2023 GMT
Not After : Jun 25 14:08:53 2025 GMT
Subject: CN=64999bfa-07c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:b3:c8:00:be:0a:06:13:f0:fe:e0:b6:81:
3d:9b:f8:3e:6a:15:2c:87:3d:35:90:da:3e:88:f1:
95:5b:f6:ca:af:79:2f:65:08:3b:81:22:17:65:b1:
ce:9e:3c:8a:07:03:7d:da:63:5f:f9:68:f9:37:8d:
b4:9f:fe:11:72:81:33:37:e4:53:77:f4:24:4b:62:
9f:ee:a0:72:82:75:db:a5:56:6d:71:ab:0a:b1:56:
9a:59:83:2f:07:08:0a:97:f3:ad:ed:bc:85:ca:c4:
ac:7a:89:35:4c:11:c8:f0:34:d5:e2:c0:ce:aa:ab:
55:47:0a:4e:83:06:fa:a1:98:71:79:60:09:2e:49:
43:73:d0:41:af:5d:c7:26:4a:e4:73:d5:6c:b7:2c:
c9:e1:a8:47:58:c6:5b:2d:8c:4d:0e:f6:fc:52:6f:
3c:f4:95:c1:08:f7:33:1b:fc:94:cf:51:7d:5e:e1:
5b:0b:dc:1c:be:8d:29:05:e3:80:3e:85:fa:b8:81:
bf:c2:a5:d5:00:97:7b:5a:7a:8d:b0:43:9b:73:00:
3e:6e:f4:30:17:73:85:b2:d4:74:8b:d2:4c:d0:9f:
9a:19:18:d2:7e:a1:c6:39:5f:8f:6a:48:36:4e:c7:
fb:71:36:28:f2:f5:3b:70:09:89:b3:21:00:d1:58:
24:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:68:FA:24:D6:23:AD:25:D4:C8:B5:68:EF:D8:3E:5E:6B:27:36:E4
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FDF8D758142A11EEA5D2C72A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.182.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:f0:93:fe:74:f4:b1:8a:6c:9b:33:9c:a7:4f:f6:b7:8e:27:
a3:93:a7:34:a4:da:db:9d:1a:17:55:77:19:54:b2:64:57:bd:
56:83:eb:ed:1c:94:a0:83:1c:71:23:2b:9f:3b:e6:72:e0:15:
1b:c1:4e:00:07:0c:40:41:2d:54:a5:e8:69:7b:22:a0:df:14:
83:0f:02:12:33:16:6e:6a:2a:4d:f2:4b:b4:ec:f6:01:d6:9f:
69:fd:6a:31:c4:26:66:ea:92:65:5d:3c:cf:0b:af:5e:b4:cd:
a2:cd:df:e4:b2:11:3b:7a:97:5c:2c:e3:8d:bb:14:89:05:96:
78:d8:91:74:3d:49:9d:4f:76:ca:c9:ff:b9:cb:3f:0c:16:2e:
2c:f0:f0:30:37:67:3f:da:d3:ce:30:41:8a:cd:87:de:c1:06:
8b:0f:6a:f4:3a:70:59:1f:29:b2:39:ab:eb:77:5e:c4:08:88:
5d:4d:78:18:33:81:a4:7f:69:ac:52:49:07:39:25:85:c4:94:
54:e2:b6:c4:ba:50:44:d7:70:59:b1:89:41:49:d8:a1:de:4a:
45:48:4b:51:50:fd:91:4a:81:28:e1:19:31:04:c6:23:a0:f4:
d7:70:88:3c:7b:a8:da:65:b7:11:0c:28:2a:52:e3:0c:24:84:
2f:87:92:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:53:11 2024 by rpki-client on console-ams.rpki-client.org