Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363520F/0C22B38E848811EA853C8C80F8AEA228/014498BCC1E411EA9ED11251F8AEA228.roa
File: 014498BCC1E411EA9ED11251F8AEA228.roa (raw, json)
Hash identifier: 1KtzkM8srddYYVR4B+QcCzCCqBhSF3EZTmJ3bui3wp0=
Subject key identifier: 65:FE:53:49:7A:77:82:66:6D:98:05:E2:09:49:AB:DC:96:67:D3:A8
Certificate issuer: /CN=F363520FAF/serialNumber=143DA5777CDBB49388A52FF583DB432CBC7E5774
Certificate serial: 57
Authority key identifier: 14:3D:A5:77:7C:DB:B4:93:88:A5:2F:F5:83:DB:43:2C:BC:7E:57:74
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/FD2ld3zbtJOIpS_1g9tDLLx-V3Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363520F/0C22B38E848811EA853C8C80F8AEA228/014498BCC1E411EA9ED11251F8AEA228.roa
Signing time: Thu 09 Jul 2020 12:59:21 +0000
ROA not before: Thu 09 Jul 2020 12:59:15 +0000
ROA not after: Tue 09 Jul 2030 12:59:15 +0000
asID: 37611
IP address blocks: 102.222.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363520F/0C22B38E848811EA853C8C80F8AEA228/FD2ld3zbtJOIpS_1g9tDLLx-V3Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F363520F/0C22B38E848811EA853C8C80F8AEA228/FD2ld3zbtJOIpS_1g9tDLLx-V3Q.mft
rsync://rpki.afrinic.net/repository/afrinic/FD2ld3zbtJOIpS_1g9tDLLx-V3Q.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363520FAF/serialNumber=143DA5777CDBB49388A52FF583DB432CBC7E5774
Validity
Not Before: Jul 9 12:59:15 2020 GMT
Not After : Jul 9 12:59:15 2030 GMT
Subject: CN=5f0714a9-8da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b7:7a:77:a4:00:7c:ca:40:7d:ae:2d:51:4b:
17:8b:60:a7:06:6a:cb:43:ee:a7:b4:b2:f5:da:e1:
32:b5:2c:16:e6:bb:bb:84:04:b1:a6:fd:0f:38:b1:
56:d7:ce:35:99:c4:0f:9d:53:10:d6:0d:51:c9:6e:
95:7d:74:56:68:e8:86:4d:8c:33:8c:b3:cc:13:55:
71:9d:75:6e:76:8c:ec:95:bd:62:ca:f1:e9:59:4b:
e5:71:b8:60:65:95:eb:c3:f9:3b:dd:65:fd:e8:e6:
37:91:79:65:3f:fe:86:e9:8e:f7:45:2f:69:45:66:
1c:5b:22:f1:a7:49:34:90:4a:65:ef:e3:82:f4:f0:
a2:01:46:f2:a4:d5:d1:20:3a:d5:46:c0:8e:38:33:
0f:ac:b1:da:b2:df:dc:a8:25:47:c9:d1:9e:f1:19:
7d:22:48:25:dd:c1:96:a3:b5:79:80:8d:0b:df:19:
fe:3d:33:06:51:15:e6:a8:f9:c1:e1:0c:e8:5c:c9:
0a:34:04:4d:3d:4b:91:2b:31:be:02:ec:d2:f7:ea:
66:6e:41:a4:84:c6:b0:7f:65:8f:8a:52:c1:b2:42:
60:b1:22:06:7d:35:09:67:22:ee:aa:73:b5:63:fd:
74:3a:bc:1d:ee:99:8c:fa:fd:1d:92:6f:74:5a:a3:
58:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FE:53:49:7A:77:82:66:6D:98:05:E2:09:49:AB:DC:96:67:D3:A8
X509v3 Authority Key Identifier:
keyid:14:3D:A5:77:7C:DB:B4:93:88:A5:2F:F5:83:DB:43:2C:BC:7E:57:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363520F/0C22B38E848811EA853C8C80F8AEA228/FD2ld3zbtJOIpS_1g9tDLLx-V3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FD2ld3zbtJOIpS_1g9tDLLx-V3Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363520F/0C22B38E848811EA853C8C80F8AEA228/014498BCC1E411EA9ED11251F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.124.0/22
Signature Algorithm: sha256WithRSAEncryption
85:f4:29:1b:7d:1b:d8:66:e6:17:94:72:de:28:07:3f:5d:53:
44:f3:22:29:15:41:4c:38:44:6d:0d:2b:18:18:d5:83:7e:1d:
da:54:24:c0:79:f7:92:4c:6f:06:44:a7:2c:9f:23:e3:3a:00:
a9:6a:f9:42:26:c4:bc:92:ea:23:46:99:87:04:71:2c:f5:02:
5c:55:de:b6:a7:91:98:de:b1:fc:b9:af:d6:3a:f6:81:54:73:
b4:85:2d:99:5d:ba:22:b4:bd:08:b4:8e:fb:89:07:09:46:47:
27:dd:fa:ad:9a:d6:89:4d:a5:4a:94:3f:f4:f0:c6:b6:1b:5e:
c3:55:ad:54:0b:d3:93:17:a6:80:3a:77:31:dd:2a:31:e5:42:
73:0b:11:fa:23:41:cc:dd:d6:42:8c:cc:0b:c9:59:a4:b4:2b:
db:c8:20:49:2e:99:b1:95:5b:b3:0c:ea:a9:e0:43:43:6d:2c:
00:b2:7b:55:61:9f:12:40:43:3c:0f:d8:cf:38:44:bc:be:21:
d7:a3:d8:1e:a8:f5:5b:28:55:a7:64:6b:cc:14:8b:e3:1f:0a:
b0:e5:05:ff:16:86:7e:c9:c2:fe:72:54:63:4d:0a:60:75:f1:
0a:a8:ed:19:2b:1b:c0:3a:8b:79:de:ff:6a:4f:97:a1:6c:bc:
ca:30:f8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org