Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/A9F22C5C223B11EA90A89819F8AEA228.roa
File: A9F22C5C223B11EA90A89819F8AEA228.roa (raw, json)
Hash identifier: abkvsxIACMIPWrvjyOHKPEh0DsEGmj6TJS4On7OCWSo=
Subject key identifier: 1F:B8:1D:AC:A4:C1:23:ED:DE:F2:56:7D:27:62:CB:76:DB:AC:99:8C
Certificate issuer: /CN=F36B7955AF/serialNumber=7BE859B4286BE1EA14B88C7A30B5CE4FD85980EC
Certificate serial: 23
Authority key identifier: 7B:E8:59:B4:28:6B:E1:EA:14:B8:8C:7A:30:B5:CE:4F:D8:59:80:EC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e-hZtChr4eoUuIx6MLXOT9hZgOw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/A9F22C5C223B11EA90A89819F8AEA228.roa
Signing time: Thu 19 Dec 2019 08:43:44 +0000
ROA not before: Thu 19 Dec 2019 08:43:39 +0000
ROA not after: Sat 01 Dec 2029 08:43:39 +0000
asID: 328568
IP address blocks: 102.23.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.mft
rsync://rpki.afrinic.net/repository/afrinic/e-hZtChr4eoUuIx6MLXOT9hZgOw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B7955AF/serialNumber=7BE859B4286BE1EA14B88C7A30B5CE4FD85980EC
Validity
Not Before: Dec 19 08:43:39 2019 GMT
Not After : Dec 1 08:43:39 2029 GMT
Subject: CN=5dfb3840-d74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:64:75:fe:f0:91:18:4f:6c:bb:01:ec:22:c9:
ae:3a:86:a2:db:42:ba:ba:18:a9:70:69:6a:44:ed:
97:79:61:7b:1a:87:6e:08:90:19:eb:dc:bb:c8:60:
88:39:ee:01:04:25:48:9c:cd:ed:8f:df:c5:b8:c4:
27:39:b7:92:30:43:f1:dd:bf:7a:75:c1:e0:d7:95:
e7:88:a1:80:4c:22:a0:10:81:68:87:6f:c2:80:62:
2c:b7:a4:42:eb:fb:7a:69:48:cb:20:1f:fe:3c:75:
1d:fb:26:af:86:45:80:05:ea:07:ec:64:91:b1:bd:
ff:22:52:9c:73:96:38:0e:cd:6d:e8:cb:6b:ea:cc:
ac:48:0c:8a:71:29:c7:10:8a:ad:28:b0:63:16:69:
91:e6:61:0b:16:8a:cc:b3:09:0a:ee:be:7c:0e:44:
ec:c3:8a:9c:ec:8c:5a:67:46:af:7c:23:e9:58:a9:
20:5d:60:0a:15:3d:35:7c:7f:43:7f:96:29:7d:59:
2f:c5:68:9f:2f:99:fa:9e:80:38:d8:28:51:6b:ef:
52:cc:25:86:95:08:42:95:64:8c:38:f7:87:0c:58:
71:19:ff:3f:40:79:22:82:d2:33:9b:60:95:db:c8:
28:9a:8f:a3:d7:3a:ec:76:69:63:6d:6e:a4:65:a3:
bd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B8:1D:AC:A4:C1:23:ED:DE:F2:56:7D:27:62:CB:76:DB:AC:99:8C
X509v3 Authority Key Identifier:
keyid:7B:E8:59:B4:28:6B:E1:EA:14:B8:8C:7A:30:B5:CE:4F:D8:59:80:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e-hZtChr4eoUuIx6MLXOT9hZgOw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/A9F22C5C223B11EA90A89819F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
102.23.88.0/24
Signature Algorithm: sha256WithRSAEncryption
07:e2:f8:18:f7:20:38:c5:a7:18:49:61:89:dd:c3:3d:48:8e:
7a:86:a8:cd:be:5e:86:d4:f9:a6:ea:07:69:99:83:b4:2d:a9:
26:7d:2a:39:74:9b:ca:23:4c:d3:59:a2:7b:bf:a6:34:01:6b:
d6:eb:42:e1:69:9c:d7:48:bf:c7:46:3c:5b:14:a6:1b:61:6b:
4b:7a:11:ae:ab:ef:17:19:ae:61:ce:c4:a4:32:dc:ad:03:5e:
73:c0:0d:b2:78:12:26:0e:63:f3:7e:74:fe:6a:c7:7c:de:67:
a2:67:ef:b4:5b:f0:d6:92:c4:28:b4:93:14:18:a1:0a:a6:cc:
8e:1a:96:2d:90:5d:b5:bd:21:c1:4a:02:de:e4:05:58:00:e6:
f5:99:49:e0:c1:63:0c:cc:37:6a:49:d1:60:1e:a0:c2:5f:99:
fb:79:10:b6:17:f2:f5:82:a9:af:32:fd:d2:14:70:3b:01:38:
ca:1c:d2:98:4c:23:09:ca:2e:3e:25:92:57:5b:67:74:1c:58:
d9:bc:11:50:f0:6c:9d:98:ca:a7:bc:49:fd:80:a3:4e:9b:c2:
24:ef:48:1b:ee:6f:94:a0:8e:05:5d:83:84:41:ea:66:e0:67:
8f:39:72:d9:80:b5:11:d0:25:51:a2:6c:73:00:6b:aa:0c:98:
8d:63:08:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:14 2024 by rpki-client on console-fra.rpki-client.org