Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/3E2B9236734711E9B82EF41FF8AEA228.roa
File: 3E2B9236734711E9B82EF41FF8AEA228.roa (raw, json)
Hash identifier: sHavROAEkdgwvUhdTRWjp16c0hkbhCfTH2dCNlT1fQc=
Subject key identifier: 97:71:BB:5D:B5:95:AA:49:55:57:42:35:C5:ED:DB:45:FA:43:3F:28
Certificate issuer: /CN=F36E61B7AF/serialNumber=4376A562D4DD84D4D68922632EB0BB342A6ADA6A
Certificate serial: 02
Authority key identifier: 43:76:A5:62:D4:DD:84:D4:D6:89:22:63:2E:B0:BB:34:2A:6A:DA:6A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Q3alYtTdhNTWiSJjLrC7NCpq2mo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/3E2B9236734711E9B82EF41FF8AEA228.roa
Signing time: Fri 10 May 2019 17:15:44 +0000
ROA not before: Fri 10 May 2019 17:15:40 +0000
ROA not after: Mon 31 Dec 2029 17:15:40 +0000
asID: 328461
IP address blocks: 102.68.0.0/22 maxlen: 24
2c0f:ed40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/Q3alYtTdhNTWiSJjLrC7NCpq2mo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/Q3alYtTdhNTWiSJjLrC7NCpq2mo.mft
rsync://rpki.afrinic.net/repository/afrinic/Q3alYtTdhNTWiSJjLrC7NCpq2mo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Apr 2024 00:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E61B7AF/serialNumber=4376A562D4DD84D4D68922632EB0BB342A6ADA6A
Validity
Not Before: May 10 17:15:40 2019 GMT
Not After : Dec 31 17:15:40 2029 GMT
Subject: CN=5cd5b1c0-5693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ab:7a:ec:61:83:bc:af:4f:5d:f7:47:8f:51:
c5:12:11:95:b9:b5:3b:06:70:19:e5:04:06:77:99:
a3:c5:16:cb:8f:46:db:87:74:8d:a4:db:63:6b:cd:
1e:f2:9a:a3:df:e9:aa:10:1b:4e:fd:67:fc:fb:7d:
b3:15:a3:13:4f:c1:7a:d6:b7:27:8a:4f:92:59:3b:
15:04:90:dc:b2:74:ce:59:4b:5d:de:13:53:ac:09:
3e:4d:e4:8d:e8:3e:d9:e8:2b:40:41:25:37:db:09:
49:95:17:29:13:91:24:0b:0a:48:8a:eb:09:ce:6a:
7e:dd:46:50:24:12:88:6c:83:1b:ce:c2:ae:cb:7c:
34:3d:64:c2:30:b1:7c:26:e8:18:1c:27:27:e0:77:
ce:ef:40:93:8f:27:af:e3:ca:02:ac:0f:ad:8b:58:
17:90:26:22:e5:f2:2b:f2:a9:cf:03:09:98:c8:9f:
fd:cf:1d:da:fd:54:57:a8:76:7e:87:97:0d:9b:1e:
ae:b0:65:62:4f:43:73:33:0c:93:7e:7e:ab:44:70:
e5:5d:e7:16:2f:08:89:56:6b:6e:50:79:77:13:ee:
98:c8:77:a6:37:0c:59:8f:65:53:fd:8d:0a:b4:8d:
43:c9:43:ab:55:b2:50:7f:6b:34:54:58:c8:4e:35:
72:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:71:BB:5D:B5:95:AA:49:55:57:42:35:C5:ED:DB:45:FA:43:3F:28
X509v3 Authority Key Identifier:
keyid:43:76:A5:62:D4:DD:84:D4:D6:89:22:63:2E:B0:BB:34:2A:6A:DA:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/Q3alYtTdhNTWiSJjLrC7NCpq2mo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Q3alYtTdhNTWiSJjLrC7NCpq2mo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/3E2B9236734711E9B82EF41FF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
102.68.0.0/22
IPv6:
2c0f:ed40::/32
Signature Algorithm: sha256WithRSAEncryption
22:9e:fc:09:1f:aa:0f:9c:f6:d6:3b:cb:84:20:a9:5c:71:3c:
d2:d2:a9:40:35:3c:c0:fb:16:53:f5:48:72:4e:56:9b:38:f6:
85:79:84:2a:46:db:2f:26:f5:aa:d7:db:9e:1b:65:39:79:5c:
31:36:0a:30:7a:c9:bd:a3:c2:bf:88:41:a2:85:08:18:f3:06:
36:ed:1d:77:c7:b3:42:91:15:e3:14:91:05:ea:b1:31:8b:2e:
03:16:7c:30:d4:eb:4e:d2:15:15:cc:a3:30:53:e6:2e:f2:e5:
89:f2:93:89:bd:2b:d7:1c:47:e5:17:49:01:de:90:30:87:d4:
ea:78:36:45:e7:67:32:30:b1:0f:59:75:b0:e9:3f:ec:3f:a6:
51:ab:27:e2:fe:6a:50:e8:45:f1:34:86:cf:4f:76:f6:ea:90:
c6:61:b6:10:45:1f:ea:08:a4:6c:c3:85:48:03:90:4b:8e:f7:
de:77:9a:17:5c:43:37:13:22:fe:23:41:0c:38:e0:6c:3e:85:
84:8f:ae:b7:be:0d:39:cc:7c:05:82:fe:51:d5:11:aa:2d:fb:
f5:9e:e8:0f:06:75:cd:87:9f:2b:e6:a0:a8:ff:c6:b1:91:dd:
38:00:87:e3:a7:72:2f:2a:47:25:d6:8e:28:ac:76:9b:87:dc:
ae:53:92:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:48:56 2024 by rpki-client on console-fra.rpki-client.org