Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/EAE86FFAC57F11E98956EC22F8AEA228.roa
File: EAE86FFAC57F11E98956EC22F8AEA228.roa (raw, json)
Hash identifier: A5MFii7zHAjgXRCjR4xiJOqNYfNzVLgbnGJOuX6/bNQ=
Subject key identifier: 58:34:4A:72:4C:C2:D2:1E:50:F4:6D:53:99:C3:A4:6C:60:AC:5E:3A
Certificate issuer: /CN=F36E0F10AF/serialNumber=1483616A2FB6342535836C43FE9738D4F17E9F12
Certificate serial: 0B
Authority key identifier: 14:83:61:6A:2F:B6:34:25:35:83:6C:43:FE:97:38:D4:F1:7E:9F:12
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/FINhai-2NCU1g2xD_pc41PF-nxI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/EAE86FFAC57F11E98956EC22F8AEA228.roa
Signing time: Fri 23 Aug 2019 08:28:01 +0000
ROA not before: Fri 23 Aug 2019 08:27:55 +0000
ROA not after: Wed 31 Dec 2025 08:27:55 +0000
asID: 37340
IP address blocks: 41.217.0.0/23 maxlen: 23
41.217.2.0/23 maxlen: 23
41.217.4.0/23 maxlen: 23
41.217.6.0/23 maxlen: 23
41.217.8.0/23 maxlen: 23
41.217.10.0/23 maxlen: 23
41.217.12.0/23 maxlen: 23
41.217.14.0/23 maxlen: 23
41.217.16.0/23 maxlen: 23
41.217.18.0/23 maxlen: 23
41.217.20.0/23 maxlen: 23
41.217.22.0/23 maxlen: 23
41.217.24.0/23 maxlen: 23
41.217.26.0/23 maxlen: 23
41.217.28.0/23 maxlen: 23
41.217.30.0/23 maxlen: 23
41.217.32.0/23 maxlen: 23
41.217.34.0/23 maxlen: 23
41.217.36.0/23 maxlen: 23
41.217.38.0/23 maxlen: 23
41.217.40.0/23 maxlen: 23
41.217.42.0/23 maxlen: 23
41.217.44.0/23 maxlen: 23
41.217.46.0/23 maxlen: 23
41.217.48.0/23 maxlen: 23
41.217.50.0/23 maxlen: 23
41.217.52.0/23 maxlen: 23
41.217.54.0/23 maxlen: 23
41.217.56.0/23 maxlen: 23
41.217.58.0/23 maxlen: 23
41.217.60.0/23 maxlen: 23
41.217.62.0/23 maxlen: 23
41.217.64.0/23 maxlen: 23
41.217.66.0/23 maxlen: 23
41.217.68.0/23 maxlen: 23
41.217.70.0/23 maxlen: 23
41.217.72.0/23 maxlen: 23
41.217.74.0/23 maxlen: 23
41.217.76.0/23 maxlen: 23
41.217.78.0/23 maxlen: 23
41.217.80.0/23 maxlen: 23
41.217.82.0/23 maxlen: 23
41.217.84.0/23 maxlen: 23
41.217.86.0/23 maxlen: 23
41.217.88.0/23 maxlen: 23
41.217.90.0/23 maxlen: 23
41.217.92.0/23 maxlen: 23
41.217.94.0/23 maxlen: 23
41.217.96.0/23 maxlen: 23
41.217.98.0/23 maxlen: 23
41.217.100.0/23 maxlen: 23
41.217.102.0/23 maxlen: 23
41.217.104.0/23 maxlen: 23
41.217.106.0/23 maxlen: 23
41.217.108.0/23 maxlen: 23
41.217.110.0/23 maxlen: 23
41.217.112.0/23 maxlen: 23
41.217.114.0/23 maxlen: 23
41.217.116.0/23 maxlen: 23
41.217.118.0/23 maxlen: 23
41.217.120.0/23 maxlen: 23
41.217.122.0/23 maxlen: 23
41.217.124.0/23 maxlen: 23
41.217.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.mft
