Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EEA2C58A2C511EE8FEB1726D25BE465.roa
File: 7EEA2C58A2C511EE8FEB1726D25BE465.roa (raw, json)
Hash identifier: /n0JetDfMG935VFyiOV8lwT8ZG/Mw4Oqt8bhliX6gwc=
Subject key identifier: F3:D5:DE:8C:68:CB:4D:88:73:AB:BF:A8:33:33:90:BF:C8:E8:6D:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 668F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EEA2C58A2C511EE8FEB1726D25BE465.roa
Signing time: Mon 25 Dec 2023 01:32:42 +0000
ROA not before: Mon 25 Dec 2023 01:32:38 +0000
ROA not after: Tue 07 Jan 2025 01:32:38 +0000
asID: 139057
IP address blocks: 154.85.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26255 (0x668f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 01:32:38 2023 GMT
Not After : Jan 7 01:32:38 2025 GMT
Subject: CN=6588dbba-cad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bc:4d:45:09:ff:38:b4:01:03:5a:86:58:ea:
4f:f8:6e:89:79:f4:61:a3:a1:1b:b6:e7:48:82:f2:
ed:b6:61:d9:af:7a:77:cb:f0:78:8f:3c:53:0a:f9:
e6:c6:0d:f3:17:d9:df:74:af:2b:71:34:7d:ef:ef:
fe:c2:9f:33:29:ba:7c:8b:c6:42:38:7f:e3:44:d2:
eb:d7:02:e8:2b:fb:2c:10:14:d7:cc:77:28:55:33:
91:44:c1:a5:41:12:15:63:90:73:56:20:aa:0a:9a:
06:d4:7d:39:ac:a7:56:e4:63:01:ce:5e:76:a2:b4:
74:5e:2f:66:9f:4d:be:d6:f9:55:ee:5c:a3:d5:cf:
65:ff:5a:dc:fa:84:97:1a:7a:26:92:66:4f:20:79:
d2:74:59:45:5c:bd:5a:e5:01:92:4b:e1:66:f0:89:
c8:5e:89:6c:7b:5b:c4:e1:30:01:cd:ba:0d:b5:67:
bd:2a:a4:b1:2f:12:9a:12:e7:32:10:13:a4:26:12:
79:c8:28:73:f8:07:71:87:52:e7:13:8f:6a:23:f4:
f2:97:69:3c:9a:1a:e8:d5:a0:a8:4e:4a:0d:b7:34:
3d:a4:3a:28:26:49:12:ed:74:62:a6:91:ca:69:4a:
6d:dc:c8:5c:83:01:2e:a7:ca:6b:f0:cc:22:d9:5a:
95:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D5:DE:8C:68:CB:4D:88:73:AB:BF:A8:33:33:90:BF:C8:E8:6D:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EEA2C58A2C511EE8FEB1726D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.70.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:b5:40:d2:8c:e6:a3:a7:6d:48:6b:7d:e0:15:83:1c:84:cc:
27:8b:27:c8:18:30:4c:62:40:68:8b:d0:a8:26:7f:96:19:b1:
04:0a:e8:79:95:af:fd:56:bc:9a:f8:4c:c7:bb:f1:93:14:f7:
e3:2e:3a:1a:d3:de:32:d8:a3:bf:87:53:0a:40:fd:46:e5:ee:
9f:ca:0d:f2:57:c2:d9:eb:3b:c0:fc:c1:94:1e:ff:b7:b2:d4:
74:6c:66:8c:c6:bf:fa:24:84:1b:6b:ca:24:47:5f:62:fc:b7:
fa:e6:b6:2b:3f:6a:d9:30:5e:e2:7b:56:d5:17:2e:f6:a1:30:
b7:d4:2d:bf:43:52:30:66:fe:1c:4e:46:ab:34:94:8b:34:8d:
0e:bd:25:48:6d:5a:a6:58:0e:85:d0:22:49:5c:3c:31:5a:83:
a5:29:2c:b5:2c:7d:7f:c8:b6:0e:cf:d8:e9:6e:92:00:b6:8b:
78:51:29:00:4e:4a:68:69:ef:4c:36:86:83:8a:61:2b:f8:dc:
4a:40:db:46:e3:45:23:95:8e:35:bb:a1:f0:8a:76:7f:f2:3e:
f9:30:63:f5:d7:80:f2:80:94:9a:2a:0e:33:ae:04:b0:c2:6a:
17:d7:06:d3:8f:dc:0d:89:56:9b:0b:46:62:00:af:e4:e1:30:
01:b9:93:78
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICZo8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzEyMjUwMTMyMzhaFw0yNTAxMDcwMTMyMzhaMBgxFjAU
BgNVBAMTDTY1ODhkYmJhLWNhZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQChvE1FCf84tAEDWoZY6k/4bol59GGjoRu250iC8u22YdmvenfL8HiPPFMK
+ebGDfMX2d90rytxNH3v7/7CnzMpunyLxkI4f+NE0uvXAugr+ywQFNfMdyhVM5FE
waVBEhVjkHNWIKoKmgbUfTmsp1bkYwHOXnaitHReL2afTb7W+VXuXKPVz2X/Wtz6
hJcaeiaSZk8gedJ0WUVcvVrlAZJL4WbwicheiWx7W8ThMAHNug21Z70qpLEvEpoS
5zIQE6QmEnnIKHP4B3GHUucTj2oj9PKXaTyaGujVoKhOSg23ND2kOigmSRLtdGKm
kcppSm3cyFyDAS6nymvwzCLZWpW1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU89Xe
jGjLTYhzq7+oMzOQv8jobWkwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzdFRUEyQzU4QTJDNTExRUU4RkVCMTcyNkQyNUJFNDY1LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaVUYwDQYJKoZIhvcNAQEL
BQADggEBALi1QNKM5qOnbUhrfeAVgxyEzCeLJ8gYMExiQGiL0Kgmf5YZsQQK6HmV
r/1WvJr4TMe78ZMU9+MuOhrT3jLYo7+HUwpA/Ubl7p/KDfJXwtnrO8D8wZQe/7ey
1HRsZozGv/okhBtryiRHX2L8t/rmtis/atkwXuJ7VtUXLvahMLfULb9DUjBm/hxO
Rqs0lIs0jQ69JUhtWqZYDoXQIklcPDFag6UpLLUsfX/Itg7P2OlukgC2i3hRKQBO
Smhp70w2hoOKYSv43EpA20bjRSOVjjW7ofCKdn/yPvkwY/XXgPKAlJoqDjOuBLDC
ahfXBtOP3A2JVpsLRmIAr+ThMAG5k3g=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:13 2024 by rpki-client on console-ams.rpki-client.org