Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/59B094CCD4CD11EBB5CE312EF8AEA228.roa
File: 59B094CCD4CD11EBB5CE312EF8AEA228.roa (raw, json)
Hash identifier: WZXnDXOTSBrcGjPAB+W4tlPrl63sGMKab4xVa7Dl5+c=
Subject key identifier: 2C:EF:78:51:57:44:0B:DE:8E:49:72:E6:EC:FA:AD:18:4F:E7:31:BE
Certificate issuer: /CN=F362B5D1AF/serialNumber=A5F8D1BD59220B8753A379D4A33D23BF4232B136
Certificate serial: 22
Authority key identifier: A5:F8:D1:BD:59:22:0B:87:53:A3:79:D4:A3:3D:23:BF:42:32:B1:36
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pfjRvVkiC4dTo3nUoz0jv0IysTY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/59B094CCD4CD11EBB5CE312EF8AEA228.roa
Signing time: Thu 24 Jun 2021 09:20:00 +0000
ROA not before: Thu 24 Jun 2021 09:19:54 +0000
ROA not after: Wed 30 Apr 2031 09:19:54 +0000
asID: 327750
IP address blocks: 102.221.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.mft
rsync://rpki.afrinic.net/repository/afrinic/pfjRvVkiC4dTo3nUoz0jv0IysTY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B5D1AF/serialNumber=A5F8D1BD59220B8753A379D4A33D23BF4232B136
Validity
Not Before: Jun 24 09:19:54 2021 GMT
Not After : Apr 30 09:19:54 2031 GMT
Subject: CN=60d44e40-5e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d7:43:1b:38:56:9b:5d:84:d1:e3:84:a3:e1:
54:b6:5d:d2:a5:3c:9c:8e:cc:79:59:98:7b:77:ce:
57:7d:ba:cb:d2:5c:bf:05:18:40:69:4e:01:a6:57:
cc:b6:c9:af:29:cc:1b:91:43:bc:27:e0:bd:f6:e6:
84:60:f0:68:4c:58:51:c8:ba:84:c9:5a:cf:a6:de:
26:eb:b2:a4:fb:a3:5b:8e:9d:3f:9a:35:86:8c:34:
04:68:38:fc:df:24:72:01:09:dd:46:ab:a8:1f:74:
b3:35:6a:5b:2f:05:d3:85:b7:e7:04:03:7b:b4:2b:
f9:31:ff:df:19:84:a2:63:a6:b0:5b:46:c5:7d:6d:
17:22:8b:c1:12:17:6f:71:a6:83:6d:54:f8:6a:d1:
3a:98:37:65:90:e1:55:22:b3:04:cb:82:2c:c8:7f:
38:c5:95:26:76:48:59:56:49:80:c5:ce:02:b1:88:
0b:8c:03:c3:1e:f0:a3:e3:5f:a8:db:d3:70:86:26:
57:b2:fc:fd:1b:e3:d3:a7:44:80:04:04:c7:9f:26:
0c:e0:d7:1c:4d:1f:61:7e:7b:24:0d:5b:0d:f7:85:
cd:c7:a3:d8:b9:2e:6a:ae:ec:d8:46:33:a6:2d:98:
07:f0:99:eb:86:1b:b3:a1:cc:1e:84:05:59:c1:77:
1e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EF:78:51:57:44:0B:DE:8E:49:72:E6:EC:FA:AD:18:4F:E7:31:BE
X509v3 Authority Key Identifier:
keyid:A5:F8:D1:BD:59:22:0B:87:53:A3:79:D4:A3:3D:23:BF:42:32:B1:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfjRvVkiC4dTo3nUoz0jv0IysTY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/59B094CCD4CD11EBB5CE312EF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.240.0/22
Signature Algorithm: sha256WithRSAEncryption
03:2b:88:7d:dd:e2:47:ec:5c:2f:ce:99:6e:5f:fd:a9:de:89:
d4:15:02:0f:8c:30:88:57:16:95:b5:1c:9c:64:32:a3:ce:5c:
0b:2f:1a:22:06:d4:5a:92:ba:c6:d9:3c:c2:41:2e:bb:45:3b:
34:af:2f:6f:a3:bb:36:f3:f5:d9:b1:42:d2:df:46:3d:c4:68:
8d:ce:f4:77:77:74:30:c0:a3:c5:e8:57:5d:0b:06:12:9d:a9:
a1:cd:9f:a5:d4:aa:7c:19:ee:ac:10:72:30:d6:e1:cd:78:78:
31:c8:fd:3d:00:53:c2:d0:b7:ea:ac:1b:a1:7a:32:26:98:d0:
cc:6e:fd:5d:86:37:b0:41:b5:6d:55:af:ed:ab:cf:90:02:d5:
49:28:79:f2:1b:59:38:7b:a2:df:eb:90:08:27:9d:07:0d:c3:
3f:6d:53:43:58:79:21:52:3a:5c:52:41:28:35:c0:49:18:94:
b1:78:b0:f8:1b:89:41:cc:5e:21:9f:c8:e9:60:df:45:5f:0d:
31:22:8e:58:62:48:9a:ed:96:d5:fe:b2:18:09:a6:97:b3:63:
5d:1c:51:dd:34:cd:b4:3b:38:ad:5f:ef:dd:ae:e6:71:16:cd:
02:df:74:78:4c:b8:8a:ec:1c:d2:c3:38:4b:63:c9:c9:cd:1a:
e2:85:24:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:29 2024 by rpki-client on console-fra.rpki-client.org