Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/1E44EE7CB6A811EAA1B84B2FF8AEA228.roa
File: 1E44EE7CB6A811EAA1B84B2FF8AEA228.roa (raw, json)
Hash identifier: zEtnwOQxp1tgJgoUqxYeV/ZfUYlwTe3GM5ZvpJND5Xo=
Subject key identifier: EA:F7:11:45:7F:AC:AA:28:61:22:96:82:F3:73:C7:7E:83:6E:63:7D
Certificate issuer: /CN=F36A2303AF/serialNumber=5EB88DF4BF9089D7049A1FBE8005E621EAAE862B
Certificate serial: 9D
Authority key identifier: 5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/1E44EE7CB6A811EAA1B84B2FF8AEA228.roa
Signing time: Thu 25 Jun 2020 05:52:57 +0000
ROA not before: Thu 25 Jun 2020 05:52:53 +0000
ROA not after: Sat 01 Jun 2030 05:52:53 +0000
asID: 328631
IP address blocks: 102.22.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft
rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Apr 2024 00:04:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A2303AF/serialNumber=5EB88DF4BF9089D7049A1FBE8005E621EAAE862B
Validity
Not Before: Jun 25 05:52:53 2020 GMT
Not After : Jun 1 05:52:53 2030 GMT
Subject: CN=5ef43bb9-c397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:33:e9:c7:af:61:bb:53:a7:57:28:a9:df:f9:
6a:65:c7:6d:e6:9f:5d:70:ea:71:52:42:bb:e4:cd:
b2:1b:5c:c8:35:4a:ab:ae:36:0b:93:e4:77:83:8c:
61:69:3d:fa:98:a7:3c:1c:bb:3c:c7:73:0f:4a:9b:
f7:38:6f:bb:01:06:22:c2:f2:b6:62:54:42:5f:a8:
0d:98:e1:1e:14:7b:8e:26:92:83:51:6d:aa:ab:ef:
2d:7a:87:9a:29:64:e0:e0:b5:e0:72:16:f4:d9:82:
a9:28:0b:35:b6:fa:ea:d9:7d:bc:59:de:e2:0e:4c:
9b:8b:17:19:a5:35:e1:72:17:e3:b8:26:68:84:9c:
f6:dd:e7:d1:15:65:76:ac:30:4e:12:cb:0b:65:f9:
04:3f:03:cd:ea:a9:6d:db:ba:15:8f:4e:23:4f:10:
a9:9c:c6:59:ea:e2:0e:0a:72:65:a6:4b:0f:d6:de:
75:1e:c9:6a:33:ed:a0:ff:3d:28:7f:20:77:f1:f9:
0b:a0:a5:a2:89:90:72:f5:31:b1:9f:84:2f:17:54:
f8:42:7b:ee:8e:1b:30:02:6d:99:5d:06:ff:42:3d:
7b:81:76:1a:7d:bc:ea:92:2b:7b:54:c0:14:3a:06:
82:0f:e2:3a:29:ff:7c:d2:7f:b1:61:28:85:0f:98:
c3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F7:11:45:7F:AC:AA:28:61:22:96:82:F3:73:C7:7E:83:6E:63:7D
X509v3 Authority Key Identifier:
keyid:5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/1E44EE7CB6A811EAA1B84B2FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.22.254.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:87:f6:da:56:54:88:ce:fb:72:c2:3f:92:5d:9a:8c:6f:97:
e1:e8:9a:90:1e:2f:cb:12:de:c1:5a:fb:9b:62:67:03:85:54:
a8:dd:a9:e3:63:bd:2c:ef:af:34:32:ab:61:15:97:08:30:2d:
87:fb:43:52:ec:25:5c:8b:22:f1:28:a5:fe:66:17:6e:8a:5d:
ec:c5:22:56:4b:4e:cc:12:3c:d1:4a:16:60:1f:7e:82:40:42:
45:14:77:a0:d2:5e:b5:27:0f:8e:9d:76:04:4c:8c:57:76:73:
aa:9f:0b:d0:45:e0:a7:42:cd:f4:35:ba:f1:43:8e:4b:18:0c:
11:b4:84:92:0b:39:c6:35:fc:2c:ac:3b:d0:b6:24:40:b6:6d:
d7:fa:43:51:f2:13:8a:ee:ae:96:9a:4d:23:77:3e:5a:ac:4b:
a1:b2:ae:1c:17:ce:14:8d:3b:ef:7a:d7:2d:8f:0b:21:97:b7:
fc:f1:a5:62:f8:8d:7d:10:b9:24:88:a8:02:04:52:eb:4e:8f:
22:3b:48:a3:43:5e:9c:2f:1f:70:b1:d0:b6:74:a4:4f:49:df:
a9:fd:8b:80:08:b6:9d:47:54:9e:36:18:8f:9f:89:22:1e:51:
b3:f8:1c:5a:64:50:b2:52:93:cf:5c:ea:ae:27:54:de:43:87:
c2:94:d1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 01:45:03 2024 by rpki-client on console-ams.rpki-client.org