Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/BF8426E405CA11EE92157D354AD9E6FC.roa
File: BF8426E405CA11EE92157D354AD9E6FC.roa (raw, json)
Hash identifier: A+WykTSmvAsx1MAKq+Pb3eSJ+oLcJkndPTp4NaD0n4Y=
Subject key identifier: FD:48:7A:2F:C3:AD:BE:C3:B8:3A:34:21:91:62:89:4B:8E:16:7A:3E
Certificate issuer: /CN=F36E29EDAF/serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
Certificate serial: 019C
Authority key identifier: 2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/BF8426E405CA11EE92157D354AD9E6FC.roa
Signing time: Thu 08 Jun 2023 07:04:45 +0000
ROA not before: Thu 08 Jun 2023 07:04:41 +0000
ROA not after: Tue 08 Jun 2032 07:04:41 +0000
asID: 327996
IP address blocks: 102.213.20.0/22 maxlen: 22
102.213.20.0/24 maxlen: 24
102.213.21.0/24 maxlen: 24
102.213.22.0/24 maxlen: 24
102.213.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 11 May 2024 00:04:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E29EDAF/serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
Validity
Not Before: Jun 8 07:04:41 2023 GMT
Not After : Jun 8 07:04:41 2032 GMT
Subject: CN=64817d8d-1915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d2:33:03:60:cb:ec:e7:65:d0:51:0d:23:f7:
bc:7c:c7:fd:40:e0:64:30:e4:4f:2a:bc:23:f9:ab:
1a:75:31:24:a5:c8:30:e9:50:8e:4b:b3:68:47:88:
31:e4:07:f5:6b:ac:35:b6:ea:8e:51:00:31:3a:22:
8b:10:f3:ac:38:49:37:4c:c9:cd:68:b6:3b:2d:b5:
d9:26:59:be:60:c4:19:ef:ec:9a:41:29:2d:dd:db:
fe:3d:4c:5c:75:d9:d6:8c:26:47:e0:8e:43:c0:28:
29:ed:ff:09:02:2b:4b:aa:05:5a:69:c3:ce:ba:33:
0a:b5:7a:ab:6c:0e:5a:e0:5f:78:48:6d:3f:02:c1:
bf:38:3f:87:bd:66:0e:fc:38:ce:54:be:fb:b8:fd:
0e:62:fd:97:6d:d2:a3:9e:9f:b3:c1:7c:a4:a8:90:
db:73:83:5c:0e:42:d6:ef:b1:8b:f4:3e:5a:94:a2:
bb:30:40:64:40:85:6a:e1:93:6e:fb:de:f4:43:68:
ea:5b:f3:23:28:6e:0f:5d:34:1d:99:e6:8a:93:d1:
1e:7f:65:99:80:a8:04:60:d8:6e:4d:76:e2:b1:10:
54:84:7d:d4:6c:21:15:58:18:5f:d3:f5:04:65:bc:
85:01:8a:45:55:33:d0:54:27:f7:39:7b:10:3f:a5:
53:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:48:7A:2F:C3:AD:BE:C3:B8:3A:34:21:91:62:89:4B:8E:16:7A:3E
X509v3 Authority Key Identifier:
keyid:2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/BF8426E405CA11EE92157D354AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.20.0/22
Signature Algorithm: sha256WithRSAEncryption
51:e3:92:1b:70:a1:eb:60:a6:88:e4:d5:38:99:ce:65:e9:cf:
45:06:48:19:7f:dd:d5:44:fd:9c:72:35:79:1f:14:b7:b8:ea:
3d:a3:dd:a0:48:48:1c:56:73:22:46:72:84:ac:4d:d8:ca:14:
33:a7:57:40:95:a4:0d:e7:f5:b8:eb:ee:e4:6f:b3:49:ee:57:
14:3d:30:1c:15:1c:44:cd:8f:9b:14:0f:e1:f7:21:80:b1:3a:
5a:ab:1f:29:3b:1a:ee:3a:a7:b2:94:1c:6a:18:e0:5c:91:d4:
a8:a9:fe:ed:c2:f3:11:0a:03:f9:a2:3d:59:9b:9d:78:b4:93:
8c:4e:e3:00:cc:40:63:0d:d6:8a:f9:23:a9:b0:a1:18:3b:34:
e6:81:ce:27:32:f3:d4:ec:42:69:62:47:4c:84:7b:8d:69:4b:
20:5b:a7:70:1a:72:83:32:38:f6:e1:43:d1:fc:18:c6:58:44:
9e:2e:59:26:b7:b5:a8:d0:ce:e1:ce:53:20:2e:00:35:47:bd:
21:93:35:19:f5:d8:00:1f:af:a2:78:81:03:e2:30:0f:cd:6b:
d4:e8:64:f9:f2:7a:e8:bc:86:32:0b:a8:8f:e1:4d:fc:b7:cf:
b3:c5:57:f5:f4:b7:73:01:b5:56:53:c6:c3:87:49:56:46:32:
69:9e:56:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 03:29:30 2024 by rpki-client on console-fra.rpki-client.org