Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/7C381A5E1A1B11EC9638A92FD8A014CE.roa
File: 7C381A5E1A1B11EC9638A92FD8A014CE.roa (raw, json)
Hash identifier: 8Ju/cLcaf4mtiTdpIKc66LzEmQlHp2Jv+UTzMDmzCaQ=
Subject key identifier: 56:29:96:76:F3:09:6E:FC:CE:25:30:61:4B:FB:F3:27:2A:EE:1E:27
Certificate issuer: /CN=F36F151EAF/serialNumber=EA95913551827BA6D653BA86AE93A4EE1F58CD5D
Certificate serial: 02
Authority key identifier: EA:95:91:35:51:82:7B:A6:D6:53:BA:86:AE:93:A4:EE:1F:58:CD:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/7C381A5E1A1B11EC9638A92FD8A014CE.roa
Signing time: Mon 20 Sep 2021 14:03:09 +0000
ROA not before: Mon 20 Sep 2021 14:03:05 +0000
ROA not after: Mon 01 Sep 2031 14:03:05 +0000
asID: 328585
IP address blocks: 102.23.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.mft
rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F151EAF/serialNumber=EA95913551827BA6D653BA86AE93A4EE1F58CD5D
Validity
Not Before: Sep 20 14:03:05 2021 GMT
Not After : Sep 1 14:03:05 2031 GMT
Subject: CN=6148949d-702c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:98:61:20:62:ec:f0:9e:6f:46:df:21:84:76:
dc:77:1d:b7:91:42:b7:87:da:8d:8f:a2:3d:03:42:
b7:9b:2a:cd:9e:b8:fa:28:55:ca:20:5c:0a:3e:ed:
43:f1:13:b9:ea:2f:7e:b4:44:6c:8e:5a:7a:99:dd:
38:21:15:94:b6:cb:a4:79:ce:15:a9:eb:41:e6:1a:
68:83:a2:d8:99:47:df:a4:0a:e7:2d:0c:47:84:5b:
48:02:03:26:67:64:83:b2:2e:84:a3:59:1e:4f:e0:
a5:3c:94:72:bc:4e:0f:46:22:1d:d8:ce:df:c9:19:
3a:f4:ce:02:4b:71:ba:dc:95:07:3e:d3:d4:60:93:
01:a4:0c:2d:e2:05:8e:c0:5d:7b:43:a5:8f:81:b0:
11:07:68:80:a7:12:f1:a5:14:ea:78:ae:71:01:f0:
07:fb:e8:8d:99:85:dd:30:ee:ef:e3:70:4e:15:26:
16:14:1e:37:e8:d8:9e:26:af:6d:d7:1d:03:d3:bd:
1d:6f:bb:82:29:43:7f:86:3b:84:ba:47:94:d0:38:
60:cc:f9:7c:f1:62:b6:e6:7b:95:51:6a:e4:c6:8f:
8b:a2:c7:61:e9:63:5e:e6:55:00:4c:19:68:47:1e:
59:0f:ec:a7:ec:1c:53:ca:aa:b8:ef:7a:d7:0d:cb:
94:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:29:96:76:F3:09:6E:FC:CE:25:30:61:4B:FB:F3:27:2A:EE:1E:27
X509v3 Authority Key Identifier:
keyid:EA:95:91:35:51:82:7B:A6:D6:53:BA:86:AE:93:A4:EE:1F:58:CD:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/7C381A5E1A1B11EC9638A92FD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.23.164.0/24
Signature Algorithm: sha256WithRSAEncryption
93:7d:90:3f:90:e1:8b:ed:32:b6:c8:ea:3d:ac:dd:de:08:6c:
1a:88:8f:05:b7:12:7c:86:6b:e4:8e:8c:d0:ee:b9:0d:51:8a:
5d:69:e2:03:d0:cf:2a:e6:b3:56:ea:04:68:46:9d:5c:61:93:
cf:5f:95:8b:7d:3c:5b:1a:5a:6f:90:1d:e1:e7:91:0e:d6:2f:
d4:d0:32:e6:b1:7d:e0:59:c8:a8:3d:1b:a9:30:16:e5:01:bf:
9e:95:4b:b4:92:41:0b:8d:31:5b:63:5e:5a:fa:2f:4a:da:74:
0e:40:73:da:20:46:4c:9d:81:58:29:43:e5:13:80:b5:d0:cd:
40:c2:cd:ea:c5:c7:e5:69:31:88:e1:9c:d4:79:b0:75:95:0a:
1a:fa:19:60:63:54:18:64:1a:d8:4d:0f:fa:af:a7:26:83:f6:
d1:62:c7:6c:f7:c3:57:87:a3:25:9a:b3:ad:4b:f8:03:14:bc:
e3:8d:cb:5d:28:b6:3d:77:db:41:bd:47:af:26:9c:ed:56:c9:
fd:e1:8c:2f:e6:30:98:b9:54:d8:a9:76:10:18:8f:e0:63:51:
fb:5d:11:cf:68:c8:24:37:b8:74:62:13:59:3b:3b:0e:cf:dc:
ab:f2:b5:6a:e2:f7:2f:64:63:ab:4e:c1:7f:9f:08:84:92:51:
46:f2:f1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:12:16 2024 by rpki-client on console-fra.rpki-client.org