Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363520F/0C22B38E848811EA853C8C80F8AEA228/7FB480F0C11611EA9148887CF8AEA228.roa
File: 7FB480F0C11611EA9148887CF8AEA228.roa (raw, json)
Hash identifier: 5ZlgXewjog92EgRnSMXmEWUwKeVX8x5AW5ZJ6pK1M30=
Subject key identifier: C2:E0:95:C9:93:AA:FE:51:45:4A:25:1F:7C:AA:B6:AF:E1:DB:B5:7A
Certificate issuer: /CN=F363520FAF/serialNumber=143DA5777CDBB49388A52FF583DB432CBC7E5774
Certificate serial: 54
Authority key identifier: 14:3D:A5:77:7C:DB:B4:93:88:A5:2F:F5:83:DB:43:2C:BC:7E:57:74
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/FD2ld3zbtJOIpS_1g9tDLLx-V3Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363520F/0C22B38E848811EA853C8C80F8AEA228/7FB480F0C11611EA9148887CF8AEA228.roa
Signing time: Wed 08 Jul 2020 12:28:17 +0000
ROA not before: Wed 08 Jul 2020 12:28:10 +0000
ROA not after: Thu 01 Aug 2030 12:28:10 +0000
asID: 37611
IP address blocks: 102.222.124.0/24 maxlen: 24
102.222.125.0/24 maxlen: 24
102.222.126.0/24 maxlen: 24
102.222.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363520F/0C22B38E848811EA853C8C80F8AEA228/FD2ld3zbtJOIpS_1g9tDLLx-V3Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F363520F/0C22B38E848811EA853C8C80F8AEA228/FD2ld3zbtJOIpS_1g9tDLLx-V3Q.mft
rsync://rpki.afrinic.net/repository/afrinic/FD2ld3zbtJOIpS_1g9tDLLx-V3Q.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 17 May 2024 00:05:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363520FAF/serialNumber=143DA5777CDBB49388A52FF583DB432CBC7E5774
Validity
Not Before: Jul 8 12:28:10 2020 GMT
Not After : Aug 1 12:28:10 2030 GMT
Subject: CN=5f05bbe0-3c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:61:a1:81:e9:d5:1c:83:6e:f7:5c:a3:0b:bf:
af:4b:80:ad:b3:61:0d:7f:51:60:56:58:65:80:3a:
95:fc:18:8b:ce:5f:69:ca:b4:b0:dd:45:b5:7f:41:
72:de:5c:40:b1:24:d4:65:6d:0b:6f:07:3e:b8:98:
b3:44:2e:59:0a:cc:9b:d4:30:00:41:bd:ed:31:2c:
c0:aa:d1:ff:12:89:b4:92:19:0a:40:52:95:8a:b8:
24:6b:ac:95:dd:bb:6b:0e:fb:7d:ed:58:c4:dc:2d:
b7:51:3f:84:f7:fb:00:ea:c6:af:af:74:7e:b8:a6:
c0:c9:80:55:b7:e6:67:4e:ab:b0:a4:28:0b:b3:5e:
de:16:51:67:55:bf:6b:04:03:7d:a3:c7:6d:8a:23:
30:8d:12:30:ab:5f:90:ee:a4:ba:3c:c4:0d:d0:d3:
69:5b:f5:4d:73:54:a3:bd:38:21:cd:6e:e4:2e:97:
cf:29:c7:c3:94:5d:ef:fb:a0:34:b0:85:50:dc:61:
3d:36:95:7e:15:5b:e0:43:6b:4a:24:c4:ba:e1:0f:
cc:cb:5e:f5:39:8f:8c:cf:ec:c5:2b:28:a7:96:83:
be:76:74:b4:f9:33:0f:a0:f4:39:dd:7c:03:69:48:
64:e4:e2:05:a1:41:87:36:f5:73:8b:20:41:95:77:
9d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E0:95:C9:93:AA:FE:51:45:4A:25:1F:7C:AA:B6:AF:E1:DB:B5:7A
X509v3 Authority Key Identifier:
keyid:14:3D:A5:77:7C:DB:B4:93:88:A5:2F:F5:83:DB:43:2C:BC:7E:57:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363520F/0C22B38E848811EA853C8C80F8AEA228/FD2ld3zbtJOIpS_1g9tDLLx-V3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FD2ld3zbtJOIpS_1g9tDLLx-V3Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363520F/0C22B38E848811EA853C8C80F8AEA228/7FB480F0C11611EA9148887CF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.124.0/22
Signature Algorithm: sha256WithRSAEncryption
02:d7:93:bb:a4:b6:9a:a9:c8:83:bb:57:33:1c:a6:fe:c3:91:
b3:37:86:2c:cf:1e:96:dd:e4:e8:4c:b1:f7:b5:f1:12:f6:dc:
28:5a:ae:e2:ab:23:2b:99:bb:f1:fa:9d:4f:49:53:c4:a6:6d:
1f:f6:66:86:5a:67:33:90:0c:1c:5c:91:e1:d9:2e:db:06:a1:
15:10:98:dd:58:cd:9d:07:ae:cb:0a:63:12:4e:0c:f9:c9:eb:
84:27:6f:16:91:ca:76:c0:60:53:a2:45:ab:24:ea:51:50:21:
13:66:2c:c0:66:ca:3f:38:c0:b5:74:f6:52:af:4b:a2:da:f5:
b7:66:82:97:15:0f:31:60:ef:d2:98:3b:f4:c4:2a:b6:80:c5:
65:b5:2d:98:a7:1e:95:ec:d9:d3:0e:0c:2b:9c:2f:0e:f8:e8:
c3:c9:a6:bc:90:a3:17:b0:db:76:9e:f6:e7:3c:eb:a7:a3:43:
b2:99:e3:db:41:d6:b1:39:b0:f7:52:a8:d5:9a:d3:86:ce:59:
50:c2:f4:8c:d6:31:1c:14:ca:7b:30:83:85:c7:81:65:8a:44:
a5:31:23:6b:e0:ca:bd:be:1b:88:a4:75:0e:17:d6:84:b5:bc:
b8:62:a2:f3:b9:16:62:50:68:b7:60:4c:10:05:1a:b9:11:6a:
1f:1e:9b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 03:49:50 2024 by rpki-client on console-fra.rpki-client.org