Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/51B124D0E05A11E98D86CD66F8AEA228.roa
File: 51B124D0E05A11E98D86CD66F8AEA228.roa (raw, json)
Hash identifier: LXEfS1dv8oRoJlaz1sMR2GrxfceS9Z7Im/YXrA/wH8U=
Subject key identifier: 6F:B6:69:D9:CA:C3:29:15:0B:09:0F:67:04:90:AA:81:0E:77:B0:36
Certificate issuer: /CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Certificate serial: 8C
Authority key identifier: 7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/51B124D0E05A11E98D86CD66F8AEA228.roa
Signing time: Thu 26 Sep 2019 12:36:54 +0000
ROA not before: Thu 26 Sep 2019 12:36:49 +0000
ROA not after: Thu 26 Sep 2024 12:36:49 +0000
asID: 327804
IP address blocks: 154.68.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.mft
rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Validity
Not Before: Sep 26 12:36:49 2019 GMT
Not After : Sep 26 12:36:49 2024 GMT
Subject: CN=5d8cb0e5-5572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f6:8c:05:73:79:d3:4f:d9:61:5a:ca:a6:51:
25:2d:56:a5:89:fc:2a:b8:ed:ca:7a:5d:71:c4:31:
e5:3b:a8:c8:85:8e:fb:98:60:d2:79:14:a4:b8:53:
ee:08:27:b1:9d:19:73:09:0b:8c:f9:3b:69:19:3d:
34:a3:46:05:1d:b1:8a:cf:6f:d0:af:cf:7b:34:6b:
64:1f:15:c7:55:4c:bb:d6:04:47:e7:25:d9:aa:be:
04:15:c9:83:6f:4c:d7:6a:71:2a:8b:fa:47:f8:7d:
08:51:7c:02:fa:cf:4b:44:d6:a6:60:12:b9:d8:00:
e0:5d:20:d1:51:0d:9c:aa:ba:8f:9a:09:2b:55:8e:
cf:8c:06:f8:ae:44:60:4e:53:cf:67:1d:2d:06:34:
7b:0e:ae:11:b4:99:e6:6e:4c:8a:3b:4d:da:50:4b:
80:d0:10:ca:70:99:54:6e:5d:f5:d5:b3:5a:e9:ec:
bf:9f:3d:df:75:e4:cd:ff:4d:5d:a5:e7:70:cf:03:
88:99:8a:8b:7b:82:cf:84:1b:38:b5:18:29:3e:aa:
c6:52:b0:bc:c7:88:96:d5:8f:2b:eb:1f:73:c8:c2:
71:08:88:2c:40:1b:08:68:b9:86:86:8b:e9:72:28:
09:f2:a3:d9:51:0c:57:dd:9a:ef:cc:61:71:e8:1b:
2d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B6:69:D9:CA:C3:29:15:0B:09:0F:67:04:90:AA:81:0E:77:B0:36
X509v3 Authority Key Identifier:
keyid:7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/51B124D0E05A11E98D86CD66F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
154.68.160.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:be:d9:74:b9:db:f0:f8:a1:12:bf:48:0b:e3:df:04:bc:c4:
57:eb:f4:41:25:4f:4f:5a:d3:32:41:c4:4a:39:17:4b:6e:48:
d1:c4:dc:6d:7c:d4:c6:5b:89:30:43:97:00:e7:61:1b:d6:63:
67:c4:e4:31:f2:e2:17:46:45:6e:55:57:83:15:4f:65:b9:6e:
e9:23:56:95:cd:0b:00:83:8f:79:33:c3:1d:7f:82:bd:2d:99:
ed:3c:f8:c6:df:05:82:ac:18:9e:42:51:d7:aa:3e:39:6b:a1:
9d:27:fc:1e:25:29:26:b0:c2:79:19:d3:32:88:3c:86:f7:46:
dd:01:53:85:f2:fb:25:2a:ef:d1:23:6c:8a:0c:36:ba:3a:ed:
f3:f1:bd:7a:f1:50:01:3f:62:f9:20:e0:cf:be:66:66:b5:c1:
a2:74:74:8c:eb:c8:c8:54:33:44:2f:2c:b9:68:72:c9:8f:76:
59:12:85:1c:af:0e:6a:dd:0e:4c:3d:98:70:aa:e8:8e:c3:87:
84:ad:60:71:a8:cf:d0:38:a9:33:1f:c9:b5:b3:af:d5:0b:7f:
78:1a:35:23:e8:e3:f6:17:45:28:ce:e5:07:5c:a8:ab:a0:18:
04:62:74:cb:75:1f:f5:4c:5a:78:bd:93:23:94:b0:45:06:15:
33:c1:a9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:44:58 2024 by rpki-client on console-ams.rpki-client.org