Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/52F0650A925C11E9BD13DA51F8AEA228.roa
File: 52F0650A925C11E9BD13DA51F8AEA228.roa (raw, json)
Hash identifier: XSD+lLyh6gJ5eKzdsK6grPxNsYTYn3uqUENZtP+UtNo=
Subject key identifier: 5C:EA:1D:22:D7:10:CB:0F:E7:3B:80:4E:08:86:68:83:25:FC:83:30
Certificate issuer: /CN=F369BF27AF/serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Certificate serial: 09
Authority key identifier: 60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/52F0650A925C11E9BD13DA51F8AEA228.roa
Signing time: Wed 19 Jun 2019 06:34:44 +0000
ROA not before: Wed 19 Jun 2019 06:34:38 +0000
ROA not after: Tue 19 Jun 2029 06:34:38 +0000
asID: 37049
IP address blocks: 41.222.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.mft
rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369BF27AF/serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Validity
Not Before: Jun 19 06:34:38 2019 GMT
Not After : Jun 19 06:34:38 2029 GMT
Subject: CN=5d09d784-ba53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:f3:36:8e:25:5a:55:af:39:a3:bb:51:90:
33:79:6c:54:dd:8e:a9:2f:fb:3e:30:63:2a:15:90:
bb:fe:11:42:f5:c8:2f:26:a0:cf:d7:ce:9a:2e:b2:
89:93:63:fd:68:8c:64:1c:f5:f8:fe:ba:a6:bd:5e:
de:bc:1f:73:2a:c4:65:7b:86:ad:98:51:cb:d4:b5:
5c:76:8e:45:f4:85:f6:f0:dc:09:1b:98:5d:b9:fe:
36:d1:72:2c:ed:8c:65:57:bd:3e:a6:a4:46:dd:9b:
f3:b3:8b:4e:dd:ec:ee:04:85:d7:b1:4e:a6:6e:4e:
b3:80:b7:6d:6d:67:4e:6d:45:a4:ba:ca:3b:13:2a:
2b:1e:1f:ad:2a:94:36:81:6e:26:76:20:25:75:1d:
e5:7f:e7:be:c1:9a:8a:1b:1f:19:2c:18:e1:b9:ed:
04:e7:98:03:d2:d9:b7:cf:f6:23:84:8e:3c:c3:d3:
1f:1f:4b:8b:a1:b4:c7:42:66:26:9b:24:ae:d4:68:
bf:ca:9e:55:59:2a:a4:70:44:89:b6:04:e5:f5:05:
74:4d:21:7a:66:c3:b3:13:e3:2a:d7:66:01:b7:18:
ff:b8:15:31:c4:12:c9:bf:3f:ce:3e:30:83:4e:0b:
19:08:8a:85:65:1d:a8:5f:3a:c8:0b:e8:0f:a2:c9:
9c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EA:1D:22:D7:10:CB:0F:E7:3B:80:4E:08:86:68:83:25:FC:83:30
X509v3 Authority Key Identifier:
keyid:60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/52F0650A925C11E9BD13DA51F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.222.140.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:ce:65:d8:d6:a8:ab:ad:0f:ae:80:01:3c:16:67:ab:0c:6c:
45:91:5b:17:71:35:88:5d:74:72:31:1c:f2:13:da:52:3f:13:
5c:29:fd:19:c3:50:c9:29:c7:34:1a:0e:b0:d9:35:a6:77:4f:
7b:1f:fa:39:bd:0e:0b:eb:ba:71:6c:0f:91:39:35:f9:8f:a5:
d6:51:10:b0:ae:54:14:5e:9f:64:11:68:a6:87:c2:8c:aa:34:
e6:04:1d:17:d1:c2:f2:de:ec:27:20:6b:2f:c8:e3:71:61:4b:
69:e4:79:10:74:aa:e3:d3:91:d3:74:67:b9:c7:e1:b4:69:0b:
61:9c:ab:da:78:62:59:5a:6f:fb:65:5b:24:ec:b8:b2:d4:67:
30:39:cd:cd:f4:17:38:45:77:6f:c3:84:4a:44:2b:45:0d:2e:
43:0f:26:f6:a7:24:f2:a3:01:ea:30:cc:f6:94:e6:e7:01:86:
4e:1e:8c:2f:16:1d:61:1a:42:44:f7:f3:27:9c:e0:45:c6:78:
68:d4:4e:10:13:65:9d:40:5b:57:6d:e3:fb:02:a5:da:e5:ce:
44:72:55:4b:d4:04:00:a9:34:ed:f2:81:3a:1b:92:35:b2:12:
1a:60:c5:1d:b8:e3:2f:e1:a4:0c:32:6b:32:01:3d:6c:75:16:
6b:97:67:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:17 2024 by rpki-client on console-ams.rpki-client.org