Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3C8C3CEFB9311EE85172850017001B1.roa
File: E3C8C3CEFB9311EE85172850017001B1.roa (raw, json)
Hash identifier: /gWi+HLrE84V1sRNMBCQJLRFleQI7DVtJl4nnx0X6uA=
Subject key identifier: 2E:8A:3C:C9:8A:E4:6F:8F:E3:37:E3:AC:7D:8F:66:01:03:44:B6:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ACFB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3C8C3CEFB9311EE85172850017001B1.roa
Signing time: Tue 16 Apr 2024 01:51:50 +0000
ROA not before: Tue 16 Apr 2024 01:51:46 +0000
ROA not after: Thu 09 May 2024 01:51:46 +0000
asID: 141883
IP address blocks: 154.214.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44283 (0xacfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 01:51:46 2024 GMT
Not After : May 9 01:51:46 2024 GMT
Subject: CN=661dd9b5-da7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:05:a8:6f:45:d6:e6:fc:eb:1a:3d:e2:ed:77:
f1:1e:78:95:5c:76:bf:22:21:a7:ce:a8:ae:b0:73:
01:5c:61:47:44:65:dc:05:36:e2:c1:11:06:69:7d:
06:ce:8c:43:0e:81:9d:f6:04:bd:fd:f4:95:e1:b6:
e5:79:93:d7:ec:33:2a:73:ac:1d:cd:be:41:11:ac:
82:a7:61:15:e3:f3:70:80:04:bf:f0:6f:a5:bd:cf:
7e:ad:74:5d:b2:48:b1:84:46:93:e4:61:95:ac:21:
6b:91:b7:ae:1f:16:b4:66:fe:76:30:7b:62:e4:bf:
b2:11:b4:9f:41:19:a2:9c:0f:eb:18:6b:fa:50:d1:
12:ee:80:ba:29:3a:7e:53:c0:e4:64:f8:37:03:33:
76:f1:93:ff:bc:7a:63:94:d4:bc:4d:9b:03:69:21:
44:cd:a0:49:b8:f0:46:0f:81:e7:fb:3c:f3:b0:5c:
e1:6a:34:1f:52:a3:e4:9d:26:bb:e7:50:77:2f:64:
49:c2:08:90:90:cd:15:fc:00:c0:60:60:6b:96:26:
8d:0f:43:e3:46:da:64:b9:2f:5c:d1:c6:94:a7:92:
4d:88:c9:53:a0:24:0e:22:45:f9:a9:fc:ea:83:42:
8e:d0:a1:d1:7d:fe:a7:66:b9:fa:5c:6f:56:de:7e:
91:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8A:3C:C9:8A:E4:6F:8F:E3:37:E3:AC:7D:8F:66:01:03:44:B6:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3C8C3CEFB9311EE85172850017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.32.0/19
Signature Algorithm: sha256WithRSAEncryption
2b:33:df:23:2a:d4:86:94:6d:ef:6b:13:3d:9b:0b:d4:b4:42:
9e:6c:82:fa:b7:70:ae:24:eb:73:49:19:ce:fe:2c:f2:16:95:
0c:9c:23:57:b3:7e:82:c9:ff:bc:13:7c:a0:73:7e:60:53:08:
ec:ef:0e:eb:12:d0:36:07:2e:b8:6e:06:d1:da:e7:3c:30:96:
8a:76:fa:65:93:27:be:45:b2:7f:4e:93:7e:ca:f3:b3:00:8b:
76:9d:58:b7:fa:47:03:17:af:4e:0d:db:1b:75:d4:45:cd:72:
ab:74:ec:89:15:37:c2:4f:5b:69:21:ee:97:96:41:f3:7b:da:
1e:78:10:4c:f6:fb:52:cd:95:2b:cf:6a:29:39:d2:c8:13:c2:
e0:4d:12:9a:e7:3e:8e:8e:25:f0:da:49:98:ca:71:d1:00:f2:
3f:f9:e6:03:9a:13:16:4f:e7:6d:26:fd:92:db:2f:03:95:f1:
4a:79:86:5c:a9:1e:e1:34:63:ca:6b:21:10:9c:59:84:b6:e3:
7b:4b:c1:4f:ea:24:3f:35:c1:ec:c5:be:9d:4f:ea:dc:86:e6:
df:82:ae:76:b7:f5:7d:11:83:39:c7:ea:34:1a:23:88:a9:78:
99:5f:47:89:ec:ca:d6:f2:fe:6a:e5:c2:86:aa:4e:f3:cd:44:
8d:63:e1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:41 2024 by rpki-client on console-fra.rpki-client.org