Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/F2992272C57911E98B78AC1EF8AEA228.roa
File: F2992272C57911E98B78AC1EF8AEA228.roa (raw, json)
Hash identifier: njzt40/v00335sDH9EQwcG30Zd4Fy1+NGwdS2MnggaU=
Subject key identifier: 5E:68:B6:CD:9F:1C:B4:DA:DE:8A:99:FA:43:A1:5D:FF:9C:A7:21:48
Certificate issuer: /CN=F36E0F10AF/serialNumber=1483616A2FB6342535836C43FE9738D4F17E9F12
Certificate serial: 05
Authority key identifier: 14:83:61:6A:2F:B6:34:25:35:83:6C:43:FE:97:38:D4:F1:7E:9F:12
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/FINhai-2NCU1g2xD_pc41PF-nxI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/F2992272C57911E98B78AC1EF8AEA228.roa
Signing time: Fri 23 Aug 2019 07:45:17 +0000
ROA not before: Fri 23 Aug 2019 07:45:12 +0000
ROA not after: Wed 31 Dec 2025 07:45:12 +0000
asID: 37340
IP address blocks: 197.242.96.0/23 maxlen: 23
197.242.98.0/23 maxlen: 23
197.242.100.0/23 maxlen: 23
197.242.102.0/23 maxlen: 23
197.242.104.0/23 maxlen: 23
197.242.106.0/23 maxlen: 23
197.242.108.0/23 maxlen: 23
197.242.110.0/23 maxlen: 23
197.242.112.0/23 maxlen: 23
197.242.114.0/23 maxlen: 23
197.242.116.0/23 maxlen: 23
197.242.118.0/23 maxlen: 23
197.242.120.0/23 maxlen: 23
197.242.122.0/23 maxlen: 23
197.242.124.0/23 maxlen: 23
197.242.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.mft
rsync://rpki.afrinic.net/repository/afrinic/FINhai-2NCU1g2xD_pc41PF-nxI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E0F10AF/serialNumber=1483616A2FB6342535836C43FE9738D4F17E9F12
Validity
Not Before: Aug 23 07:45:12 2019 GMT
Not After : Dec 31 07:45:12 2025 GMT
Subject: CN=5d5f998c-a315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:da:8f:0f:34:ba:67:51:d3:07:44:fc:63:d6:
3b:d5:ea:1b:0b:d0:92:9a:7e:65:11:cd:15:cf:9b:
df:e9:f3:fa:d5:7e:64:52:96:9b:86:f2:56:a1:45:
d5:cd:6c:77:c0:e0:d7:51:b7:03:b3:cf:25:ee:54:
4a:21:23:aa:8b:ee:82:11:a2:43:1f:dd:a7:54:27:
4d:d1:83:ef:aa:dc:5b:b3:ca:72:60:92:ec:06:7b:
00:3c:4d:75:3a:98:71:8b:e0:74:23:cc:17:43:b7:
bb:7d:bd:d6:87:2b:82:aa:2e:7f:d7:88:50:28:0f:
da:90:1a:bd:cb:9c:56:f9:98:44:65:37:a3:3f:08:
9c:80:6f:00:3b:d0:c8:af:0f:71:f4:ef:2c:b9:a7:
43:7a:a0:30:6d:95:f7:c1:ed:27:d5:7a:ea:ac:f5:
86:92:b8:69:86:92:18:80:5f:b3:49:86:3b:b7:b2:
dc:c7:ce:df:ba:cc:4e:15:c6:0c:91:26:60:70:8c:
6f:26:e9:80:5e:33:6b:f6:87:cf:94:9c:75:74:f3:
0f:e5:56:7e:10:f8:a9:9a:62:fa:2f:73:d2:6a:25:
0c:eb:2a:2f:e5:e3:cc:fc:00:56:0b:c6:4f:9a:5b:
4c:80:51:6a:75:64:b4:cc:3f:65:46:6f:25:20:74:
08:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:68:B6:CD:9F:1C:B4:DA:DE:8A:99:FA:43:A1:5D:FF:9C:A7:21:48
X509v3 Authority Key Identifier:
keyid:14:83:61:6A:2F:B6:34:25:35:83:6C:43:FE:97:38:D4:F1:7E:9F:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FINhai-2NCU1g2xD_pc41PF-nxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/F2992272C57911E98B78AC1EF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
197.242.96.0/19
Signature Algorithm: sha256WithRSAEncryption
2a:3f:2d:41:0e:f7:11:10:b2:45:2e:39:f7:53:23:2a:9c:aa:
5e:b8:20:1c:77:23:d9:53:59:93:44:14:b6:e2:ac:26:4c:aa:
2d:fd:d4:8b:14:96:67:de:ad:e1:d9:eb:d3:a2:8a:e6:88:1b:
94:6d:cc:ff:9e:23:40:17:06:14:1d:8d:8c:ad:1c:fd:74:72:
d3:a4:91:40:20:7b:52:32:ed:82:14:9d:11:6f:22:c9:30:a4:
26:4b:13:72:48:e7:af:87:2f:02:a0:eb:7f:3f:eb:bb:3c:bd:
0f:9e:5f:7b:d2:e8:83:30:ab:45:04:ec:bb:40:8d:74:82:1f:
f4:de:45:db:7c:a1:01:90:70:90:fb:aa:71:a9:18:11:b0:22:
11:3f:36:29:92:1a:cb:1a:3a:25:b3:4b:ea:09:1e:0e:c9:f2:
17:01:7c:a7:8a:aa:a0:7e:79:e0:c4:34:e5:81:87:67:f2:48:
45:ae:d7:44:59:e3:df:ed:5e:e8:b2:0f:dc:a7:99:e8:ca:51:
10:eb:b7:b7:69:f6:a7:49:e8:72:82:a0:bf:80:e4:ea:30:50:
89:d4:33:5d:aa:9e:0e:f3:83:3a:ce:bd:58:8f:92:96:55:38:
02:73:19:98:fa:98:82:c3:37:4b:06:76:04:e1:1c:e7:ca:3a:
4e:1f:8c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:29 2024 by rpki-client on console-ams.rpki-client.org