Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E208C0E1E7F11EFA281B0DC7CDC24C2.roa
File: 3E208C0E1E7F11EFA281B0DC7CDC24C2.roa (raw, json)
Hash identifier: isBW2pibE68zvuKMMHtrn2zAbAAhU2r4A33auBb0p+8=
Subject key identifier: 4C:75:FB:BC:27:12:07:11:7D:5C:7A:F0:2C:62:03:DD:CF:05:E3:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: BC2A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E208C0E1E7F11EFA281B0DC7CDC24C2.roa
Signing time: Thu 30 May 2024 12:22:12 +0000
ROA not before: Thu 30 May 2024 12:22:09 +0000
ROA not after: Thu 05 Sep 2024 12:22:09 +0000
asID: 26617
IP address blocks: 154.202.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 28 Jun 2024 06:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48170 (0xbc2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 12:22:09 2024 GMT
Not After : Sep 5 12:22:09 2024 GMT
Subject: CN=66586f74-fb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:34:30:92:8d:8a:40:ca:7c:19:ce:0b:e2:
4e:cb:02:12:eb:15:06:26:3a:d5:12:ba:6b:6d:99:
ac:01:6d:4f:cb:b8:49:03:23:78:8d:94:19:58:cc:
57:d0:ab:a7:a3:63:16:8a:98:d0:40:25:a6:45:23:
28:e5:83:47:05:36:21:d8:00:84:1d:d0:84:23:99:
e1:73:09:db:3b:1e:9f:92:6c:a4:40:6e:33:b9:91:
bc:9e:fe:35:21:7c:95:93:dd:b3:ac:98:b1:8a:81:
24:06:5b:18:24:ba:34:50:a9:a7:bd:61:0c:b5:8c:
4c:cc:fa:58:35:46:6b:da:c3:81:4c:e4:04:87:1d:
34:53:2b:f6:38:bc:8d:2e:72:74:a1:38:10:e6:2e:
10:38:9c:3f:0b:84:91:c4:1a:f7:66:2c:8f:8c:32:
61:82:d8:21:5b:48:5c:27:99:03:a3:a6:1d:b1:43:
11:53:f1:38:84:ce:32:9f:b6:5a:96:6a:ce:63:43:
a9:8c:c9:15:70:fb:f4:2b:5f:e1:a3:43:ed:de:d1:
6e:59:3a:9e:38:34:ff:7d:27:fe:d5:d5:63:81:d3:
31:af:c4:2b:b7:4f:66:9d:e5:66:89:4a:b1:41:51:
7b:63:5c:1e:b1:65:b8:d5:4d:67:ed:cd:9e:c9:39:
7a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:75:FB:BC:27:12:07:11:7D:5C:7A:F0:2C:62:03:DD:CF:05:E3:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E208C0E1E7F11EFA281B0DC7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.7.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:7e:b4:10:93:22:b7:db:a4:24:be:c1:03:f7:6d:d2:47:98:
ae:90:38:4e:77:a5:38:4b:49:9b:9f:81:f5:de:5e:96:36:ac:
9f:30:02:e5:2f:88:38:33:f5:de:bb:5d:88:f0:cc:84:6b:f8:
63:16:01:d1:3b:b8:c2:4f:f7:30:c7:e6:d8:68:09:48:0b:6f:
08:89:1d:c2:cd:b1:e1:70:a8:b3:37:d1:a1:b8:b5:50:76:84:
a6:ff:92:cd:23:cb:9d:7d:12:5a:a8:54:dc:c3:38:0f:2c:87:
ce:fb:78:26:b4:60:75:38:c7:b9:27:e6:44:31:cf:7f:38:f1:
2a:23:33:00:95:ed:6e:2e:23:47:fe:cb:3e:3c:f4:e0:cf:d8:
78:ad:8c:9f:14:da:5a:3a:cb:54:aa:6b:56:21:4c:40:4a:a3:
8a:ff:72:7c:c5:97:3d:5b:2c:db:36:81:d0:e5:7f:a2:b5:20:
ae:89:3d:03:fc:18:18:5b:ab:bc:4d:64:ea:4f:47:5e:21:af:
79:e0:2a:10:9c:4c:76:f4:c2:9d:78:a2:75:97:44:e9:2c:64:
1a:46:07:29:57:65:08:f2:72:13:84:9b:f3:20:51:51:28:39:
dc:6b:2e:66:54:32:27:4e:7c:ea:0d:62:c9:c3:4a:25:a8:10:
b1:02:bc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 11:43:34 2024 by rpki-client on console-ams.rpki-client.org