Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/ECDA29502F0911EEBC6509744AD9E6FC.roa
File: ECDA29502F0911EEBC6509744AD9E6FC.roa (raw, json)
Hash identifier: Bqw7amq+x2Ix3fkQ1a3WkUzvoPFBg/KtGasc/uBpvfI=
Subject key identifier: FB:3F:90:2D:CE:39:FC:20:53:7B:3E:21:08:1F:0C:0D:02:65:2C:19
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0508
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/ECDA29502F0911EEBC6509744AD9E6FC.roa
Signing time: Sun 30 Jul 2023 18:50:17 +0000
ROA not before: Sun 30 Jul 2023 18:50:13 +0000
ROA not after: Sat 30 Jul 2033 18:50:13 +0000
asID: 37119
IP address blocks: 105.174.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1288 (0x508)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Jul 30 18:50:13 2023 GMT
Not After : Jul 30 18:50:13 2033 GMT
Subject: CN=64c6b0e9-b76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:cd:d9:30:7a:56:10:b2:8f:db:eb:99:f7:53:
e3:5f:9d:fa:2d:12:88:13:ac:b8:42:cc:54:40:39:
b2:c5:74:87:fb:48:e5:c1:3d:6c:9c:d7:7d:bb:12:
c7:c7:54:44:6c:88:e0:77:ff:ae:20:a5:f1:a8:6b:
c1:fb:16:a3:5b:b2:6e:ec:3b:6f:f0:3b:d5:5d:88:
c5:3a:7c:b6:42:df:2b:d1:9c:0a:3b:5c:1c:30:2d:
bd:2b:f7:3f:19:9e:a6:67:6d:b0:22:3f:f2:43:69:
51:90:61:52:4d:27:39:23:ff:24:04:58:d4:56:de:
1d:6e:ac:f9:7e:2f:73:e3:77:ef:e5:d2:9c:af:f1:
8e:dd:bc:eb:63:60:4c:4b:0f:12:4f:d7:65:5f:a7:
54:3b:de:8e:65:2c:b9:10:f3:80:f8:6b:d1:9d:43:
3c:f9:e9:d3:7e:5f:fc:0e:01:86:05:2d:6b:7f:e7:
4a:c3:70:17:c1:a2:ff:c1:22:1b:42:d6:c9:25:be:
fd:d4:75:6a:63:9c:03:67:0b:24:2e:3f:aa:ac:56:
84:8d:c9:2a:f4:2d:65:6a:f8:22:a7:a4:12:74:52:
59:a7:9c:20:d9:79:16:7e:1a:1b:6e:92:31:62:53:
b3:56:50:63:67:32:8b:19:f1:92:07:66:89:34:ae:
fd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3F:90:2D:CE:39:FC:20:53:7B:3E:21:08:1F:0C:0D:02:65:2C:19
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/ECDA29502F0911EEBC6509744AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.174.4.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:ad:31:62:af:e4:11:c6:cf:42:cd:11:7c:8d:50:a8:41:80:
c0:42:2b:ab:1c:04:6e:de:19:5f:b3:d5:c8:6b:87:26:79:2c:
61:e3:71:ea:3a:91:97:5e:0a:71:48:bf:a6:0b:9f:8b:24:c6:
57:03:36:4b:03:58:2c:2c:02:99:a6:39:48:99:d7:3d:0f:bb:
a7:4f:af:d1:0c:29:87:0c:b1:d5:af:a6:d5:51:a1:02:ef:12:
a1:31:fc:13:96:81:8a:17:0d:59:99:d3:73:16:39:85:7b:45:
49:71:6c:d0:d9:7f:11:3b:3b:69:a4:a1:59:f6:06:5f:ed:a7:
6c:06:be:57:bd:36:13:8f:64:50:a7:59:83:9e:a6:e3:f6:d3:
90:3b:c1:b4:d8:8e:72:15:84:96:d8:a8:d9:1b:cb:05:7d:13:
02:e6:66:1d:e2:53:7b:15:e3:3a:25:23:e1:54:b1:61:3a:79:
f2:d1:54:22:88:f6:57:68:6b:ac:eb:06:c2:40:bd:99:4d:50:
f1:98:bd:23:23:36:35:de:41:0a:c1:2f:17:eb:b6:41:c4:cb:
95:cb:c4:80:22:e0:a9:2f:42:a5:af:71:b1:29:e8:bd:54:1e:
01:d7:48:cc:c6:a5:c6:ca:09:1c:35:61:ed:a4:ab:38:c6:93:
2a:94:45:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:27 2024 by rpki-client on console-ams.rpki-client.org