Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/65FCA20C2F0B11EFBD5743A4762E951A.roa
File: 65FCA20C2F0B11EFBD5743A4762E951A.roa (raw, json)
Hash identifier: mvAvR4ZLUaJmhnQgMM2FoWX6jVJRa73DO9bdcbf1iDA=
Subject key identifier: 8F:EA:90:19:7B:E4:08:02:2F:FA:9E:C6:AE:40:B2:3E:A4:2A:71:5E
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0499
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/65FCA20C2F0B11EFBD5743A4762E951A.roa
Signing time: Thu 20 Jun 2024 13:45:47 +0000
ROA not before: Thu 20 Jun 2024 13:45:44 +0000
ROA not after: Thu 20 Jun 2030 13:45:44 +0000
asID: 215580
IP address blocks: 102.216.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 09 Jul 2024 00:05:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1177 (0x499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Jun 20 13:45:44 2024 GMT
Not After : Jun 20 13:45:44 2030 GMT
Subject: CN=6674328b-9cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c3:fa:80:e6:26:fe:3b:be:be:cc:d7:27:8d:
1f:58:e1:83:da:d5:ec:ab:5b:91:2e:4f:f1:62:96:
91:f7:51:18:69:43:1d:2f:4e:0f:45:80:cc:d2:8d:
31:d9:58:d4:e0:00:2c:1f:17:60:71:cb:3a:b0:5d:
e4:09:1d:db:95:9a:61:d5:e5:cf:00:f2:2b:7d:8a:
df:2e:58:59:f0:8e:fa:dc:a5:c4:91:52:d3:63:41:
05:d5:14:6d:48:b2:39:43:bb:90:8d:a4:02:2d:4c:
2a:49:31:b8:f6:4e:81:b5:ea:4f:cd:cd:dd:ba:da:
e2:72:c0:fe:b5:59:c4:78:f4:f1:d8:ee:c6:d4:a1:
be:5e:32:fb:36:5e:4d:b1:09:48:05:81:a4:55:f4:
ee:2b:aa:a9:ca:37:3a:c1:4f:d3:e8:39:14:10:94:
04:ad:83:a1:5e:e2:74:fc:a4:a3:f7:1c:07:35:fa:
dd:38:58:30:4b:74:33:34:d9:a2:fa:3d:4d:38:96:
90:83:f6:8a:6a:08:2a:fb:27:05:d3:6f:4f:5b:3e:
89:8b:f2:f9:61:1b:de:ef:c0:5a:3c:01:8a:56:33:
74:70:6e:25:58:ea:1b:ff:3e:d8:1e:e9:62:55:30:
7f:f6:ec:76:cd:65:0b:73:c1:8a:ef:14:8c:d5:56:
f6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EA:90:19:7B:E4:08:02:2F:FA:9E:C6:AE:40:B2:3E:A4:2A:71:5E
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/65FCA20C2F0B11EFBD5743A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.80.0/24
Signature Algorithm: sha256WithRSAEncryption
98:12:97:eb:b9:37:f7:cc:fc:67:ce:17:1e:06:fc:30:a4:e7:
3b:ff:49:68:5e:d7:a2:c4:85:68:23:cc:f6:41:82:fe:47:c9:
ec:bb:00:0a:56:ef:3b:94:9f:4b:b6:1c:78:7f:cf:44:7f:6f:
82:bb:5d:dc:d2:c0:79:56:1f:6a:8d:c3:da:d8:07:cf:c3:44:
c4:2a:f4:e9:50:bf:6f:79:0e:af:d4:a1:6f:1b:e6:79:13:29:
bf:7d:4c:94:ae:3b:65:5e:18:71:b1:b0:ae:53:9a:b3:15:00:
4c:e8:5e:7a:f4:d7:ad:e0:42:df:4e:3c:9b:30:a4:bc:46:2b:
72:08:74:fb:2d:ca:d2:25:b8:c5:95:eb:06:08:65:d1:b8:92:
d9:a5:e5:b5:75:4b:84:e8:bf:3e:67:bf:d8:05:f5:43:9a:92:
91:cb:20:c7:17:52:1f:2c:1c:24:7e:c1:74:0e:78:1a:de:af:
be:14:43:17:08:0d:a8:59:ac:50:f5:80:a8:2d:63:0a:e1:91:
36:10:4a:5e:21:89:27:31:7f:44:e6:c4:e0:4f:27:0d:ff:b6:
f4:0f:61:e3:9d:7f:c0:1b:ca:5f:7a:1d:c0:f5:74:51:af:e9:
79:d5:cf:09:d9:76:40:c1:a6:45:55:ec:39:50:3b:f9:7e:c5:
8f:e4:b8:74
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBJkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTQ2NTlBRjExMC8GA1UEBRMoNjBBMEU1RDFBQzY2QzhBRTNCN0M5RTZBOEVGNUJD
MDRCOEJCQjg4RTAeFw0yNDA2MjAxMzQ1NDRaFw0zMDA2MjAxMzQ1NDRaMBgxFjAU
BgNVBAMTDTY2NzQzMjhiLTljZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDow/qA5ib+O76+zNcnjR9Y4YPa1eyrW5EuT/FilpH3URhpQx0vTg9FgMzS
jTHZWNTgACwfF2BxyzqwXeQJHduVmmHV5c8A8it9it8uWFnwjvrcpcSRUtNjQQXV
FG1IsjlDu5CNpAItTCpJMbj2ToG16k/Nzd262uJywP61WcR49PHY7sbUob5eMvs2
Xk2xCUgFgaRV9O4rqqnKNzrBT9PoORQQlAStg6Fe4nT8pKP3HAc1+t04WDBLdDM0
2aL6PU04lpCD9opqCCr7JwXTb09bPomL8vlhG97vwFo8AYpWM3RwbiVY6hv/Ptge
6WJVMH/27HbNZQtzwYrvFIzVVvaHAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUj+qQ
GXvkCAIv+p7GrkCyPqQqcV4wHwYDVR0jBBgwFoAUYKDl0axmyK47fJ5qjvW8BLi7
uI4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVBNDBENTc3L1lLRGww
YXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1lLRGwwYXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVB
NDBENTc3LzY1RkNBMjBDMkYwQjExRUZCRDU3NDNBNDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2FAwDQYJKoZIhvcNAQEL
BQADggEBAJgSl+u5N/fM/GfOFx4G/DCk5zv/SWhe16LEhWgjzPZBgv5Hyey7AApW
7zuUn0u2HHh/z0R/b4K7XdzSwHlWH2qNw9rYB8/DRMQq9OlQv295Dq/UoW8b5nkT
Kb99TJSuO2VeGHGxsK5TmrMVAEzoXnr0163gQt9OPJswpLxGK3IIdPstytIluMWV
6wYIZdG4ktml5bV1S4Tovz5nv9gF9UOakpHLIMcXUh8sHCR+wXQOeBrer74UQxcI
DahZrFD1gKgtYwrhkTYQSl4hiScxf0TmxOBPJw3/tvQPYeOdf8Abyl96HcD1dFGv
6XnVzwnZdkDBpkVV7DlQO/l+xY/kuHQ=
-----END CERTIFICATE-----
Generated at Sun Jul 7 02:51:07 2024 by rpki-client on console-fra.rpki-client.org