Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/053287EEC57E11E995258B21F8AEA228.roa
File: 053287EEC57E11E995258B21F8AEA228.roa (raw, json)
Hash identifier: 8RG1LKMy1N1k+/JPgUrBj1cf0XHxCQjayreYwufLFP8=
Subject key identifier: 33:51:A3:E3:E0:DE:0F:75:73:35:77:17:68:6F:33:1B:6C:DA:C2:08
Certificate issuer: /CN=F36E0F10AF/serialNumber=1483616A2FB6342535836C43FE9738D4F17E9F12
Certificate serial: 09
Authority key identifier: 14:83:61:6A:2F:B6:34:25:35:83:6C:43:FE:97:38:D4:F1:7E:9F:12
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/FINhai-2NCU1g2xD_pc41PF-nxI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/053287EEC57E11E995258B21F8AEA228.roa
Signing time: Fri 23 Aug 2019 08:14:26 +0000
ROA not before: Fri 23 Aug 2019 08:14:19 +0000
ROA not after: Wed 31 Dec 2025 08:14:19 +0000
asID: 37340
IP address blocks: 154.118.0.0/23 maxlen: 23
154.118.2.0/23 maxlen: 23
154.118.4.0/23 maxlen: 23
154.118.6.0/23 maxlen: 23
154.118.8.0/23 maxlen: 23
154.118.10.0/23 maxlen: 23
154.118.12.0/23 maxlen: 23
154.118.14.0/23 maxlen: 23
154.118.16.0/23 maxlen: 23
154.118.18.0/23 maxlen: 23
154.118.20.0/23 maxlen: 23
154.118.22.0/23 maxlen: 23
154.118.24.0/23 maxlen: 23
154.118.26.0/23 maxlen: 23
154.118.28.0/23 maxlen: 23
154.118.30.0/23 maxlen: 23
154.118.32.0/23 maxlen: 23
154.118.34.0/23 maxlen: 23
154.118.36.0/23 maxlen: 23
154.118.38.0/23 maxlen: 23
154.118.40.0/23 maxlen: 23
154.118.42.0/23 maxlen: 23
154.118.44.0/23 maxlen: 23
154.118.46.0/23 maxlen: 23
154.118.48.0/23 maxlen: 23
154.118.50.0/23 maxlen: 23
154.118.52.0/23 maxlen: 23
154.118.54.0/23 maxlen: 23
154.118.56.0/23 maxlen: 23
154.118.58.0/23 maxlen: 23
154.118.60.0/23 maxlen: 23
154.118.62.0/23 maxlen: 23
154.118.64.0/23 maxlen: 23
154.118.66.0/23 maxlen: 23
154.118.68.0/23 maxlen: 23
154.118.70.0/23 maxlen: 23
154.118.72.0/23 maxlen: 23
154.118.74.0/23 maxlen: 23
154.118.76.0/23 maxlen: 23
154.118.78.0/23 maxlen: 23
154.118.80.0/23 maxlen: 23
154.118.82.0/23 maxlen: 23
154.118.84.0/23 maxlen: 23
154.118.86.0/23 maxlen: 23
154.118.88.0/23 maxlen: 23
154.118.90.0/23 maxlen: 23
154.118.92.0/23 maxlen: 23
154.118.94.0/23 maxlen: 23
154.118.96.0/23 maxlen: 23
154.118.98.0/23 maxlen: 23
154.118.100.0/23 maxlen: 23
154.118.102.0/23 maxlen: 23
154.118.104.0/23 maxlen: 23
154.118.106.0/23 maxlen: 23
154.118.108.0/23 maxlen: 23
154.118.110.0/23 maxlen: 23
154.118.112.0/23 maxlen: 23
154.118.114.0/23 maxlen: 23
154.118.116.0/23 maxlen: 23
154.118.118.0/23 maxlen: 23
154.118.120.0/23 maxlen: 23
154.118.122.0/23 maxlen: 23
154.118.124.0/23 maxlen: 23
