Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/234A1CC0C04011EABDD07A21F8AEA228.roa
File: 234A1CC0C04011EABDD07A21F8AEA228.roa (raw, json)
Hash identifier: qxLDaEM+dLvWNlnURJT6LsT7+vD5fBM4n0SH7Mu85No=
Subject key identifier: D3:E5:89:D1:34:0F:4E:54:C5:A9:19:F7:63:0E:36:DD:6D:ED:04:B5
Certificate issuer: /CN=F3618989AF/serialNumber=FC216A385043BAB136787AC09982546190CBDE92
Certificate serial: 02
Authority key identifier: FC:21:6A:38:50:43:BA:B1:36:78:7A:C0:99:82:54:61:90:CB:DE:92
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/234A1CC0C04011EABDD07A21F8AEA228.roa
Signing time: Tue 07 Jul 2020 10:53:49 +0000
ROA not before: Tue 07 Jul 2020 10:53:44 +0000
ROA not after: Sun 07 Jul 2030 10:53:44 +0000
asID: 328644
IP address blocks: 102.223.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3618989AF/serialNumber=FC216A385043BAB136787AC09982546190CBDE92
Validity
Not Before: Jul 7 10:53:44 2020 GMT
Not After : Jul 7 10:53:44 2030 GMT
Subject: CN=5f04543d-8b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9c:26:83:cd:00:e5:76:26:17:e1:c9:35:ac:
81:93:c8:fd:d9:31:67:a5:6d:17:0a:ee:85:e3:2a:
6a:cb:14:ed:dc:be:4c:95:8d:b6:2d:13:c3:c6:5f:
17:ac:67:5d:39:3e:6c:e3:2e:15:c2:c1:d4:a7:4f:
d4:28:a2:c9:c6:b7:cc:c0:f8:02:9a:f2:92:e9:00:
7a:22:11:e1:b1:cd:91:03:93:24:94:0d:a2:44:4a:
64:e8:83:46:d4:36:0f:c6:c3:d5:1e:67:94:f9:d1:
24:cc:e6:8e:b2:65:5e:f6:39:47:e6:8e:11:22:f2:
46:cb:07:e6:5d:67:3f:e2:a9:f3:ed:5a:48:6b:94:
80:2a:3a:fb:9b:78:89:72:0c:3c:87:56:2f:0e:b1:
66:6f:b9:09:5e:2e:62:00:7d:74:9d:88:2c:5b:a1:
07:c0:6e:d7:e8:81:4e:fb:d4:fb:19:cf:2c:dc:31:
bf:2d:d4:ba:64:42:4c:83:ea:31:38:0d:fd:34:a2:
30:1b:92:c0:64:1b:43:2a:07:66:49:28:7b:98:70:
d0:a8:3e:8a:62:eb:41:ce:46:99:69:cc:82:7c:2e:
f8:03:23:b8:4d:1d:b5:6d:54:ba:cb:8d:70:b2:a6:
f0:b4:94:74:99:18:7c:5b:38:e5:7e:f0:af:40:4d:
d8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E5:89:D1:34:0F:4E:54:C5:A9:19:F7:63:0E:36:DD:6D:ED:04:B5
X509v3 Authority Key Identifier:
keyid:FC:21:6A:38:50:43:BA:B1:36:78:7A:C0:99:82:54:61:90:CB:DE:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/234A1CC0C04011EABDD07A21F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.223.251.0/24
Signature Algorithm: sha256WithRSAEncryption
23:db:57:98:c9:0b:23:f4:d7:96:f5:a1:8f:bc:52:b3:d4:36:
62:6f:38:b1:90:f6:35:33:70:49:bf:3d:49:dc:38:01:86:1a:
57:0c:25:28:24:f9:51:fc:cd:3e:b1:41:97:57:59:c2:88:56:
5e:e9:ff:a6:a8:6a:30:4c:a9:61:03:c5:92:8b:d0:15:01:f2:
59:92:84:5e:69:d7:83:30:a2:31:cc:3c:27:32:19:00:4a:e4:
64:44:8d:5d:8f:5e:dc:96:40:fb:fb:b4:29:ce:e6:0f:34:8d:
3d:64:3b:1b:fd:03:9b:2f:dc:88:10:00:68:0d:1b:b5:3a:09:
b7:57:2e:6e:2e:9c:bf:f5:ae:c0:8a:9b:57:18:bf:6e:3a:24:
e0:06:4c:d6:45:c1:83:aa:64:79:47:27:68:b1:fd:f4:c0:dd:
cc:2d:e0:7a:40:b9:2b:89:e9:5f:d9:4a:29:9d:41:7c:ef:b2:
a3:bc:30:6b:a9:b9:9a:88:67:b6:57:b5:0d:44:69:97:6f:05:
ad:79:ef:8c:01:a4:ca:f4:2b:c4:6f:6e:fc:a5:76:9b:7b:06:
8b:d5:22:f8:2f:20:36:e0:68:52:7b:1d:68:0f:2b:53:3c:a9:
61:0e:af:8b:7f:32:f1:b3:e0:50:e4:fc:6d:f5:59:5c:4c:a0:
d7:54:23:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:31 2024 by rpki-client on console-ams.rpki-client.org