Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C5A07/84BE186025A411EC86D1A850D8A014CE/CEB55C0C25AA11ECB8250A5AD8A014CE.roa
File: CEB55C0C25AA11ECB8250A5AD8A014CE.roa (raw, json)
Hash identifier: rQB000ameQfyE+5QVMKmizqSvVQKD708pVqVT3DSUoM=
Subject key identifier: 03:68:C6:12:2F:CA:35:67:45:E0:04:8A:DC:EF:C4:95:EA:5F:BC:F1
Certificate issuer: /CN=F36C5A07AF/serialNumber=BC2A1B4048D52C737B641D1A38CBF7BC0EA3FCF8
Certificate serial: 02
Authority key identifier: BC:2A:1B:40:48:D5:2C:73:7B:64:1D:1A:38:CB:F7:BC:0E:A3:FC:F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vCobQEjVLHN7ZB0aOMv3vA6j_Pg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/84BE186025A411EC86D1A850D8A014CE/CEB55C0C25AA11ECB8250A5AD8A014CE.roa
Signing time: Tue 05 Oct 2021 07:06:49 +0000
ROA not before: Tue 05 Oct 2021 07:06:43 +0000
ROA not after: Wed 31 Dec 2031 07:06:43 +0000
asID: 328061
IP address blocks: 102.223.120.0/22 maxlen: 24
2c0f:f2c8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/84BE186025A411EC86D1A850D8A014CE/vCobQEjVLHN7ZB0aOMv3vA6j_Pg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/84BE186025A411EC86D1A850D8A014CE/vCobQEjVLHN7ZB0aOMv3vA6j_Pg.mft
rsync://rpki.afrinic.net/repository/afrinic/vCobQEjVLHN7ZB0aOMv3vA6j_Pg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 26 Jun 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C5A07AF/serialNumber=BC2A1B4048D52C737B641D1A38CBF7BC0EA3FCF8
Validity
Not Before: Oct 5 07:06:43 2021 GMT
Not After : Dec 31 07:06:43 2031 GMT
Subject: CN=615bf989-dcfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:6c:6b:fc:cd:bb:a6:29:7e:9f:cc:2d:6d:
5f:25:a5:5a:32:de:9d:f6:01:a1:1a:ac:61:e2:b8:
ce:4d:e2:bf:09:47:19:ed:25:c3:bf:3d:a0:82:9c:
c2:0b:24:4e:bf:c6:00:95:fd:d7:cd:24:7a:8e:a8:
7d:8d:3e:98:4a:0c:18:24:1e:8c:95:21:da:82:bd:
a8:63:9c:a5:45:3b:65:bf:94:5f:51:b2:de:05:07:
46:79:d6:ff:e4:a5:b0:5a:3a:ad:9d:4b:38:d7:09:
43:6d:f1:27:28:bf:e7:9e:96:11:0d:51:d1:90:84:
ae:a5:ae:f0:e3:3d:da:5d:c7:7e:75:29:5e:81:e3:
7d:c4:c1:ba:b3:e3:b7:92:d2:a1:d9:9c:5a:db:8d:
78:ac:2d:fb:8f:70:4f:2b:4c:36:79:b0:76:0c:cf:
a5:28:09:f0:7e:55:7f:61:88:42:28:a7:31:b3:47:
bd:14:8f:7a:7c:c2:99:61:8f:a1:ca:f9:84:2d:a1:
62:e7:75:77:ea:93:ef:ce:03:66:c9:c3:ce:d3:cf:
55:f3:be:a7:b1:c5:92:3d:27:79:3d:e3:aa:bd:9e:
c4:fc:53:fc:35:63:5d:d2:14:7d:6c:8c:cf:64:66:
8c:f4:9d:80:69:85:5a:7f:d1:54:25:27:95:0a:d8:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:68:C6:12:2F:CA:35:67:45:E0:04:8A:DC:EF:C4:95:EA:5F:BC:F1
X509v3 Authority Key Identifier:
keyid:BC:2A:1B:40:48:D5:2C:73:7B:64:1D:1A:38:CB:F7:BC:0E:A3:FC:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/84BE186025A411EC86D1A850D8A014CE/vCobQEjVLHN7ZB0aOMv3vA6j_Pg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vCobQEjVLHN7ZB0aOMv3vA6j_Pg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/84BE186025A411EC86D1A850D8A014CE/CEB55C0C25AA11ECB8250A5AD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.223.120.0/22
IPv6:
2c0f:f2c8::/32
Signature Algorithm: sha256WithRSAEncryption
1d:1f:89:0f:6e:ef:69:07:d8:11:5f:3c:16:44:7f:1d:55:7a:
e5:a0:8b:16:3c:55:f2:96:1b:59:78:29:c6:8f:d0:60:02:de:
c8:44:4c:e5:44:67:79:27:e5:c2:a8:ec:62:ab:21:c6:d7:96:
31:76:32:e8:03:b6:0e:07:b6:9a:94:8a:ed:bd:95:1b:79:26:
0a:d3:c7:86:e1:0b:88:31:e0:15:de:c0:f6:c3:cf:f4:c1:38:
2c:20:b5:9b:fd:40:01:db:1a:15:70:fe:23:1b:71:6f:62:f9:
4a:86:7c:89:c3:a2:2d:50:ef:8b:a1:82:0d:be:df:39:b9:ab:
7d:6d:ac:77:86:72:c1:36:6e:87:aa:ea:75:56:6e:b4:00:4d:
af:ce:b1:86:6b:bb:67:80:db:7e:df:c6:ce:b3:1e:b0:38:aa:
6b:98:f9:d2:da:04:b4:68:ab:77:f1:3b:8f:de:bf:7b:8d:ab:
5a:ee:4e:7b:9b:02:1c:10:56:53:81:5c:a2:37:70:da:70:13:
17:de:af:7d:ad:a0:1f:c2:24:44:27:69:5a:58:a8:c4:1f:1f:
8e:d7:65:54:00:b2:6c:99:5f:b7:af:d2:eb:01:0e:9a:11:5a:
9c:ee:fa:64:83:a3:43:f8:09:9c:32:21:fb:cf:28:23:0f:97:
96:95:63:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 03:59:07 2024 by rpki-client on console-fra.rpki-client.org