154.118.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.mft
rsync://rpki.afrinic.net/repository/afrinic/FINhai-2NCU1g2xD_pc41PF-nxI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E0F10AF/serialNumber=1483616A2FB6342535836C43FE9738D4F17E9F12
Validity
Not Before: Aug 23 08:14:19 2019 GMT
Not After : Dec 31 08:14:19 2025 GMT
Subject: CN=5d5fa062-4c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f3:ca:f2:86:32:21:83:c4:ca:a7:32:2e:26:
7c:e1:a5:e9:8e:2b:23:cb:32:8e:04:6b:0d:64:a7:
22:55:7b:39:9d:e2:65:03:9f:3a:47:d6:59:92:51:
a3:cc:96:1c:fd:bf:51:52:10:40:ce:2b:45:53:3d:
70:ba:71:32:f4:de:17:5a:9c:73:d1:17:34:63:38:
c8:3d:a4:a3:8f:7d:fd:b2:96:1f:8d:8b:72:e8:b0:
49:00:d2:1d:59:85:c1:61:e3:ae:a7:08:53:4a:79:
be:4a:5d:b6:42:e0:ad:4e:5e:d1:16:b8:ae:47:f8:
cf:5b:58:09:80:7f:08:a0:f9:96:85:23:a5:c2:6e:
79:73:96:9c:e4:1c:cf:6d:b7:fe:d3:a5:3f:86:9f:
dc:ec:68:5d:76:86:d4:be:ee:0c:f6:1b:c3:22:49:
38:31:ae:cb:6b:af:0f:2d:a1:f2:0e:2d:5e:4d:dd:
87:32:86:94:7f:74:4b:fe:66:80:25:2c:ab:51:98:
65:21:f0:b0:79:34:17:aa:49:e7:a2:bd:1f:80:3d:
9d:06:ca:45:eb:1d:db:c1:59:56:af:2f:3f:4d:20:
6a:c9:9d:22:6f:fb:b8:e0:c4:a2:d7:ad:27:c4:99:
a3:c8:d2:a3:25:1c:7a:7f:57:a7:99:b2:db:4b:31:
a6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:51:A3:E3:E0:DE:0F:75:73:35:77:17:68:6F:33:1B:6C:DA:C2:08
X509v3 Authority Key Identifier:
keyid:14:83:61:6A:2F:B6:34:25:35:83:6C:43:FE:97:38:D4:F1:7E:9F:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FINhai-2NCU1g2xD_pc41PF-nxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/053287EEC57E11E995258B21F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
154.118.0.0/17
Signature Algorithm: sha256WithRSAEncryption
83:84:e0:49:40:cd:24:fd:c3:78:92:fe:ae:78:27:6a:7d:42:
74:12:1e:64:b3:2c:46:ae:89:a5:a8:65:8c:6e:8c:08:a7:c9:
d4:ec:2f:f3:24:10:bd:29:89:c8:ab:e3:4c:01:b7:c1:34:2b:
e7:18:05:8f:4c:f9:d6:e9:09:d9:43:af:ce:16:4f:ee:67:d2:
d9:16:2b:33:77:c1:bc:c9:47:ff:f4:23:b0:4a:17:e9:77:77:
75:62:71:12:25:25:f4:4a:45:b9:ea:c8:5f:ee:59:e1:4a:78:
32:30:3f:6d:a2:68:e1:e7:43:96:7a:07:fc:81:4b:47:73:40:
0d:d1:a4:e1:59:46:0e:da:33:fc:38:2c:bc:d4:03:b3:3f:7e:
ba:7d:20:10:ff:51:40:d2:4d:3b:a7:4a:ec:12:1b:1b:ed:8e:
0d:ba:ae:7d:e7:3e:05:01:13:a3:cb:c0:50:73:3c:45:23:9d:
f5:be:98:df:3f:66:27:a9:53:28:7b:25:95:e8:d1:92:4e:93:
7f:bc:53:1e:60:31:b7:49:d7:54:c4:27:70:ad:31:20:bc:0c:
13:0c:09:97:03:7e:86:ea:16:1a:35:00:72:a5:d4:ad:70:3e:
d9:a0:b1:4f:69:ae:be:4a:7c:0b:bc:c9:96:b5:f6:f9:f9:9e:
0f:8d:b2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:01:35 2024 by rpki-client on console-ams.rpki-client.org