Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A3F9E/CFD8C1C01B8A11ECB488356ED8A014CE/28250A781B8B11EC8EF8C46ED8A014CE.roa
File: 28250A781B8B11EC8EF8C46ED8A014CE.roa (raw, json)
Hash identifier: atNX9l4Lt5C4wOsUaQVNLEfVh3JT5lZhEoK/V3WbZQo=
Subject key identifier: 1C:C5:6A:9A:90:6C:9E:E0:E7:24:40:DC:F5:7E:1B:B3:A7:A5:8D:B5
Certificate issuer: /CN=F36A3F9EAF/serialNumber=5BC6CA62D6DD6EF49DA13E747EC1076DDD4F4AB6
Certificate serial: 02
Authority key identifier: 5B:C6:CA:62:D6:DD:6E:F4:9D:A1:3E:74:7E:C1:07:6D:DD:4F:4A:B6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/W8bKYtbdbvSdoT50fsEHbd1PSrY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A3F9E/CFD8C1C01B8A11ECB488356ED8A014CE/28250A781B8B11EC8EF8C46ED8A014CE.roa
Signing time: Wed 22 Sep 2021 09:55:03 +0000
ROA not before: Wed 22 Sep 2021 09:54:59 +0000
ROA not after: Mon 22 Sep 2031 09:54:59 +0000
asID: 60171
IP address blocks: 102.69.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A3F9E/CFD8C1C01B8A11ECB488356ED8A014CE/W8bKYtbdbvSdoT50fsEHbd1PSrY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A3F9E/CFD8C1C01B8A11ECB488356ED8A014CE/W8bKYtbdbvSdoT50fsEHbd1PSrY.mft
rsync://rpki.afrinic.net/repository/afrinic/W8bKYtbdbvSdoT50fsEHbd1PSrY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A3F9EAF/serialNumber=5BC6CA62D6DD6EF49DA13E747EC1076DDD4F4AB6
Validity
Not Before: Sep 22 09:54:59 2021 GMT
Not After : Sep 22 09:54:59 2031 GMT
Subject: CN=614afd77-9ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:13:d7:c2:9d:9f:08:68:92:9a:3a:fd:79:d8:
1f:d2:18:95:df:fa:c3:31:a8:37:5f:72:0c:4e:3d:
eb:8d:68:3c:d6:e9:d9:17:a7:88:ec:ad:f6:a7:a7:
4c:15:17:89:2c:61:8d:f7:0f:be:6f:fd:f8:4d:ab:
69:fb:87:ee:72:91:2d:87:bf:1b:e9:c4:bd:aa:f0:
db:6d:4a:9e:f9:99:e1:1f:61:be:8a:33:9a:7c:ce:
b5:d8:e1:b8:cc:7a:0b:b0:f9:af:c5:9b:97:08:72:
20:01:39:f3:e9:90:75:b3:3e:3c:a4:29:ae:e4:f8:
06:60:c8:7a:6a:17:61:79:13:9a:d0:92:52:b9:4c:
8d:0f:c2:68:0c:d4:a0:c3:52:3e:20:82:10:2e:b6:
0b:ec:25:9c:ce:72:24:05:7e:42:67:f7:1c:9d:9d:
9d:72:51:8c:b4:94:0c:71:32:6c:7c:d5:b4:48:be:
4d:0f:c0:66:ff:fd:7e:5d:43:07:ff:a6:4b:c7:51:
ec:38:6f:91:ba:28:37:73:84:4f:cc:cb:0c:cf:2d:
bb:d2:f0:31:b2:02:01:7a:8e:54:75:47:6c:b5:e2:
ad:72:2f:63:99:8b:e3:96:0f:23:54:22:fb:83:cf:
1d:a2:f1:9a:57:91:64:2b:58:c3:41:4a:34:be:df:
28:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C5:6A:9A:90:6C:9E:E0:E7:24:40:DC:F5:7E:1B:B3:A7:A5:8D:B5
X509v3 Authority Key Identifier:
keyid:5B:C6:CA:62:D6:DD:6E:F4:9D:A1:3E:74:7E:C1:07:6D:DD:4F:4A:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3F9E/CFD8C1C01B8A11ECB488356ED8A014CE/W8bKYtbdbvSdoT50fsEHbd1PSrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/W8bKYtbdbvSdoT50fsEHbd1PSrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3F9E/CFD8C1C01B8A11ECB488356ED8A014CE/28250A781B8B11EC8EF8C46ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.69.152.0/22
Signature Algorithm: sha256WithRSAEncryption
39:d0:a2:95:f1:72:a0:ca:81:54:d8:ba:4e:10:98:a1:10:cb:
e7:00:7e:43:07:d6:19:8e:42:0e:d9:10:20:67:2a:e8:15:03:
d6:19:23:3f:3d:89:96:ad:3e:45:1d:6d:8a:c0:76:a7:f2:e2:
66:ab:8b:b8:b9:c3:74:f1:fc:db:60:be:55:ac:5c:33:5d:d8:
c2:61:57:d3:22:a2:94:e0:b8:84:05:fc:90:68:a5:40:da:2f:
11:75:0e:c3:35:fb:61:e6:9d:a3:1d:65:dc:71:18:1e:c4:0a:
53:0a:5c:7a:69:76:59:52:b8:19:ff:21:41:2d:ee:aa:e0:6a:
1e:b6:0b:3e:11:1d:0a:b4:34:64:f2:99:6c:6d:24:02:3e:57:
34:3a:f0:c7:e0:b4:52:15:ca:ca:e0:36:7a:f1:d5:a2:1f:10:
67:4d:a6:19:ac:f6:6e:d0:46:7e:d5:af:30:33:30:82:a1:91:
1e:97:4f:6c:8c:2d:a1:8a:a3:80:c1:0d:90:2f:51:5a:e3:ce:
b2:97:70:0f:fb:e8:2e:dc:cf:cf:f0:bc:d7:ab:db:c7:c2:e4:
b0:5d:4a:ec:54:84:1b:6b:d3:80:7c:3a:6a:d3:8a:50:84:b0:
a1:4d:5c:20:ef:4a:d0:e5:6e:15:0c:5c:c9:35:61:25:ff:61:
f8:b3:03:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:19 2024 by rpki-client on console-ams.rpki-client.org