Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/611FEFD00D1111EA8325E043F8AEA228.roa
File: 611FEFD00D1111EA8325E043F8AEA228.roa (raw, json)
Hash identifier: GiJz76vVEkVH9DNgj55T6CmgEM7wMPM/6p5lMG2BlFI=
Subject key identifier: 97:68:AE:3E:01:C1:EA:26:92:11:D1:9C:7D:91:3A:13:AE:98:6B:8A
Certificate issuer: /CN=F36B7955AF/serialNumber=7BE859B4286BE1EA14B88C7A30B5CE4FD85980EC
Certificate serial: 02
Authority key identifier: 7B:E8:59:B4:28:6B:E1:EA:14:B8:8C:7A:30:B5:CE:4F:D8:59:80:EC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e-hZtChr4eoUuIx6MLXOT9hZgOw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/611FEFD00D1111EA8325E043F8AEA228.roa
Signing time: Fri 22 Nov 2019 10:18:09 +0000
ROA not before: Fri 22 Nov 2019 10:18:03 +0000
ROA not after: Thu 01 Nov 2029 10:18:03 +0000
asID: 328568
IP address blocks: 102.23.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.mft
rsync://rpki.afrinic.net/repository/afrinic/e-hZtChr4eoUuIx6MLXOT9hZgOw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B7955AF/serialNumber=7BE859B4286BE1EA14B88C7A30B5CE4FD85980EC
Validity
Not Before: Nov 22 10:18:03 2019 GMT
Not After : Nov 1 10:18:03 2029 GMT
Subject: CN=5dd7b5e0-1308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:9c:b2:90:35:2b:b0:04:07:e9:ad:5e:20:
ed:74:b4:39:28:bc:71:e1:47:86:13:0a:8d:cf:df:
1c:a4:19:c3:e9:15:83:e2:01:9f:2f:de:57:ed:af:
fb:b3:75:9f:3b:ef:15:08:19:88:75:3a:50:75:00:
bf:e3:89:5a:50:c8:1b:ce:4b:10:b8:06:dd:82:69:
e4:e9:4f:93:91:cb:dc:e0:b4:bd:a5:2e:55:f3:a7:
2d:ab:0f:4a:12:6f:c8:85:b7:d9:93:a2:5a:b6:29:
b9:9e:a7:4d:3c:e5:4f:e9:d6:20:d0:02:b8:2c:a2:
33:c4:40:7c:64:fb:88:53:c4:3b:29:eb:9e:87:f3:
44:e8:36:10:25:f7:90:d0:63:7a:de:66:89:08:59:
37:a6:13:e2:31:8c:8e:2d:3d:39:ad:b9:9a:cb:74:
86:c5:d8:f7:d7:68:df:17:cd:87:5f:0a:52:f0:53:
fb:de:f2:24:a6:a2:32:40:f9:d9:a7:9b:a6:67:30:
63:55:a9:52:5d:f9:bb:c2:24:0a:30:1e:c4:07:91:
bb:d4:7c:59:a4:6a:95:61:34:18:5a:80:d6:21:8c:
ac:a9:67:6f:1f:04:2f:9d:e5:c9:95:ea:43:4e:d9:
39:cf:bc:63:09:b5:81:b2:a5:b4:33:90:97:75:9b:
58:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:68:AE:3E:01:C1:EA:26:92:11:D1:9C:7D:91:3A:13:AE:98:6B:8A
X509v3 Authority Key Identifier:
keyid:7B:E8:59:B4:28:6B:E1:EA:14:B8:8C:7A:30:B5:CE:4F:D8:59:80:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e-hZtChr4eoUuIx6MLXOT9hZgOw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/611FEFD00D1111EA8325E043F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
102.23.88.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:18:4f:9b:18:1f:e3:12:d5:cd:16:f7:c0:ff:69:61:03:3b:
82:15:fb:bf:dc:a7:3e:27:01:97:fa:55:e2:0b:fa:56:98:22:
f9:d7:af:46:2a:53:81:35:ea:b0:b1:eb:f2:93:a7:e6:6e:b0:
a1:7d:33:59:94:73:b8:a0:bb:a6:3d:87:00:b4:ed:64:b3:97:
d4:f3:8d:16:d5:47:26:81:5d:31:81:6b:6d:0e:ba:2b:ba:a8:
68:1a:26:1c:12:6e:76:80:a9:7f:13:9d:9a:fa:20:e1:9c:27:
c7:8d:53:d0:5b:78:df:6a:24:a7:25:a4:bb:8a:c5:85:90:3e:
33:f5:bf:27:03:c2:90:b7:42:17:42:ab:3a:90:68:51:53:22:
c3:3d:86:a9:f2:51:3f:b9:1a:4f:e7:f3:01:fa:63:55:75:20:
80:ee:6d:09:d7:6d:53:cc:d3:26:ca:dc:c1:35:c8:57:be:cc:
c9:9f:8e:4d:c7:eb:af:80:3f:49:4a:ef:c8:22:f9:98:ce:02:
40:fb:41:48:27:dc:09:ea:74:dd:5a:30:0f:84:26:8f:1b:0b:
0c:2a:44:ce:f4:6a:d7:ee:9d:55:a7:19:ae:e7:e7:04:4f:ac:
81:86:da:9a:41:60:0c:0d:cc:08:94:0f:74:3e:9c:ea:ce:7d:
44:4a:dc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:21 2024 by rpki-client on console-ams.rpki-client.org