Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECA73FCCE4F311EE8FFEA3B9775412E6.roa
File: ECA73FCCE4F311EE8FFEA3B9775412E6.roa (raw, json)
Hash identifier: imdtDxqI6h0RVY+1c7dddKIKIPqqI9RAcd7mL1zqbKo=
Subject key identifier: 14:6B:D8:CE:4A:0A:ED:60:34:B7:B0:F8:72:AA:E7:30:83:4F:57:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A2A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECA73FCCE4F311EE8FFEA3B9775412E6.roa
Signing time: Mon 18 Mar 2024 06:51:19 +0000
ROA not before: Mon 18 Mar 2024 06:51:16 +0000
ROA not after: Sat 20 Apr 2024 06:51:16 +0000
asID: 39600
IP address blocks: 154.202.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Apr 2024 06:51:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41639 (0xa2a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 18 06:51:16 2024 GMT
Not After : Apr 20 06:51:16 2024 GMT
Subject: CN=65f7e467-c2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b1:b6:ab:d2:45:4d:d8:e7:a4:58:40:12:e7:
8c:42:27:0a:88:20:60:c2:b4:0d:08:3a:2d:d3:77:
36:4b:68:8a:f8:cb:45:39:83:56:cb:a4:d8:50:63:
8d:b3:a1:ec:f9:90:82:c2:e0:bb:21:03:90:a0:bb:
2b:ac:6c:ab:13:fa:95:cf:98:d1:bf:82:95:83:e5:
26:51:f6:8d:22:8e:91:47:30:fd:86:01:79:83:4e:
f6:c1:71:77:75:1b:f2:ff:15:cc:e5:48:32:7d:1b:
0b:0c:15:ad:8f:a0:ed:8f:4e:1b:48:02:4f:ca:2b:
3a:cf:e1:f0:b0:85:fd:d6:2a:b6:37:a8:da:19:bd:
0b:10:d9:78:62:e1:4e:0f:6c:19:d1:65:25:71:5f:
32:32:f7:61:6c:2f:0a:b6:4d:20:6a:a6:49:21:81:
87:07:2c:21:83:59:f0:f3:a8:24:7e:30:83:c6:1a:
e0:3d:88:60:a8:84:29:04:fe:90:63:92:d6:62:b9:
95:85:d7:6b:ad:0a:85:be:e3:1c:dc:61:aa:e0:66:
eb:c6:94:42:2d:05:6c:1d:79:3f:96:5e:e1:bf:41:
d4:1d:91:5d:6a:14:cd:63:7d:f0:b1:f0:77:a2:40:
62:23:0f:54:a6:71:76:f1:e2:6e:97:3f:31:c2:47:
c1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6B:D8:CE:4A:0A:ED:60:34:B7:B0:F8:72:AA:E7:30:83:4F:57:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECA73FCCE4F311EE8FFEA3B9775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.72.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:ce:39:08:30:93:48:c9:5e:b2:26:53:4a:51:e2:53:55:54:
00:5a:8b:1a:09:19:61:fc:12:bf:1f:5d:06:9c:df:d0:e5:df:
c2:0f:ad:56:4a:26:30:ec:af:b7:91:8a:18:52:ab:a3:6f:20:
e4:c1:63:27:6f:fd:aa:24:7d:35:03:94:b4:a1:5e:f9:cb:0e:
63:f9:53:c2:67:ec:e4:c8:db:bf:6f:f7:9c:a2:6c:d0:52:d8:
fb:78:4d:be:ef:e8:dd:25:4b:1c:e4:bc:a0:a2:dd:e4:ba:10:
e7:71:e9:f4:51:8a:18:81:53:40:02:a1:8e:06:bb:f8:e7:ba:
68:fc:b3:33:6c:df:67:5e:ae:fb:e0:ae:e9:4e:8b:1f:ee:d5:
91:53:d7:b3:33:11:ef:4e:05:5f:96:78:e9:0d:d2:d2:61:d9:
13:1d:a9:9c:9d:9a:d1:7a:db:0a:3f:d9:32:7f:e2:60:1b:dd:
a9:20:17:c4:d9:34:82:ef:15:0c:41:40:4d:ba:01:44:c3:a9:
ea:eb:08:48:47:4e:14:c7:95:19:ab:84:2f:ba:39:b9:e5:3f:
0f:61:26:20:f8:9d:f9:b3:96:09:ee:e9:dc:b1:c2:c6:51:cd:
0a:80:1c:e9:4e:2a:e7:e4:6d:e7:87:bf:75:1f:6d:a9:89:c5:
e7:1d:4b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:48:39 2024 by rpki-client on console-fra.rpki-client.org