Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E1723BAC5C211EE8C226D70775412E6.roa
File: 2E1723BAC5C211EE8C226D70775412E6.roa (raw, json)
Hash identifier: v9EJKnBMVj7Q10uEd84CEYNk5SuSUWsRGjrVbwNwt3g=
Subject key identifier: AC:3D:81:13:96:4E:FE:E4:80:BE:AF:C0:59:4E:9D:DC:B7:96:81:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 86EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E1723BAC5C211EE8C226D70775412E6.roa
Signing time: Wed 07 Feb 2024 14:07:08 +0000
ROA not before: Wed 07 Feb 2024 14:07:05 +0000
ROA not after: Wed 31 Jul 2024 14:07:05 +0000
asID: 53356
IP address blocks: 154.214.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34542 (0x86ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 7 14:07:05 2024 GMT
Not After : Jul 31 14:07:05 2024 GMT
Subject: CN=65c38e8c-3dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:dc:93:9e:a7:c0:ce:cb:60:39:04:47:2a:
76:74:b0:2d:f2:10:ef:97:bd:15:cf:36:7c:6a:b7:
6c:37:4e:c7:25:c7:03:0f:19:95:df:a8:6f:84:80:
a7:05:8f:6d:99:d2:e9:c9:ba:e7:4a:eb:54:e2:f2:
e2:62:f8:79:a1:d2:e6:d6:2f:77:f8:53:f3:d8:5a:
b8:79:6c:2e:5c:06:77:50:e0:d6:1b:88:99:d0:57:
d5:ee:d8:ef:81:18:c1:60:2d:bd:0b:e8:44:db:2c:
61:5e:00:d9:fa:72:bb:33:56:fc:cc:be:28:00:4e:
d2:d5:13:d8:74:2c:85:91:1e:cf:c6:8d:61:16:fe:
5a:f4:2a:34:20:ca:8d:1b:90:78:aa:d1:5b:52:b3:
60:4d:b8:94:52:bf:9a:be:d2:27:60:a6:8a:cc:9f:
65:e1:80:d2:57:a3:76:1d:8e:70:03:a8:0c:2f:9b:
c0:42:b7:54:61:57:bb:c4:a8:a8:da:e1:bf:a0:46:
f4:a4:be:da:4b:c5:1f:b4:da:37:ad:0e:09:c0:d0:
2d:15:3b:6e:fc:07:c2:99:bb:6b:54:b3:87:ef:64:
39:91:f7:94:65:04:8e:6e:6f:13:91:ef:2e:2d:f9:
ed:c1:1c:a3:5b:e3:d5:62:7e:c0:ce:6a:4d:de:c6:
93:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3D:81:13:96:4E:FE:E4:80:BE:AF:C0:59:4E:9D:DC:B7:96:81:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E1723BAC5C211EE8C226D70775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.244.0/23
Signature Algorithm: sha256WithRSAEncryption
86:9c:9f:3d:02:e5:97:4f:82:73:bf:a9:9c:a4:d7:e7:75:72:
59:dc:0b:93:06:0f:3b:db:65:3f:ed:f8:40:74:6c:da:44:bd:
5a:61:d8:41:9b:6c:15:5e:22:b6:c9:02:99:52:43:fc:25:90:
dc:aa:ab:bb:7e:53:b8:1e:ea:4f:e4:3a:fd:cc:24:5d:87:1c:
8a:e7:93:3e:b5:45:0c:4a:49:cf:96:64:a3:66:56:4d:41:2d:
86:fe:0c:e6:6a:6e:9a:f1:39:6c:f0:35:74:17:31:63:fd:4e:
8e:41:91:15:28:cf:03:92:d0:69:47:20:c4:55:de:d7:a2:c6:
c8:a9:7f:f5:2d:d8:86:4e:94:e3:21:30:64:fe:fa:63:83:b5:
33:56:05:ab:db:0b:1e:bb:e7:2e:7b:7d:09:1d:59:6a:12:e2:
0b:10:d4:5f:88:90:6b:e7:92:96:65:80:99:a2:93:82:d6:76:
bb:eb:5b:01:0b:15:5d:cc:08:8d:8a:bb:d5:db:70:6d:f0:09:
14:3f:bd:6d:d1:81:09:6f:23:a5:44:92:ee:7c:c0:cd:90:d8:
7a:21:8c:40:6d:bb:ed:8f:e1:f2:0a:b7:61:b5:4a:1e:68:4d:
89:43:36:30:ea:5f:4a:7f:2b:1e:f3:2d:ff:db:20:38:a2:22:
ac:b8:a0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:19 2024 by rpki-client on console-fra.rpki-client.org