Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/FCBD1C3C1A1C11EC9910CB31D8A014CE.roa
File: FCBD1C3C1A1C11EC9910CB31D8A014CE.roa (raw, json)
Hash identifier: bLcjaegOBZo8jdxeDcM/ylZYrU7ynfrKHYL+3rOGWoU=
Subject key identifier: E3:CE:C4:8A:9F:E3:E2:ED:A5:34:1D:94:E1:7A:AC:12:A3:66:9A:01
Certificate issuer: /CN=F36F151EAF/serialNumber=EA95913551827BA6D653BA86AE93A4EE1F58CD5D
Certificate serial: 04
Authority key identifier: EA:95:91:35:51:82:7B:A6:D6:53:BA:86:AE:93:A4:EE:1F:58:CD:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/FCBD1C3C1A1C11EC9910CB31D8A014CE.roa
Signing time: Mon 20 Sep 2021 14:13:54 +0000
ROA not before: Mon 20 Sep 2021 14:13:50 +0000
ROA not after: Mon 01 Sep 2031 14:13:50 +0000
asID: 328585
IP address blocks: 102.23.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.mft
rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F151EAF/serialNumber=EA95913551827BA6D653BA86AE93A4EE1F58CD5D
Validity
Not Before: Sep 20 14:13:50 2021 GMT
Not After : Sep 1 14:13:50 2031 GMT
Subject: CN=61489722-28c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c6:95:d6:2d:06:8d:07:72:69:29:3a:d4:f9:
04:5e:e8:50:ff:88:f7:db:76:10:4f:3b:4b:b0:57:
66:fe:5e:fd:dc:d1:5d:e0:04:b9:da:1f:fd:90:98:
63:d1:d2:c7:cf:fc:6b:99:6c:67:c6:96:34:f7:fc:
6c:92:0c:40:eb:ce:d5:57:37:01:4e:ef:69:56:76:
f2:1f:79:49:f9:a6:96:e3:4a:f4:e0:2d:27:4b:fa:
6f:19:86:1c:5b:ea:be:b5:13:9d:0e:2c:a1:fa:24:
b1:7b:31:50:c4:b5:93:1f:b1:33:78:cb:07:0b:d1:
47:42:b1:50:a1:bd:8b:e8:b4:42:c8:2b:59:9e:a9:
d2:2b:09:7a:0a:2c:d4:ef:cf:83:c8:66:12:79:e3:
2f:be:e9:a7:7a:79:91:93:96:e2:34:f7:2f:ba:ff:
ca:fc:92:2e:62:38:77:fc:1d:b0:3c:c4:d9:e7:07:
cc:4a:83:60:c4:5f:33:86:3e:a5:26:4b:71:97:f0:
5d:5d:09:cd:26:77:e6:b5:e5:14:52:e7:02:6e:d3:
43:dc:7f:d3:7f:1f:f4:44:63:97:d6:53:74:4d:19:
d0:50:b5:48:36:d0:53:ee:96:67:67:ea:27:6f:e9:
06:7f:a5:7c:af:97:e2:1d:02:58:e8:20:6a:a3:a1:
da:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CE:C4:8A:9F:E3:E2:ED:A5:34:1D:94:E1:7A:AC:12:A3:66:9A:01
X509v3 Authority Key Identifier:
keyid:EA:95:91:35:51:82:7B:A6:D6:53:BA:86:AE:93:A4:EE:1F:58:CD:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/FCBD1C3C1A1C11EC9910CB31D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.23.165.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:b2:45:83:41:cc:2f:5a:9e:c8:20:22:50:c5:07:b9:66:3e:
b0:16:0d:3a:8b:c3:4f:1d:f5:ad:90:2a:4b:96:f9:4e:20:74:
24:76:7b:9e:75:23:da:66:d6:d2:41:21:9d:fc:99:6c:80:cb:
ef:e5:63:56:27:4d:a1:90:a3:f2:16:d8:2c:f4:78:9b:34:d3:
e4:b9:4f:3e:9f:3f:e6:80:00:6c:44:38:93:5b:04:af:06:be:
93:b3:7a:e4:1b:36:39:8a:65:58:3d:7e:fc:1b:06:4c:5b:ac:
74:6f:fa:fa:2e:2a:e6:90:47:6c:6f:11:da:d6:a1:e5:cb:c4:
f3:9a:1a:96:ce:2d:50:0d:79:80:98:ad:d7:9b:b8:9a:62:a0:
64:bc:8f:5a:c5:eb:c0:fd:30:a3:de:33:c0:64:e3:91:14:9e:
85:c8:86:55:ce:ea:99:0f:15:2b:03:b5:f2:6b:05:88:66:3d:
67:69:14:95:23:40:ef:69:0a:20:21:c4:c3:2a:87:e4:71:63:
96:bf:9a:3a:77:3a:c2:11:c8:5a:2d:cb:73:ca:6d:6d:12:58:
f2:30:ee:99:3b:e9:04:90:04:92:9c:f3:f3:4c:1c:79:6c:4e:
4d:c9:8d:8f:f0:3a:ab:18:99:d1:b7:85:70:b4:a0:00:cc:b3:
84:5c:dd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:12:16 2024 by rpki-client on console-fra.rpki-client.org