Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/75DE7694F4E611EBBD7D085AD8A014CE.roa
File: 75DE7694F4E611EBBD7D085AD8A014CE.roa (raw, json)
Hash identifier: 3ZB2CJ/bayIERLBg5mRjM6sGFJ1JWNYNoqaW/CbBpAw=
Subject key identifier: DB:59:C5:A7:AE:98:C5:14:E5:3E:FC:DB:EF:8C:65:F7:39:8F:E2:1E
Certificate issuer: /CN=F36CA1C4AF/serialNumber=63C340E10AD75680C7AA3CDD00DBE48D7D419DE6
Certificate serial: 05
Authority key identifier: 63:C3:40:E1:0A:D7:56:80:C7:AA:3C:DD:00:DB:E4:8D:7D:41:9D:E6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Y8NA4QrXVoDHqjzdANvkjX1BneY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/75DE7694F4E611EBBD7D085AD8A014CE.roa
Signing time: Wed 04 Aug 2021 05:40:52 +0000
ROA not before: Wed 04 Aug 2021 05:40:49 +0000
ROA not after: Sun 31 Aug 2031 05:40:49 +0000
asID: 37356
IP address blocks: 102.177.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.mft
rsync://rpki.afrinic.net/repository/afrinic/Y8NA4QrXVoDHqjzdANvkjX1BneY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CA1C4AF/serialNumber=63C340E10AD75680C7AA3CDD00DBE48D7D419DE6
Validity
Not Before: Aug 4 05:40:49 2021 GMT
Not After : Aug 31 05:40:49 2031 GMT
Subject: CN=610a2864-59f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b0:80:ec:af:75:27:f5:5e:e6:ed:c6:7c:d7:
6f:f4:b8:0e:cb:6d:ae:9f:ed:b9:6c:36:e3:74:c0:
3b:df:a9:1e:d7:e1:63:6f:2c:eb:0f:22:b9:74:e8:
98:81:9f:b3:c5:d2:1e:74:aa:9a:9b:a9:4b:c0:33:
2c:53:ea:4a:31:17:b6:73:3f:e6:0c:b9:71:61:96:
14:c8:24:83:f7:dd:cf:d1:e8:8b:dd:d3:81:b2:8b:
c7:a7:6e:11:f5:23:52:0c:b8:0f:5f:57:af:bb:c3:
c9:d6:a8:01:6a:08:2d:98:ba:ea:53:07:ef:15:e2:
e7:b2:c5:e9:1f:a0:31:b6:44:6b:0d:47:fc:54:0e:
b5:b1:89:a4:b9:b2:ac:4f:e6:ec:21:ba:3e:7c:8f:
59:c5:ca:83:38:4f:95:dd:65:fa:5a:66:43:69:47:
19:81:46:cc:3d:7f:70:d5:c9:29:5d:42:3e:4b:95:
62:96:f9:39:f6:59:fd:c9:13:11:7f:36:83:0d:4a:
31:21:62:f3:1c:23:61:8c:f8:a1:ed:97:0b:c2:68:
de:7b:6b:26:55:8e:28:8d:54:67:8d:ee:0c:50:bc:
ae:50:18:aa:33:eb:af:d4:9a:fa:d6:84:74:75:8a:
1a:de:57:9a:7f:6d:dc:fa:45:ba:69:64:60:8e:1e:
41:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:59:C5:A7:AE:98:C5:14:E5:3E:FC:DB:EF:8C:65:F7:39:8F:E2:1E
X509v3 Authority Key Identifier:
keyid:63:C3:40:E1:0A:D7:56:80:C7:AA:3C:DD:00:DB:E4:8D:7D:41:9D:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y8NA4QrXVoDHqjzdANvkjX1BneY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/75DE7694F4E611EBBD7D085AD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.56.0/22
Signature Algorithm: sha256WithRSAEncryption
75:ef:d3:2a:db:ab:7a:f0:3d:8a:d8:0d:ad:8c:cd:b6:33:46:
4b:8e:05:6e:45:d6:ed:6c:6e:43:ab:48:6d:06:d3:cd:2f:64:
ab:f5:61:c4:ab:8f:d0:74:4d:3a:3b:9b:b6:7a:28:9a:4d:7f:
03:4b:79:cd:cd:cd:e0:7e:f5:8c:91:ca:b2:39:12:cc:36:a2:
d5:af:c8:11:c0:dd:5a:b6:8b:93:9b:68:b9:d6:06:4c:a7:11:
66:08:10:7e:d8:0b:96:a1:a0:3a:34:a9:ef:a6:61:4f:1d:14:
e8:09:8c:ec:9e:89:e6:c3:f9:f2:93:99:70:b4:e7:28:59:96:
aa:1a:ef:07:21:f1:c2:c6:99:32:c7:7c:53:43:e8:5a:e3:42:
79:74:85:4a:f3:dd:b0:da:e3:73:c1:30:8d:9c:d8:79:dc:45:
03:cd:01:dc:6f:ad:ca:fb:e6:22:8f:f3:ad:d4:53:9a:8a:9d:
02:a3:09:87:7a:a3:a8:0c:76:de:65:22:97:94:1e:fe:2c:bd:
ac:54:28:ec:67:6c:aa:d3:bc:9b:71:a1:a0:59:a5:d7:d8:9b:
00:01:8f:61:7f:5f:48:2f:82:89:92:51:0d:be:ac:d5:48:dc:
3c:c4:91:c7:fc:3a:30:f6:1a:43:a7:ce:32:27:30:f1:17:08:
bd:7c:6d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:06:28 2024 by rpki-client on console-ams.rpki-client.org