Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/C9E601BE223B11EA9D6FA919F8AEA228.roa
File: C9E601BE223B11EA9D6FA919F8AEA228.roa (raw, json)
Hash identifier: gL5tRYefTmIo2Y5cTrnfgKjwwCZ0FkaQbb7/gXP5el0=
Subject key identifier: 26:99:A0:71:AB:3D:D0:D6:A5:55:17:80:43:49:DD:1B:AA:8E:B7:3F
Certificate issuer: /CN=F36B7955AF/serialNumber=7BE859B4286BE1EA14B88C7A30B5CE4FD85980EC
Certificate serial: 25
Authority key identifier: 7B:E8:59:B4:28:6B:E1:EA:14:B8:8C:7A:30:B5:CE:4F:D8:59:80:EC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e-hZtChr4eoUuIx6MLXOT9hZgOw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/C9E601BE223B11EA9D6FA919F8AEA228.roa
Signing time: Thu 19 Dec 2019 08:44:37 +0000
ROA not before: Thu 19 Dec 2019 08:44:33 +0000
ROA not after: Sat 01 Dec 2029 08:44:33 +0000
asID: 328568
IP address blocks: 102.23.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.mft
rsync://rpki.afrinic.net/repository/afrinic/e-hZtChr4eoUuIx6MLXOT9hZgOw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 00:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B7955AF/serialNumber=7BE859B4286BE1EA14B88C7A30B5CE4FD85980EC
Validity
Not Before: Dec 19 08:44:33 2019 GMT
Not After : Dec 1 08:44:33 2029 GMT
Subject: CN=5dfb3875-593b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:34:45:c2:b0:0a:ab:65:f3:44:de:a7:04:ec:
0b:ee:6b:d7:b5:bf:ba:e8:4e:2a:70:03:c5:9f:65:
66:b7:06:dd:22:7a:42:e1:3d:3f:83:b0:92:5e:ee:
09:c0:7c:2e:e8:67:4d:77:59:5d:7e:cd:68:78:a0:
b0:41:52:14:9d:d6:a2:7c:11:f9:09:b2:a1:9a:92:
dd:65:60:09:ef:7b:f6:c8:79:df:ed:d1:05:16:51:
98:f4:b9:a7:e6:09:77:af:fd:17:5b:38:72:0e:db:
4b:0c:fa:5c:dd:de:c2:51:12:52:7b:73:49:ea:90:
be:5c:84:2a:3c:34:f5:2c:00:32:75:08:60:2d:55:
42:04:5a:6d:c1:1f:fc:66:86:56:dd:48:1a:59:b1:
1f:c0:7a:aa:b9:8d:0b:14:4c:b6:de:f7:81:92:04:
9b:ec:ad:eb:99:84:a4:17:9f:03:7b:b2:f9:4a:04:
28:91:b5:97:8d:69:cc:71:2d:02:ff:b5:f5:c1:80:
2b:b0:22:95:5f:d9:d8:0c:09:b9:21:62:78:e6:8a:
19:f7:8c:d4:f1:76:57:27:c4:5c:c5:b5:5d:31:23:
a5:c7:38:5a:3e:7e:f0:4c:f4:31:b1:16:0f:1e:63:
81:95:16:4c:17:a7:08:6d:1f:1f:0a:88:e6:7d:65:
2e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:99:A0:71:AB:3D:D0:D6:A5:55:17:80:43:49:DD:1B:AA:8E:B7:3F
X509v3 Authority Key Identifier:
keyid:7B:E8:59:B4:28:6B:E1:EA:14:B8:8C:7A:30:B5:CE:4F:D8:59:80:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e-hZtChr4eoUuIx6MLXOT9hZgOw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/C9E601BE223B11EA9D6FA919F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
102.23.89.0/24
Signature Algorithm: sha256WithRSAEncryption
be:3f:52:43:71:a2:c4:df:a9:bd:2e:3a:79:28:3b:58:90:74:
fb:90:42:2e:21:c6:b5:9a:e5:75:5b:8a:4d:2e:d8:4c:96:bf:
ee:85:84:8e:5e:4f:63:44:42:e7:f0:9c:1b:55:48:52:2b:bb:
c7:11:cc:af:5e:db:2d:bc:70:53:3f:af:a6:7b:ff:4d:b7:7c:
b0:34:f5:03:11:66:93:ee:e4:f6:d2:27:1d:99:a3:4d:cd:8f:
33:23:38:18:33:ca:49:d5:4a:da:ef:b0:b3:63:0e:b2:c0:fb:
e4:b1:c6:b4:78:bc:bd:61:b1:9a:25:25:42:3d:43:c8:95:bc:
8b:d3:98:54:b3:2e:bf:5d:69:ee:8a:6c:5f:db:f3:da:06:45:
a6:e5:55:2d:4d:86:e0:fa:74:bf:c1:60:e9:98:44:0e:45:ea:
c3:7b:a9:e1:25:b8:42:b7:62:b2:b3:a5:f8:f1:6f:ea:83:8b:
45:42:59:30:f7:3f:ab:1e:7c:be:31:bd:e2:06:b9:91:80:d1:
23:94:98:0e:8d:e3:a2:7c:9d:60:12:24:ca:cb:55:9f:fb:08:
2f:2a:ac:b9:1a:fd:7a:86:1e:79:06:30:56:54:82:f6:64:d0:
41:5c:ed:21:52:a9:e3:69:73:e4:fb:06:5a:22:76:0f:4a:cb:
ab:f2:7a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 01:50:09 2024 by rpki-client on console-fra.rpki-client.org