Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/251DA380E4DE11EDBAE4C72A5D736454.roa
File: 251DA380E4DE11EDBAE4C72A5D736454.roa (raw, json)
Hash identifier: TeLYjH73toDFoU0p+li50AAg6/Hzd+3DWfAKdcW/US4=
Subject key identifier: 4B:35:97:3D:A6:95:82:D4:45:D4:93:05:28:69:33:47:28:D3:43:F5
Certificate issuer: /CN=F36EBDD7AF/serialNumber=671762DF2F4B65E8350EF43DFE6E347765751B67
Certificate serial: 02D8
Authority key identifier: 67:17:62:DF:2F:4B:65:E8:35:0E:F4:3D:FE:6E:34:77:65:75:1B:67
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/251DA380E4DE11EDBAE4C72A5D736454.roa
Signing time: Thu 27 Apr 2023 09:30:28 +0000
ROA not before: Thu 27 Apr 2023 09:30:24 +0000
ROA not after: Mon 31 May 2032 09:30:24 +0000
asID: 37349
IP address blocks: 102.212.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.mft
rsync://rpki.afrinic.net/repository/afrinic/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 May 2024 00:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 728 (0x2d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EBDD7AF/serialNumber=671762DF2F4B65E8350EF43DFE6E347765751B67
Validity
Not Before: Apr 27 09:30:24 2023 GMT
Not After : May 31 09:30:24 2032 GMT
Subject: CN=644a40b3-799b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:28:49:54:de:b1:26:6c:41:1c:06:97:27:
b0:8b:a7:c5:7b:55:07:fe:1f:5f:36:db:5c:a9:ac:
44:03:cc:16:90:55:3a:86:1f:35:81:4e:25:83:16:
79:27:8b:11:a0:cc:4d:3e:c0:ef:2f:bd:4e:ea:d4:
07:ba:50:33:21:1e:2b:dd:65:8e:48:3d:2f:d2:bb:
bd:80:8c:c0:10:94:a2:ba:9f:2b:bf:69:98:41:ab:
87:aa:ca:7e:b6:84:28:c0:dc:33:46:0f:5d:7c:5c:
74:93:51:26:f0:b1:54:24:ee:d7:8d:e9:e5:34:98:
3c:96:21:1a:de:2e:7d:5a:26:f6:ab:ac:22:bb:c5:
6b:bf:00:fc:c1:9f:3e:00:b3:10:7e:72:42:b4:7c:
df:b5:46:e8:b9:9a:76:e7:da:4f:1b:3d:fc:83:e1:
9c:50:36:cb:d0:37:b3:6b:90:6e:05:0a:dc:a9:8a:
75:0b:98:51:2d:46:78:3f:6e:eb:b9:7f:de:06:46:
ca:c4:37:13:e1:59:0d:5f:ed:95:c1:af:00:5d:3f:
e1:02:52:c0:dd:3e:76:74:cb:40:0b:97:92:2b:24:
3b:00:56:7e:69:a6:89:3e:62:2d:e7:c0:ed:b0:4b:
5a:4d:b0:e4:01:a3:e2:c8:73:9c:6a:40:a1:f1:7c:
16:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:35:97:3D:A6:95:82:D4:45:D4:93:05:28:69:33:47:28:D3:43:F5
X509v3 Authority Key Identifier:
keyid:67:17:62:DF:2F:4B:65:E8:35:0E:F4:3D:FE:6E:34:77:65:75:1B:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/251DA380E4DE11EDBAE4C72A5D736454.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.108.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:83:01:23:48:fa:d6:4b:9c:42:0a:a6:ab:61:f0:52:9f:79:
23:86:2a:d7:64:fe:e6:53:ba:50:ad:03:ad:e8:d4:93:ce:dd:
f6:43:ec:ec:75:fc:c6:9f:f3:68:af:53:3b:6d:fa:e2:2f:34:
78:6a:c3:c4:f6:c8:da:a0:fd:ee:c3:22:f6:b0:ec:5b:a6:c0:
f4:b0:4e:e4:d1:28:13:48:84:ba:37:c4:5e:a3:86:00:89:54:
39:22:5c:a1:72:10:1f:c4:66:a8:1c:84:30:4c:f5:9b:a3:fe:
d7:d4:8e:50:bd:c5:78:16:bb:b0:5e:f8:05:4d:f3:a2:4a:bc:
1e:79:a0:3b:01:57:f9:bf:7c:09:5d:fd:f8:42:7d:9b:a8:ab:
d5:b8:2a:13:c0:65:6d:14:cb:72:88:b6:bd:6d:bd:b1:9c:44:
38:03:56:91:69:d2:a7:a4:05:bc:98:cc:e1:2d:62:5b:08:57:
99:14:3e:a0:7d:66:e7:f5:ed:27:02:8a:06:50:d4:6f:21:71:
52:2c:44:e4:e4:89:31:fb:80:ad:d8:95:ec:5b:6d:c9:b9:dc:
b5:54:ce:0a:34:f5:1d:01:6d:d7:83:66:3d:6f:53:e4:55:da:
ab:3e:4d:07:aa:6a:33:5e:20:97:26:e1:35:33:29:da:da:e3:
e8:d3:22:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:53:22 2024 by rpki-client on console-fra.rpki-client.org