rsync://rpki.afrinic.net/repository/afrinic/FINhai-2NCU1g2xD_pc41PF-nxI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E0F10AF/serialNumber=1483616A2FB6342535836C43FE9738D4F17E9F12
Validity
Not Before: Aug 23 08:27:55 2019 GMT
Not After : Dec 31 08:27:55 2025 GMT
Subject: CN=5d5fa391-87d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:d6:6e:0e:cc:03:23:de:86:07:95:12:b8:
8d:4a:7d:b4:6f:be:44:a4:54:b3:97:29:34:bd:10:
dd:cf:73:7b:1e:b9:aa:ef:14:6f:b2:c4:d1:10:5f:
d1:0e:1f:9f:47:e0:5c:22:2d:d5:5a:68:a9:4e:5b:
68:1d:d0:0d:65:b8:fe:42:a1:2a:94:0e:94:db:7a:
8b:c8:14:96:7b:8f:4b:7a:6d:85:d2:22:6a:f2:a9:
d9:5e:d5:65:c2:61:d8:3f:89:17:1c:78:df:b1:9f:
36:99:3b:2a:e0:fb:d4:94:6f:79:14:f7:f3:5f:36:
3c:34:b3:52:b1:b3:e5:a6:d3:c4:35:44:c7:b0:cc:
b0:1c:5a:b5:7f:d1:78:28:5b:32:13:51:81:29:45:
ca:a6:21:99:02:ac:2e:19:4b:7a:9a:78:9c:15:83:
11:8c:a6:f5:4c:ee:65:09:dd:6e:16:2b:ba:37:f1:
c5:86:f4:fa:2e:53:d8:98:da:c1:82:85:47:e1:a9:
f5:ce:b5:8e:e2:0f:9a:40:ec:3f:d9:2e:0b:d4:85:
39:e6:fe:a1:ea:c3:fe:2b:db:7f:59:01:88:11:a1:
98:72:a6:f6:05:d9:eb:fb:b5:8f:cf:93:5f:4f:4b:
9f:46:00:43:f6:e3:52:c3:02:9d:47:71:2d:86:7c:
d8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:34:4A:72:4C:C2:D2:1E:50:F4:6D:53:99:C3:A4:6C:60:AC:5E:3A
X509v3 Authority Key Identifier:
keyid:14:83:61:6A:2F:B6:34:25:35:83:6C:43:FE:97:38:D4:F1:7E:9F:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FINhai-2NCU1g2xD_pc41PF-nxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/EAE86FFAC57F11E98956EC22F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.217.0.0/17
Signature Algorithm: sha256WithRSAEncryption
11:35:7f:92:35:b5:e4:e4:cd:30:dc:fa:51:75:49:c1:30:4e:
62:af:2d:6c:4e:78:d2:3a:54:65:b7:01:3f:32:67:09:39:e6:
ee:e7:96:7f:c9:31:ba:f0:48:fa:07:a9:96:d4:03:40:c7:a3:
05:2e:ca:2f:58:42:e6:ee:a8:e3:14:61:d0:d0:00:f4:9c:5a:
c2:83:e5:e1:68:c5:a8:41:d4:1e:e2:4a:a7:17:1e:25:7e:d2:
a8:19:e3:c8:53:d5:50:36:41:64:c5:99:31:2d:7a:2d:6d:77:
f4:f7:75:c3:f7:c5:ea:d1:ca:f7:1d:6c:54:9a:46:17:2f:bb:
3d:cf:a0:82:3b:9e:c8:3d:02:c6:94:77:e4:32:e0:e8:73:d5:
37:bf:6e:04:3b:2d:7c:0b:f6:f4:37:14:78:29:8c:42:8e:46:
53:10:3a:6d:ff:c0:8b:c7:d1:ed:37:e9:34:d1:49:6d:e7:30:
34:60:0d:38:1d:72:ba:ad:9a:0e:6a:f6:3c:01:c0:ec:c7:a4:
b3:97:ba:59:34:bc:22:73:21:be:20:1e:b9:a0:de:b2:0e:a5:
23:4c:9f:32:df:05:64:85:5c:f0:db:df:f8:80:44:68:5d:b2:
92:06:08:23:b4:39:02:79:20:ae:98:2b:67:52:fa:cf:d6:8e:
de:74:a4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:29 2024 by rpki-client on console-ams.rpki-client.org