Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36924C7/C6A8CFA6085811EA914C3E80F8AEA228/F4C21190085811EABD856B80F8AEA228.roa
File: F4C21190085811EABD856B80F8AEA228.roa (raw, json)
Hash identifier: npvIfsV9RsfGAs/RbDzdb5Pos4t1IINPw7/arszYpnY=
Subject key identifier: 23:50:27:49:CF:32:B5:92:9C:AB:AD:90:A9:4D:9E:83:96:95:6F:64
Certificate issuer: /CN=F36924C7AF/serialNumber=0030B7A69142C98C461415373DFF30E207C91DA5
Certificate serial: 02
Authority key identifier: 00:30:B7:A6:91:42:C9:8C:46:14:15:37:3D:FF:30:E2:07:C9:1D:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ADC3ppFCyYxGFBU3Pf8w4gfJHaU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36924C7/C6A8CFA6085811EA914C3E80F8AEA228/F4C21190085811EABD856B80F8AEA228.roa
Signing time: Sat 16 Nov 2019 10:07:55 +0000
ROA not before: Sat 16 Nov 2019 10:07:48 +0000
ROA not after: Fri 30 Nov 2029 10:07:48 +0000
asID: 328521
IP address blocks: 102.36.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36924C7/C6A8CFA6085811EA914C3E80F8AEA228/ADC3ppFCyYxGFBU3Pf8w4gfJHaU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36924C7/C6A8CFA6085811EA914C3E80F8AEA228/ADC3ppFCyYxGFBU3Pf8w4gfJHaU.mft
rsync://rpki.afrinic.net/repository/afrinic/ADC3ppFCyYxGFBU3Pf8w4gfJHaU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 27 Jun 2024 00:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36924C7AF/serialNumber=0030B7A69142C98C461415373DFF30E207C91DA5
Validity
Not Before: Nov 16 10:07:48 2019 GMT
Not After : Nov 30 10:07:48 2029 GMT
Subject: CN=5dcfca7a-ed9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:02:1d:d3:94:26:2b:90:80:d9:23:51:88:
93:f6:a4:78:39:be:9e:5e:b8:4d:dc:18:85:10:59:
b7:91:99:a4:fb:b1:ca:52:bf:88:89:87:23:31:5b:
8b:b3:74:e4:11:6b:91:1b:ee:5a:7a:a7:57:c1:23:
c8:c1:73:ce:11:c9:ef:53:95:4b:31:40:38:f2:29:
20:44:93:56:07:14:ca:34:c3:44:bc:e5:34:cf:9d:
93:cb:8f:79:be:4c:18:32:d5:bb:44:be:8b:db:3b:
e3:86:a5:34:a1:76:ec:30:6c:7d:88:ea:64:54:d6:
da:43:ea:6c:d8:f6:77:be:08:3f:de:da:a8:01:f1:
b5:b8:73:e2:3a:df:6e:e0:63:99:7c:00:d9:fb:25:
53:50:bf:37:6c:cd:9e:bd:fd:ef:ee:2b:50:3e:98:
14:10:46:3f:a7:43:7f:af:73:eb:60:4d:89:25:f2:
74:57:ad:ce:9a:07:cd:db:73:0e:de:97:35:d8:b1:
43:4b:75:17:cd:63:b5:f7:be:6d:4f:c2:69:86:14:
48:52:24:2e:a4:8c:dc:b3:ac:63:b0:71:fa:44:08:
d1:fa:1e:4f:5e:e3:2b:a6:6a:32:51:71:37:93:7d:
a6:aa:da:00:75:26:53:d3:36:7b:e4:4f:7f:b4:cd:
a3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:50:27:49:CF:32:B5:92:9C:AB:AD:90:A9:4D:9E:83:96:95:6F:64
X509v3 Authority Key Identifier:
keyid:00:30:B7:A6:91:42:C9:8C:46:14:15:37:3D:FF:30:E2:07:C9:1D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36924C7/C6A8CFA6085811EA914C3E80F8AEA228/ADC3ppFCyYxGFBU3Pf8w4gfJHaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ADC3ppFCyYxGFBU3Pf8w4gfJHaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36924C7/C6A8CFA6085811EA914C3E80F8AEA228/F4C21190085811EABD856B80F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
102.36.196.0/22
Signature Algorithm: sha256WithRSAEncryption
50:eb:42:81:06:a2:4c:52:8c:91:ce:02:21:3a:9d:fb:e7:52:
52:9c:35:71:d6:11:6c:32:e4:4b:26:24:e8:3f:10:92:86:fd:
60:09:1b:4f:3b:b3:0b:98:73:f5:a2:59:48:18:09:a1:d4:7b:
98:8d:bc:ef:75:80:9c:b2:71:85:76:5e:19:32:e2:2f:5d:1f:
36:6c:6d:31:98:f1:10:92:b7:7e:32:0b:90:37:15:8a:76:85:
68:69:fc:4d:b7:38:34:e0:fd:5b:04:b7:08:86:8f:a9:a5:8e:
73:e8:5c:ad:ce:33:af:ab:76:0f:0b:84:41:f4:aa:b5:2c:b6:
6d:7a:05:3a:0a:c7:52:77:20:c3:e8:9c:16:88:14:1e:6c:e5:
3b:97:9c:57:bf:af:7d:3f:59:75:59:a8:8a:3c:b8:a5:e7:83:
84:f1:f7:54:ff:f5:5d:b6:1c:a7:dd:c3:02:10:da:fb:d6:93:
1a:13:9d:a7:fc:02:01:3f:89:6a:ac:47:80:3f:62:59:f0:dd:
d5:90:fb:cb:2c:6c:c6:4a:b1:73:e1:51:42:f6:5c:8d:fd:29:
c9:72:a2:96:96:67:17:0f:ad:6c:f5:5b:02:fe:d7:c1:03:4a:
b5:6d:a7:3f:8b:d4:76:cd:f7:41:9d:ce:f0:55:ff:ef:d2:72:
93:11:95:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 04:13:05 2024 by rpki-client on console-ams.rpki-client.org