Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FD00FB0CC57B11E990030320F8AEA228.roa
File: FD00FB0CC57B11E990030320F8AEA228.roa (raw, json)
Hash identifier: wjpT71ZYBV7yZPhlR7XkwQZs3zrAzJhdzS4M9JfwlgY=
Subject key identifier: A1:E8:1F:67:5C:8E:7D:1B:35:78:D1:20:4A:75:87:5E:49:C9:A2:32
Certificate issuer: /CN=F36E0F10AF/serialNumber=1483616A2FB6342535836C43FE9738D4F17E9F12
Certificate serial: 07
Authority key identifier: 14:83:61:6A:2F:B6:34:25:35:83:6C:43:FE:97:38:D4:F1:7E:9F:12
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/FINhai-2NCU1g2xD_pc41PF-nxI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FD00FB0CC57B11E990030320F8AEA228.roa
Signing time: Fri 23 Aug 2019 07:59:53 +0000
ROA not before: Fri 23 Aug 2019 07:59:47 +0000
ROA not after: Wed 31 Dec 2025 07:59:47 +0000
asID: 37340
IP address blocks: 154.120.64.0/23 maxlen: 23
154.120.66.0/23 maxlen: 23
154.120.68.0/23 maxlen: 23
154.120.70.0/23 maxlen: 23
154.120.72.0/23 maxlen: 23
154.120.74.0/23 maxlen: 23
154.120.76.0/23 maxlen: 23
154.120.78.0/23 maxlen: 23
154.120.80.0/23 maxlen: 23
154.120.82.0/23 maxlen: 23
154.120.84.0/23 maxlen: 23
154.120.86.0/23 maxlen: 23
154.120.88.0/23 maxlen: 23
154.120.90.0/23 maxlen: 23
154.120.92.0/23 maxlen: 23
154.120.94.0/23 maxlen: 23
154.120.96.0/23 maxlen: 23
154.120.98.0/23 maxlen: 23
154.120.100.0/23 maxlen: 23
154.120.102.0/23 maxlen: 23
154.120.104.0/23 maxlen: 23
154.120.106.0/23 maxlen: 23
154.120.108.0/23 maxlen: 23
154.120.110.0/23 maxlen: 23
154.120.112.0/23 maxlen: 23
154.120.114.0/23 maxlen: 23
154.120.116.0/23 maxlen: 23
154.120.118.0/23 maxlen: 23
154.120.120.0/23 maxlen: 23
154.120.122.0/23 maxlen: 23
154.120.124.0/23 maxlen: 23
154.120.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.mft
rsync://rpki.afrinic.net/repository/afrinic/FINhai-2NCU1g2xD_pc41PF-nxI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E0F10AF/serialNumber=1483616A2FB6342535836C43FE9738D4F17E9F12
Validity
Not Before: Aug 23 07:59:47 2019 GMT
Not After : Dec 31 07:59:47 2025 GMT
Subject: CN=5d5f9cf9-979e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:16:a5:3a:b1:43:01:89:e9:1b:f3:49:3c:1d:
ee:f0:d1:b7:64:0a:63:c4:87:a1:be:72:c9:fa:96:
90:33:ca:a4:da:30:de:40:f1:56:3d:1b:be:6a:12:
c1:1d:94:97:21:6b:6e:85:78:81:8c:57:b9:a4:84:
5e:12:92:6c:77:da:8e:d7:86:88:f0:e8:59:00:2c:
ea:37:3f:3f:a8:11:f0:e6:94:34:24:ff:d1:26:30:
a1:5f:63:c1:55:c6:48:ef:20:04:5a:6b:11:da:10:
be:be:98:2d:f3:b4:fb:2c:04:62:b0:15:73:04:34:
4a:d9:85:46:3e:65:82:97:df:2c:8c:00:87:d9:a6:
c2:c4:5c:c7:92:84:65:58:fb:99:ce:6a:2d:12:b7:
63:31:54:41:03:12:81:e9:bd:1b:ac:b7:b7:44:be:
37:bc:13:44:c4:da:e3:de:c6:c3:b1:64:2c:f9:4e:
2b:e3:f8:a2:d7:96:a8:3f:ae:93:87:9b:9b:99:63:
73:e0:4e:54:f6:3c:4a:a3:ca:18:51:5e:58:98:53:
14:49:80:ab:28:69:84:ce:86:75:d2:90:70:8c:4d:
e3:15:26:64:6a:a1:e8:96:ba:05:37:32:a0:0b:bf:
f4:39:89:f0:45:07:13:cf:b4:1b:fa:57:b6:69:a7:
1c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E8:1F:67:5C:8E:7D:1B:35:78:D1:20:4A:75:87:5E:49:C9:A2:32
X509v3 Authority Key Identifier:
keyid:14:83:61:6A:2F:B6:34:25:35:83:6C:43:FE:97:38:D4:F1:7E:9F:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FINhai-2NCU1g2xD_pc41PF-nxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FD00FB0CC57B11E990030320F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
154.120.64.0/18
Signature Algorithm: sha256WithRSAEncryption
87:bd:68:b0:40:03:9e:53:85:87:b6:3b:7e:a4:20:31:e9:bd:
46:17:4c:f1:e8:94:81:2e:df:02:a2:f2:27:d0:59:e9:9e:32:
51:27:a4:97:80:46:a7:c2:10:23:7f:da:68:29:35:09:6e:24:
c2:13:8a:fc:26:d9:dc:db:04:32:b1:12:f1:93:4f:fd:8c:49:
5c:d3:58:34:50:9f:65:59:a6:7f:f8:02:c8:3b:69:d8:cd:51:
18:93:50:8d:be:de:be:14:cf:c6:f9:49:bf:69:90:86:c6:96:
97:fb:a2:af:a6:e0:c5:e6:95:6e:b7:71:89:4e:b6:0b:7c:f5:
ba:0b:3e:2f:56:45:25:16:c9:07:be:70:a7:52:eb:e0:92:35:
88:7c:bb:41:09:db:b5:10:15:34:59:9d:25:aa:77:86:a5:d2:
12:bb:6c:53:7a:4e:39:18:3c:5c:86:2a:9a:00:bd:49:96:d5:
05:ec:f3:0c:a9:b5:ae:9d:4d:b6:73:d8:27:4d:b2:5d:7e:69:
47:78:a1:81:58:52:b0:a3:f4:12:57:f8:90:a9:6e:f3:84:df:
07:11:cc:90:4d:d0:bc:da:10:62:ff:61:3f:46:a5:8c:0b:d3:
7e:ba:b1:3b:6f:04:9c:d8:97:4b:9e:7c:2b:4f:f2:a0:4e:43:
02:53:ca:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:19 2024 by rpki-client on console-fra.rpki-client.org