Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E7EF0E01E5111EF8DDDF74B7DDC24C2.roa
File: 5E7EF0E01E5111EF8DDDF74B7DDC24C2.roa (raw, json)
Hash identifier: pP87pmDOYVWunyfcKFD/B3kED9ka4aPloYErwbomwA8=
Subject key identifier: D3:CB:4C:FA:2B:D6:2C:5D:F4:3F:BB:FC:2F:E3:14:4C:91:BF:59:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: BBEA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E7EF0E01E5111EF8DDDF74B7DDC24C2.roa
Signing time: Thu 30 May 2024 06:53:50 +0000
ROA not before: Thu 30 May 2024 06:53:47 +0000
ROA not after: Mon 01 Jul 2024 06:53:47 +0000
asID: 49505
IP address blocks: 154.212.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 28 Jun 2024 06:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48106 (0xbbea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 06:53:47 2024 GMT
Not After : Jul 1 06:53:47 2024 GMT
Subject: CN=6658227e-b474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:5a:ea:21:fa:01:df:19:32:bc:04:d6:23:
a4:e2:d4:3d:0e:60:44:a7:ff:1b:a2:8d:8b:ac:1d:
12:5a:f5:28:04:c7:d6:72:59:37:06:54:f5:26:29:
29:8a:c6:ae:b4:8f:5d:f7:74:d8:bb:53:5a:61:51:
93:69:7d:54:7d:80:91:f0:f3:18:d4:45:b7:a1:9c:
4b:0f:2c:3d:88:64:ac:ac:b1:38:72:5f:86:eb:76:
9a:41:df:c2:5c:94:f9:dc:18:1d:e8:0e:ae:c1:b7:
75:aa:a7:5c:d5:b3:58:6f:51:82:7f:1c:92:95:6d:
0a:c2:6d:0d:e0:15:d1:c0:50:95:15:aa:81:da:33:
14:8c:ac:c5:9e:dd:b3:6a:a6:b2:3d:1c:fd:f7:7f:
00:3d:93:6d:07:4a:6a:36:c9:61:90:7e:04:77:1f:
08:a6:72:03:cc:94:71:64:90:12:4d:39:6f:e8:2b:
d8:fb:99:e9:86:09:33:28:5e:22:9d:60:b6:83:b8:
9e:c7:b4:3c:dc:92:16:39:0f:ee:2c:68:fb:d0:16:
83:3f:1d:b9:2c:38:22:e9:ff:be:d8:aa:05:48:c4:
d6:4f:3a:52:ad:71:79:80:96:5a:77:e7:9e:bd:a0:
ff:a6:e3:c9:2c:e1:a0:2c:bc:5e:87:b0:d8:1d:46:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CB:4C:FA:2B:D6:2C:5D:F4:3F:BB:FC:2F:E3:14:4C:91:BF:59:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E7EF0E01E5111EF8DDDF74B7DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.28.0/22
Signature Algorithm: sha256WithRSAEncryption
09:2c:8a:bc:d2:58:97:26:fb:7c:e0:f5:b2:4d:64:5c:2f:81:
9e:82:df:47:21:89:ff:98:90:6f:2a:52:76:36:5b:a9:32:01:
5f:7c:0b:2f:19:5f:cd:9c:6a:a9:f3:4f:36:b9:d0:cc:d1:a5:
2f:f0:62:91:18:d3:7a:6c:a1:91:28:67:6d:ad:6e:ee:7e:21:
8b:f5:04:61:09:af:c1:70:f2:1d:16:53:73:78:c6:c5:8c:32:
69:49:38:4e:bb:e6:61:30:b5:82:d2:fb:03:fc:eb:c0:42:3c:
6e:e2:ae:3d:5f:76:bb:c1:6c:b1:d7:94:68:d1:80:7a:ef:12:
a3:ae:03:60:94:e1:1c:32:bd:69:a8:43:58:cb:1a:67:dc:0a:
8d:45:4a:67:07:36:19:27:c8:fa:f5:0b:43:7d:84:10:e5:31:
77:3b:96:fb:15:70:c7:42:44:d6:86:9d:6e:36:25:aa:5a:81:
d9:f8:65:23:7e:ca:18:3c:47:e3:c4:87:cf:89:00:92:f3:ca:
28:1b:28:bc:e4:e3:88:a6:ce:02:03:30:31:ef:88:aa:8c:90:
70:dd:0b:66:c7:1b:5d:51:00:15:3e:47:33:1e:ee:f8:23:c2:
f4:6a:31:a1:89:4e:2d:7e:1a:7f:4d:b7:6e:72:2c:29:c4:7a:
65:6a:c1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 12:55:44 2024 by rpki-client on console-fra.rpki-client.org