Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/CDF0081C70F711EAA281FF20F8AEA228.roa
File: CDF0081C70F711EAA281FF20F8AEA228.roa (raw, json)
Hash identifier: fFYrreAZo5U4KWtK7vRj8cUH2mjucnzUUJT2VrDYVDc=
Subject key identifier: F1:FE:FA:24:59:B0:6A:EC:72:8E:EB:9E:CB:40:8D:C3:64:F3:F0:05
Certificate issuer: /CN=F369E2BDAF/serialNumber=1C3DB9D020C29BFE4910FA14AA5014F604A4267F
Certificate serial: 28
Authority key identifier: 1C:3D:B9:D0:20:C2:9B:FE:49:10:FA:14:AA:50:14:F6:04:A4:26:7F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/CDF0081C70F711EAA281FF20F8AEA228.roa
Signing time: Sat 28 Mar 2020 13:27:01 +0000
ROA not before: Sat 28 Mar 2020 13:26:55 +0000
ROA not after: Fri 01 Mar 2030 13:26:55 +0000
asID: 328622
IP address blocks: 102.223.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.crl
rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369E2BDAF/serialNumber=1C3DB9D020C29BFE4910FA14AA5014F604A4267F
Validity
Not Before: Mar 28 13:26:55 2020 GMT
Not After : Mar 1 13:26:55 2030 GMT
Subject: CN=5e7f50a4-fed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bd:b6:84:cf:0b:f9:f9:92:3f:59:d3:ee:e0:
20:6f:e5:e8:6b:8d:bc:03:ef:1e:dd:10:d6:fd:ad:
33:da:b1:8e:5f:30:86:3a:1d:69:d9:14:1c:a5:18:
bf:fb:dc:ff:8d:c2:a9:e8:54:ca:c2:e7:12:9c:0c:
2d:73:2d:be:a1:d6:ce:35:ad:93:e5:15:a6:a0:eb:
24:6e:1d:42:38:3a:cc:22:0e:01:fe:d2:0c:b4:4d:
11:58:04:cb:95:94:73:68:84:43:fd:cd:16:0b:ac:
6a:c8:70:7f:ce:36:62:0a:a2:23:7e:ef:8e:c5:a3:
a0:69:9c:5a:41:05:9d:6f:3c:a7:01:7e:88:9d:43:
6b:99:cc:40:95:b2:8c:4c:05:68:ef:e2:cc:34:87:
0e:ce:5e:35:d1:d9:3b:21:51:b3:41:00:25:2d:b3:
1b:97:e7:54:37:c3:fe:b2:da:aa:eb:4e:af:1c:26:
e5:c8:a1:96:ef:47:f7:6a:27:16:85:d2:59:9b:90:
33:9e:d0:f0:de:04:e1:39:aa:c5:c2:93:ae:2e:99:
12:ec:c9:ac:9c:e5:bb:dd:48:de:89:6b:2f:f1:2e:
ff:dd:16:ba:a8:85:d1:c7:eb:07:bb:1e:9e:54:b3:
83:fd:6d:a2:84:95:cc:9e:dd:76:21:8b:20:c5:87:
50:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FE:FA:24:59:B0:6A:EC:72:8E:EB:9E:CB:40:8D:C3:64:F3:F0:05
X509v3 Authority Key Identifier:
keyid:1C:3D:B9:D0:20:C2:9B:FE:49:10:FA:14:AA:50:14:F6:04:A4:26:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/CDF0081C70F711EAA281FF20F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
102.223.234.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:8e:e3:05:dd:5a:53:35:49:b9:0e:8a:ba:29:69:77:ec:6e:
4a:e9:67:44:4c:d5:40:52:bb:db:58:39:0a:65:ae:f3:08:e9:
30:ea:de:f1:4a:81:12:0b:81:5e:fd:3e:14:78:b9:1a:af:4f:
a1:dc:cf:01:e7:8a:a7:69:f8:f8:d8:0a:13:82:6e:ab:f5:04:
2a:40:46:cc:57:16:0b:0b:b9:12:09:31:86:23:9e:d3:d7:d6:
0e:a4:96:2c:31:1a:08:34:31:ca:5a:4a:34:4e:d0:e1:4a:f4:
a0:29:df:3e:4c:0e:92:aa:af:0d:ab:19:8c:ec:18:c7:12:d2:
1d:63:ff:79:a0:48:db:5a:9e:7f:4a:cf:c0:5a:2e:96:15:49:
3c:19:ef:01:7b:29:f3:db:d4:f8:98:e3:42:07:c7:23:d9:35:
80:f9:df:5b:ea:d2:a6:c5:c8:73:d2:3f:2e:f1:b2:b6:93:b5:
3e:7d:dd:30:d8:3a:09:c6:e8:33:8c:f7:7c:4a:01:9e:75:6d:
af:a1:bb:5a:fc:a9:ed:46:5f:70:02:c1:4c:a1:ba:df:ba:96:
a8:10:3f:1e:ea:17:80:da:45:c2:b6:4a:19:26:e3:3a:7a:bd:
03:df:3d:8e:4f:bd:dc:d5:d3:2f:9e:52:06:20:28:2c:98:2b:
38:40:e2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:53:09 2024 by rpki-client on console-ams.rpki-client.org