Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/49BADED6E0AF11EBA4AE8C60F8AEA228.roa
File: 49BADED6E0AF11EBA4AE8C60F8AEA228.roa (raw, json)
Hash identifier: bfzLeABKt8iJaNdlc12joZPlW2B3ok9kJhlWiLncwS0=
Subject key identifier: 30:13:40:42:36:63:C0:31:34:A1:F1:21:C1:C2:0A:1A:D6:BF:49:39
Certificate issuer: /CN=F3632CFEAF/serialNumber=8017647005B9191420C991B1AE0798B5ACA14D0C
Certificate serial: 90
Authority key identifier: 80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/49BADED6E0AF11EBA4AE8C60F8AEA228.roa
Signing time: Fri 09 Jul 2021 12:15:02 +0000
ROA not before: Fri 09 Jul 2021 12:14:57 +0000
ROA not after: Wed 31 Dec 2031 12:14:57 +0000
asID: 37025
IP address blocks: 102.219.194.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3632CFEAF/serialNumber=8017647005B9191420C991B1AE0798B5ACA14D0C
Validity
Not Before: Jul 9 12:14:57 2021 GMT
Not After : Dec 31 12:14:57 2031 GMT
Subject: CN=60e83dc6-7ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b8:87:8a:29:25:0b:47:d4:e5:d7:1f:c5:67:
06:41:05:fd:e6:df:11:f9:17:96:13:b7:fa:78:24:
4c:bc:f3:94:43:a6:a3:97:c2:2e:3e:0c:41:7c:f7:
e5:2e:77:1c:06:87:f2:4d:95:e9:77:86:09:9c:55:
16:e1:84:8f:35:a0:d5:f5:de:26:da:38:63:bb:0e:
b7:3f:7e:8c:fa:ea:4a:de:68:56:fd:73:f5:42:86:
27:57:a6:67:0b:51:69:ee:ea:6d:b9:75:fb:7a:16:
8f:65:6c:41:94:24:10:61:88:82:fd:91:05:a6:a0:
b6:99:2b:0c:83:4d:5a:60:50:8a:ba:b7:2b:6e:da:
09:4f:9e:27:59:98:16:1c:82:ab:f6:ea:80:cd:27:
1e:af:57:f7:b3:bf:05:90:64:3b:d7:5a:0a:91:07:
50:b6:68:a1:d8:5a:4b:64:ec:6a:89:4b:97:4d:08:
b6:cd:86:92:82:90:2e:7a:4f:9e:c5:19:99:8d:33:
82:29:88:e7:87:05:f3:41:5d:36:5d:d8:20:55:15:
6c:44:3a:42:a8:73:24:a0:77:59:ea:a7:c7:ef:d2:
1c:99:4a:58:21:71:c3:3e:34:1e:cd:7e:cc:b9:f5:
4f:b7:1b:84:0f:a2:81:78:fb:bf:d4:52:6d:73:1a:
ad:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:13:40:42:36:63:C0:31:34:A1:F1:21:C1:C2:0A:1A:D6:BF:49:39
X509v3 Authority Key Identifier:
keyid:80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/49BADED6E0AF11EBA4AE8C60F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.219.194.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:53:88:da:2b:73:d3:96:7a:19:2b:05:ac:d9:16:81:43:32:
4c:87:65:59:b5:f5:5b:04:dd:ad:ca:cd:9d:6f:da:1b:f1:52:
dc:a7:a1:9f:bf:43:d3:8c:14:93:27:be:6e:0c:a9:a3:d9:40:
ac:47:f2:92:65:57:79:23:c7:db:c1:35:7f:f1:fb:c8:45:ec:
0f:7f:24:c6:cc:19:fb:68:2a:32:80:44:8a:72:46:31:7f:3d:
a0:d3:79:44:72:eb:9f:69:b0:44:79:57:fb:02:e5:2a:36:9a:
68:f5:90:72:ad:f2:cd:b7:9d:45:94:05:64:3b:13:37:fa:93:
9f:50:d1:cf:f2:4b:c6:14:6b:df:63:44:ab:f3:f1:d6:58:fa:
39:39:0f:0c:45:7e:cf:bb:e0:74:97:2c:b7:ac:32:57:25:f0:
90:f5:e6:d1:8a:d4:39:7a:c4:3f:e6:8a:bf:f8:fe:87:de:d2:
40:5a:96:22:17:28:94:22:d6:44:d5:77:93:82:97:e9:48:a8:
68:71:ce:6b:26:a9:5c:2c:0f:fd:96:b0:48:ee:83:81:1b:89:
df:0b:22:6a:cb:48:30:14:7c:9b:e8:da:50:9a:e0:cc:a6:b7:
59:d7:2d:76:55:76:b3:49:49:2d:be:1a:6f:d9:3f:ed:b0:cb:
4f:90:45:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:03:35 2024 by rpki-client on console-ams.rpki-client.org