Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA7AA4AE05F211EEBA96E52D4AD9E6FC.roa
File: EA7AA4AE05F211EEBA96E52D4AD9E6FC.roa (raw, json)
Hash identifier: opD44bWAZSIIl8tP3j3yf8lgtTtf1eKNFPm5gwsmP9s=
Subject key identifier: E3:61:22:70:6F:0C:70:CD:B3:E6:8A:F8:B0:BD:2C:C9:ED:62:3F:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 29D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA7AA4AE05F211EEBA96E52D4AD9E6FC.roa
Signing time: Thu 08 Jun 2023 11:52:17 +0000
ROA not before: Thu 08 Jun 2023 11:52:13 +0000
ROA not after: Sat 18 May 2024 11:52:13 +0000
asID: 137443
IP address blocks: 154.212.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10704 (0x29d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 8 11:52:13 2023 GMT
Not After : May 18 11:52:13 2024 GMT
Subject: CN=6481c0f1-8d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:05:4b:ee:b4:24:e7:d2:da:bf:66:ed:a4:56:
e5:b9:8c:81:b6:89:6c:7d:10:f6:d2:17:e3:c5:09:
1f:d5:21:da:0e:ed:64:0d:08:b7:ce:4a:83:af:bb:
d5:15:b8:b0:14:a4:40:2c:3c:9b:33:82:81:a4:33:
47:d8:38:27:9f:fc:19:7c:0a:ec:01:6e:13:76:09:
ac:67:ee:af:e3:39:9d:a5:f1:38:d9:e9:f0:a3:3d:
82:63:81:ea:d5:84:37:6e:54:57:70:1f:9c:f3:70:
9d:a2:83:4d:b9:e2:73:a6:04:99:b1:a7:3c:b8:2e:
70:ee:60:7a:1a:81:81:45:8d:b7:f4:c2:4f:98:fe:
22:43:7d:5d:7f:e9:c0:f2:cd:07:d8:54:66:78:1b:
b4:97:3d:a2:f6:84:e3:de:74:cd:24:05:91:60:ff:
94:c1:b9:42:72:8a:50:e9:6f:05:32:56:88:5b:37:
e2:a4:1c:d9:d7:4b:63:16:fa:67:de:67:b0:03:a3:
c5:7d:0e:49:1a:20:11:ba:a9:cd:00:6f:11:c6:f1:
39:3e:ad:27:29:94:d2:23:b8:88:3f:14:5a:50:43:
a1:ed:96:42:ee:8f:83:64:55:de:a1:ae:f2:50:ba:
2c:70:e8:e5:aa:67:b8:3b:ef:58:b8:15:a5:4f:01:
03:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:61:22:70:6F:0C:70:CD:B3:E6:8A:F8:B0:BD:2C:C9:ED:62:3F:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA7AA4AE05F211EEBA96E52D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.129.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:98:de:76:cd:20:f4:fe:96:0d:9d:0f:fa:82:34:03:18:b2:
8a:4f:c4:f8:9d:2c:f2:4b:2c:6a:ef:fc:14:5b:c1:8e:c7:8e:
05:fd:56:85:53:e6:0d:8e:7b:cb:77:50:15:ac:1f:27:e6:45:
1d:61:8a:32:c4:00:f1:ee:2a:5a:aa:86:8c:d0:fb:8c:3e:bb:
8b:ed:03:d3:96:cb:b3:91:4e:91:8b:82:da:57:0b:1c:46:6e:
78:ca:65:ae:e4:80:eb:b0:01:d8:e1:bd:10:30:88:31:2a:bc:
2e:d2:4a:96:fc:cf:26:be:cd:09:46:01:23:4b:2d:07:25:bf:
02:51:c4:a4:f5:b0:00:24:44:7d:ec:99:4f:f8:ac:4d:af:f8:
20:85:cd:93:e0:c9:48:09:2d:ee:d7:2d:56:63:d4:c0:fb:5b:
e1:cd:84:b2:2e:f2:95:6d:9f:7b:0b:d3:f5:4e:3c:c8:03:c5:
00:74:c8:a5:f4:d0:bb:12:b5:dd:75:3b:b6:e2:4b:79:ea:53:
ff:4a:13:0c:86:c6:3d:0d:85:17:c7:5d:b3:1a:ee:2c:77:55:
f2:2a:bf:4f:97:5d:9f:ff:28:46:e9:b0:79:c1:7a:2f:64:05:
c7:49:c8:eb:c5:57:b0:ea:16:a7:97:62:cf:9e:11:22:a4:f6:
32:cc:38:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:18:17 2024 by rpki-client on console-ams.rpki-client.org