Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2FA8DC2B34711EE99C61274775412E6.roa
File: E2FA8DC2B34711EE99C61274775412E6.roa (raw, json)
Hash identifier: FDlMSG5Dk+oZR/y7iM1HLtxTA204B7lS1t47O8FY7Rg=
Subject key identifier: E7:BA:A1:1C:85:99:20:DF:96:60:BF:37:DF:10:C8:02:54:F7:DC:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 7534
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2FA8DC2B34711EE99C61274775412E6.roa
Signing time: Mon 15 Jan 2024 01:46:23 +0000
ROA not before: Mon 15 Jan 2024 01:46:19 +0000
ROA not after: Fri 13 Dec 2024 01:46:19 +0000
asID: 8796
IP address blocks: 154.205.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30004 (0x7534)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 15 01:46:19 2024 GMT
Not After : Dec 13 01:46:19 2024 GMT
Subject: CN=65a48e6f-7970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:85:02:73:97:9b:00:da:32:7c:6e:7e:8c:91:
9b:3f:2d:89:58:da:05:6c:f9:de:96:30:73:63:4a:
dd:86:d6:67:ff:2e:fd:2c:6e:5c:25:06:6f:f9:4a:
f0:f1:82:48:cf:f2:7b:f2:b7:24:c2:04:59:d1:89:
c2:9c:61:5a:a9:1a:38:a5:ae:cc:e0:3a:b9:b0:93:
03:cf:d7:58:0d:82:42:72:16:64:82:66:07:72:6d:
b7:48:59:11:a4:47:fc:28:ef:23:ef:a7:a0:68:6c:
5b:b2:80:af:9e:e9:21:26:ad:b8:4d:e6:74:6c:90:
2d:42:5d:d3:59:54:6b:73:19:b4:ff:0e:a0:5d:5f:
3f:f6:a7:3f:e8:7e:a2:3f:21:2f:77:df:12:ac:4c:
a0:1d:39:07:c8:e7:b1:6c:f9:71:ce:04:78:e4:42:
3c:ea:a5:40:44:ff:2b:a5:70:02:4b:7f:b2:74:3f:
a1:cd:40:99:47:fa:08:30:31:ab:99:82:b6:3b:fc:
15:a6:e5:07:7b:f9:32:bd:af:78:27:97:b0:a8:fc:
e3:51:3e:3f:94:aa:2f:18:d9:bc:f4:1c:c1:18:93:
23:f1:84:36:7a:e1:89:ea:a0:7c:16:e4:09:b5:51:
6e:c4:ed:26:de:c1:20:15:75:7c:a1:62:51:49:92:
84:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BA:A1:1C:85:99:20:DF:96:60:BF:37:DF:10:C8:02:54:F7:DC:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2FA8DC2B34711EE99C61274775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.210.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:26:f2:bd:87:70:fa:3c:97:05:28:97:44:1a:d5:d2:4a:c8:
37:c8:57:54:22:39:07:a9:23:f2:d5:07:a2:a8:ff:44:c1:b8:
aa:5b:4e:02:69:bb:cb:c6:5a:22:7d:e9:8a:ad:ef:95:2c:5b:
0e:34:0d:99:45:80:b3:86:bd:6b:ce:e7:41:06:c0:f9:59:66:
6a:1b:5b:a4:9c:c4:b2:1d:c6:9d:63:3a:8b:66:cb:dd:e0:18:
db:d9:8a:d3:8a:be:94:24:01:d7:9c:21:38:a5:3f:9b:35:71:
bb:b7:50:f1:84:ff:73:db:c7:b0:0f:bf:11:5e:68:bb:e0:0d:
1b:1b:20:91:3d:80:4c:31:88:35:11:af:f1:b8:f8:87:16:c6:
fa:37:c9:3c:d6:03:32:77:eb:dd:c2:a8:ef:cb:6a:73:d8:dc:
c3:cf:57:27:9f:dd:6c:bb:08:12:d9:59:38:89:54:61:27:9e:
11:20:81:d1:f8:1c:6c:6f:7d:44:7d:e8:8a:c7:c4:8e:c5:15:
53:b9:23:4c:9c:ec:5a:19:45:ea:ba:66:a2:2d:43:99:31:8b:
69:f3:52:87:ec:eb:51:e4:7b:03:77:06:1f:e6:ff:e6:f2:19:
e8:dc:e5:4e:a8:50:e4:e4:48:4c:8c:fc:09:71:49:3b:95:2f:
55:9a:02:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:22 2024 by rpki-client on console-ams.rpki-client.org