Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8F34F9A539B11EE9F5A8C524AD9E6FC.roa
File: E8F34F9A539B11EE9F5A8C524AD9E6FC.roa (raw, json)
Hash identifier: 2eRE23Tm0MGoLR5M37dkqU7biFr0u7PvDoAD166ESNY=
Subject key identifier: 46:42:62:EC:07:72:60:C5:19:FC:4E:D7:29:DB:8E:FE:32:3D:FC:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3D65
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8F34F9A539B11EE9F5A8C524AD9E6FC.roa
Signing time: Fri 15 Sep 2023 07:45:59 +0000
ROA not before: Fri 15 Sep 2023 07:45:55 +0000
ROA not after: Sat 08 Jun 2024 07:45:55 +0000
asID: 138152
IP address blocks: 154.92.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15717 (0x3d65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 07:45:55 2023 GMT
Not After : Jun 8 07:45:55 2024 GMT
Subject: CN=65040bb7-75e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:2e:38:9b:9e:8c:77:0d:a6:6c:f3:a8:b7:
07:44:b5:40:c0:d2:13:4a:a1:f6:eb:93:1c:8b:ad:
e1:52:06:99:e4:48:6e:db:b5:2d:af:82:49:25:08:
e0:9f:13:0a:c7:3e:23:11:2c:1d:4d:37:0d:70:b8:
39:77:14:9d:c6:9d:f0:98:48:b6:a7:63:b9:d0:f2:
b5:00:1e:95:2c:73:f9:33:42:d5:0b:1b:b7:17:25:
3e:c6:92:98:35:de:7b:8d:df:c9:bd:d2:7c:19:b7:
40:cf:b1:ba:24:76:dd:ba:61:29:9b:7c:58:ee:c7:
96:13:69:3f:1d:36:7f:84:f9:b0:6b:08:9f:ac:66:
f0:64:cd:b9:1a:36:60:88:70:a6:ae:a3:e2:06:75:
59:5e:89:18:39:f2:dc:bf:1f:65:ec:e3:b8:10:40:
16:94:b4:f7:07:b6:0b:20:c7:b9:fa:9b:ae:f6:aa:
2d:e6:5d:38:8e:31:c6:11:19:a2:ed:05:5e:13:53:
ae:5f:e4:4d:56:48:2d:63:2c:06:5c:7c:c2:b2:b8:
ae:85:79:c4:cf:d0:4a:ff:45:92:07:62:d0:60:a5:
d9:44:68:2e:6d:da:62:7b:3e:d3:2e:1f:68:e4:40:
5f:07:04:80:c5:13:e9:8c:0c:78:2d:8b:9e:6b:ac:
06:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:42:62:EC:07:72:60:C5:19:FC:4E:D7:29:DB:8E:FE:32:3D:FC:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8F34F9A539B11EE9F5A8C524AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.23.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:5f:8b:7e:56:78:74:b3:e8:5c:f5:f8:59:1f:40:52:78:94:
73:2e:a2:bb:50:c6:51:1e:27:8b:61:2d:12:76:7a:c0:9a:86:
cc:23:47:cd:d7:33:f2:60:b4:59:6f:be:2c:73:f8:38:c3:be:
db:b6:51:20:fd:c9:15:92:54:45:1e:c2:73:0f:ac:89:ab:30:
48:11:76:36:7f:99:4d:84:7a:76:c7:3c:b9:db:94:88:77:d0:
87:d7:dc:10:8d:31:f5:fe:c3:61:bc:e1:61:06:e6:de:55:fd:
d4:e4:ae:c9:e8:35:d1:f9:b2:27:ab:77:47:87:20:b6:55:59:
95:4a:b0:d6:01:68:c7:b9:f0:5d:b3:53:57:46:de:3a:ea:d5:
2a:39:58:b6:ef:bb:fc:85:23:eb:9b:fb:28:d7:a8:f5:78:69:
e0:33:00:49:1d:02:e5:a5:a8:78:d7:d3:17:4e:aa:64:4c:8c:
8b:8e:22:2e:7f:cb:fb:c5:03:f1:5a:c5:11:d6:6b:a9:9d:f1:
9e:48:49:85:63:cc:cc:c5:e2:8d:3e:9f:4b:ca:59:84:bc:76:
5d:d7:a2:54:1d:85:c6:c3:12:47:a6:d3:99:4a:74:8f:f9:fb:
0c:00:6b:f5:b4:6f:0c:f4:df:0e:23:4d:10:53:bc:af:7b:13:
0a:0b:2f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:42 2024 by rpki-client on console-fra.rpki-client.org