Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/A55E1F02E05A11E9B5C61B67F8AEA228.roa
File: A55E1F02E05A11E9B5C61B67F8AEA228.roa (raw, json)
Hash identifier: eifm0fRnPQdtM/7OmTBNWqBZmSXk5OOJtOfSvLW+UL0=
Subject key identifier: 4A:41:8E:61:EA:AB:8F:B8:08:C5:E9:0A:B4:C9:A1:BC:19:6F:F1:0C
Certificate issuer: /CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Certificate serial: 90
Authority key identifier: 7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/A55E1F02E05A11E9B5C61B67F8AEA228.roa
Signing time: Thu 26 Sep 2019 12:39:14 +0000
ROA not before: Thu 26 Sep 2019 12:39:09 +0000
ROA not after: Thu 26 Sep 2024 12:39:09 +0000
asID: 327804
IP address blocks: 154.68.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.mft
rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Validity
Not Before: Sep 26 12:39:09 2019 GMT
Not After : Sep 26 12:39:09 2024 GMT
Subject: CN=5d8cb172-7f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:7f:24:05:28:71:a7:d6:04:9c:92:f3:3a:
38:92:de:b0:b1:38:55:e3:e8:fd:75:f2:d3:7a:08:
59:d2:80:69:40:b9:ab:ab:8b:2e:5e:29:da:e5:1e:
c5:d3:17:9d:16:09:c6:d6:75:86:6f:aa:e2:0c:3c:
05:ac:c0:ea:22:c6:25:a0:08:86:d9:67:f8:d7:6a:
d5:69:1f:f6:d6:84:c3:83:47:5c:2e:78:4d:13:32:
ac:eb:a3:d9:75:a3:94:50:52:83:6d:82:3c:72:88:
27:83:f8:85:55:42:36:9f:6a:9d:3c:cf:f7:99:90:
61:2f:ef:f8:fd:27:f2:ce:13:c2:cf:11:4b:46:37:
ea:7c:6a:69:5f:54:f3:76:6a:7a:3d:cd:83:a4:9b:
ec:e2:f1:98:f5:55:e2:67:fa:bf:60:36:12:2d:35:
2c:56:6e:9c:a3:e3:be:df:07:30:02:87:a2:22:c7:
90:d3:f2:c1:62:39:6a:0e:13:fc:ec:ee:f4:f3:b3:
ec:57:af:cc:bc:15:6d:8d:61:ce:bc:ea:96:b3:98:
3d:09:6e:5a:f1:da:1b:40:a9:cd:49:ef:a4:31:3c:
4a:2e:9a:94:48:9b:57:7b:e2:a6:97:33:a0:ce:4a:
17:f4:f4:37:ff:d1:1d:9c:8a:c4:40:f0:78:9b:3a:
dc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:41:8E:61:EA:AB:8F:B8:08:C5:E9:0A:B4:C9:A1:BC:19:6F:F1:0C
X509v3 Authority Key Identifier:
keyid:7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/A55E1F02E05A11E9B5C61B67F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
154.68.168.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:2f:46:31:8e:0d:cb:61:54:1f:f9:cf:da:82:3c:57:ad:e9:
5f:0a:e4:33:8d:f2:13:38:46:6a:95:6f:96:f7:31:b4:f3:2b:
1a:6f:d9:75:7c:03:a5:f3:b3:07:32:92:3e:02:6f:1e:e7:7b:
89:d0:9b:57:98:b5:2c:5c:88:ae:ea:4c:39:29:82:a3:c2:a1:
7c:c8:75:0a:5f:83:54:57:61:31:b9:eb:f0:61:f9:c8:31:aa:
92:c6:92:e6:e1:83:e5:bc:4c:88:6c:96:06:59:82:88:ba:f2:
3c:32:b5:bb:75:c2:f7:0a:fc:45:a6:86:90:cd:b7:5c:48:de:
61:0a:22:23:b5:4f:32:00:49:17:11:a7:10:60:20:32:81:9a:
0f:20:f7:64:ae:6f:ee:7f:9c:a6:58:cc:cb:71:5e:2b:bf:32:
29:91:10:46:3c:3c:54:5f:02:95:06:b0:b1:97:8c:9b:02:d3:
dc:11:98:82:d6:06:31:42:72:72:59:5b:3e:de:b8:84:19:64:
82:bf:8b:72:85:57:c8:1a:68:d6:26:c6:ed:30:a1:9f:84:cd:
01:a2:1b:de:0a:96:da:c9:94:05:79:26:fd:00:89:c1:3b:f9:
43:95:62:47:7a:52:43:7d:23:2e:f1:2f:a8:ce:a2:e6:54:f3:
41:48:59:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:31:50 2024 by rpki-client on console-fra.rpki-client.org