Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CF0F7/74C21A94BE0511EBAE0B5923F8AEA228/5D594198BE0A11EBA04FDB29F8AEA228.roa
File: 5D594198BE0A11EBA04FDB29F8AEA228.roa (raw, json)
Hash identifier: j1A6y0D/ecrNqd7ovfMIr7nECu2fjebNgoGEw8bje3Y=
Subject key identifier: 6E:4B:B0:14:D6:FF:FE:8B:48:F4:0A:0A:3C:F1:4B:4D:01:1F:0E:0A
Certificate issuer: /CN=F36CF0F7AF/serialNumber=07EDB2AC72FAE90A00B56B3AB3365D277EA18EFD
Certificate serial: 07
Authority key identifier: 07:ED:B2:AC:72:FA:E9:0A:00:B5:6B:3A:B3:36:5D:27:7E:A1:8E:FD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/B-2yrHL66QoAtWs6szZdJ36hjv0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CF0F7/74C21A94BE0511EBAE0B5923F8AEA228/5D594198BE0A11EBA04FDB29F8AEA228.roa
Signing time: Wed 26 May 2021 10:08:49 +0000
ROA not before: Wed 26 May 2021 10:08:44 +0000
ROA not after: Tue 26 May 2026 10:08:44 +0000
asID: 328437
IP address blocks: 102.134.116.0/22 maxlen: 24
102.134.116.0/24 maxlen: 24
102.134.117.0/24 maxlen: 24
102.134.118.0/24 maxlen: 24
102.134.119.0/24 maxlen: 24
102.220.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CF0F7/74C21A94BE0511EBAE0B5923F8AEA228/B-2yrHL66QoAtWs6szZdJ36hjv0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CF0F7/74C21A94BE0511EBAE0B5923F8AEA228/B-2yrHL66QoAtWs6szZdJ36hjv0.mft
rsync://rpki.afrinic.net/repository/afrinic/B-2yrHL66QoAtWs6szZdJ36hjv0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 03 May 2024 00:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CF0F7AF/serialNumber=07EDB2AC72FAE90A00B56B3AB3365D277EA18EFD
Validity
Not Before: May 26 10:08:44 2021 GMT
Not After : May 26 10:08:44 2026 GMT
Subject: CN=60ae1e31-8cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:aa:3d:27:9b:8d:dc:5e:02:bf:3c:a4:80:
da:b9:c6:6d:e9:4e:07:c1:c7:b4:b4:9d:21:a0:4f:
0a:21:6e:e5:d5:00:a9:ca:6f:50:9d:72:5e:17:d6:
16:85:8d:22:d6:1b:27:b7:6c:98:fc:c7:c5:15:5f:
11:9a:3d:60:a1:dd:af:24:4e:cc:af:e4:14:ad:67:
53:af:3e:67:aa:2b:28:f5:88:71:41:ec:c4:ff:b4:
6a:3e:e6:dd:1c:8d:2b:61:50:46:8e:b1:8e:db:19:
28:a2:a1:0f:fe:6b:7b:31:5c:28:1e:88:81:d3:e6:
0d:b6:95:69:9b:1a:65:9a:c2:99:55:ff:f6:2d:71:
e6:0d:0c:4a:20:0b:1d:9e:5b:b2:65:a4:7c:66:4f:
1a:50:0c:d8:b8:b1:6b:08:38:7d:ee:ca:59:06:92:
50:d1:b6:7b:c7:33:da:87:e6:20:93:0d:c5:24:8a:
03:bb:e5:60:e6:f7:bf:1e:26:35:e5:da:a4:c3:2b:
66:c9:67:f0:09:32:5d:81:5e:ff:4f:62:c5:1b:f0:
62:a1:5e:c2:90:a4:1f:8d:c7:b5:82:2e:f4:66:1c:
95:15:4b:cf:fe:8c:df:8a:76:33:34:8f:a8:49:57:
58:28:50:f8:19:2b:91:68:b2:54:a7:99:8d:f1:30:
e0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4B:B0:14:D6:FF:FE:8B:48:F4:0A:0A:3C:F1:4B:4D:01:1F:0E:0A
X509v3 Authority Key Identifier:
keyid:07:ED:B2:AC:72:FA:E9:0A:00:B5:6B:3A:B3:36:5D:27:7E:A1:8E:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF0F7/74C21A94BE0511EBAE0B5923F8AEA228/B-2yrHL66QoAtWs6szZdJ36hjv0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B-2yrHL66QoAtWs6szZdJ36hjv0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF0F7/74C21A94BE0511EBAE0B5923F8AEA228/5D594198BE0A11EBA04FDB29F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.134.116.0/22
102.220.8.0/22
Signature Algorithm: sha256WithRSAEncryption
84:73:da:cf:5a:5f:cb:27:37:5e:8b:25:86:25:f4:ef:9b:19:
94:6a:ea:da:a9:96:8a:00:cb:62:a8:cb:ba:bf:2d:92:2e:26:
38:45:04:dc:6c:0b:bc:9f:df:8e:2f:f9:d6:1f:aa:b6:32:0e:
f1:c1:43:e1:14:09:db:f0:1e:97:77:f2:31:5d:b7:38:51:6e:
52:7b:d6:66:7d:25:43:9b:9a:05:81:53:b8:c5:c4:35:b8:6b:
6a:53:d9:c5:75:ea:29:f2:6d:62:06:b4:54:e1:9a:78:33:90:
78:27:3c:e6:4e:4c:69:7f:d1:90:c9:18:5e:67:4c:c5:ed:ea:
87:a1:51:e6:75:dc:29:5e:37:b7:75:ce:ef:8b:65:64:e2:c3:
40:7a:56:2b:56:3f:9e:38:03:55:8b:b1:a0:fa:4d:e1:c4:16:
59:35:e4:eb:36:2a:28:7a:60:e0:a3:36:f6:8c:81:f7:15:08:
8c:a9:bf:f5:4a:cb:ae:84:b2:82:5d:a2:12:90:3b:16:7b:c4:
60:40:7c:73:d6:f2:a4:21:85:d3:58:eb:7e:04:18:92:c8:27:
a7:94:97:cd:72:af:93:7a:56:42:17:77:26:be:70:2c:70:df:
0c:67:bf:ca:29:a6:0f:7b:a3:68:2c:8a:78:a2:d7:23:c3:79:
f9:91:29:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:07:59 2024 by rpki-client on console-fra.rpki-client.org