Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/D7EB2302681D11EA9D36683CF8AEA228.roa
File: D7EB2302681D11EA9D36683CF8AEA228.roa (raw, json)
Hash identifier: AgNVSSf6L6GA3IHpXql3JWZ8L6ROJY9bnjmSjQeMQnU=
Subject key identifier: F9:70:12:99:1D:44:68:DC:BC:20:F4:B1:C6:C1:73:0D:66:19:00:F7
Certificate issuer: /CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Certificate serial: 0135
Authority key identifier: FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/D7EB2302681D11EA9D36683CF8AEA228.roa
Signing time: Tue 17 Mar 2020 07:06:38 +0000
ROA not before: Tue 17 Mar 2020 07:06:34 +0000
ROA not after: Sun 17 Mar 2030 07:06:34 +0000
asID: 327733
IP address blocks: 102.23.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309 (0x135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Validity
Not Before: Mar 17 07:06:34 2020 GMT
Not After : Mar 17 07:06:34 2030 GMT
Subject: CN=5e7076fd-66cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:77:fd:21:55:37:6b:2c:f8:99:43:f6:fd:ba:
7e:d8:c7:e1:0c:45:0a:b1:54:9c:48:27:39:81:ed:
1c:0f:ee:8b:9f:32:b5:8b:56:1f:47:fc:fc:dd:ad:
f2:dd:74:ef:c9:bc:16:dc:8e:e3:99:42:aa:bf:d8:
cc:cc:4b:62:4e:1f:03:c3:ce:d4:ba:98:eb:f9:a2:
a2:e1:83:91:85:d0:91:fb:6c:24:55:98:69:f8:73:
e7:14:54:c2:7d:36:f5:df:4c:96:fe:c4:3a:fe:68:
33:70:c6:84:33:48:a5:18:a2:37:e2:06:84:00:4e:
11:da:4a:56:4e:03:7a:a8:37:7b:50:5a:4e:ff:6b:
94:66:21:85:fc:0f:64:ad:9e:ec:a8:9c:75:47:2d:
5b:db:22:90:78:ff:46:b1:9e:64:09:f2:9d:a7:60:
7b:1b:31:4f:74:f6:ba:9b:c0:33:38:77:14:b1:43:
dd:81:4e:f6:9b:f6:be:b4:91:b3:36:cf:89:c6:77:
19:dc:3f:3e:97:15:24:24:df:ed:c8:d3:98:16:36:
1d:e6:81:8c:9c:ae:85:cf:ac:4c:ac:df:23:8b:2f:
25:4d:da:87:0a:de:fd:e0:c7:1d:cf:98:a2:f4:e2:
39:5b:2f:d4:c5:ba:08:64:7d:73:89:07:11:82:c3:
5b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:70:12:99:1D:44:68:DC:BC:20:F4:B1:C6:C1:73:0D:66:19:00:F7
X509v3 Authority Key Identifier:
keyid:FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/D7EB2302681D11EA9D36683CF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
102.23.92.0/22
Signature Algorithm: sha256WithRSAEncryption
99:b7:54:f0:ad:2d:6a:70:5c:ff:77:0d:d2:83:94:e7:42:44:
47:31:9a:c4:d6:11:70:a2:c0:25:b6:4e:f1:2a:5e:31:9e:f7:
ea:21:37:83:50:cd:a5:3d:9d:66:4a:66:97:18:e0:16:79:f4:
cb:51:d9:1d:9b:66:16:c5:6b:7a:60:b8:13:5e:85:17:9b:f9:
23:00:f1:71:37:dc:9d:40:33:91:7a:6c:81:1a:08:96:94:71:
c8:90:1b:a2:e9:1c:e0:dc:c1:93:68:52:96:c3:92:46:c9:2d:
e9:a9:7f:a2:35:75:b7:24:4f:e1:a0:87:61:d3:0a:97:55:f6:
99:17:ec:36:10:a1:b4:73:59:d3:0f:00:bb:10:90:f2:c1:a7:
08:6d:6e:63:21:f0:83:da:a0:0a:29:25:1d:88:a9:20:5e:34:
5b:d5:2b:b6:02:df:2e:80:88:2c:af:16:1b:db:e1:b2:3c:e2:
d3:a1:25:5c:4b:cc:64:d6:f4:15:0f:f5:c6:e6:ba:4f:0e:50:
75:1c:12:45:76:ae:3a:1d:20:3b:c9:81:f2:67:0a:1d:0c:5b:
93:14:f2:ee:78:32:9f:55:3e:42:e6:68:80:3b:7e:36:cb:d2:
e9:74:07:b8:8a:d7:e2:40:25:9d:09:99:0b:64:7c:68:57:3a:
c0:76:8e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 01:41:42 2024 by rpki-client on console-fra.rpki-client.org