Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/0C083320B24F11EF80B52F71762E951A.roa
File: 0C083320B24F11EF80B52F71762E951A.roa (raw, json)
Hash identifier: swBYnhkImW9LhM0qswhHNCFqzYvKajWSuD7zcbFshH8=
Subject key identifier: FA:BE:68:7D:0C:FE:64:A5:3F:23:C9:9C:6E:C4:C9:01:3A:D4:13:E6
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 058A
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/0C083320B24F11EF80B52F71762E951A.roa
Signing time: Wed 04 Dec 2024 14:50:05 +0000
ROA not before: Wed 04 Dec 2024 14:50:01 +0000
ROA not after: Tue 31 Dec 2030 14:50:01 +0000
asID: 214279
IP address blocks: 102.215.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1418 (0x58a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF
Validity
Not Before: Dec 4 14:50:01 2024 GMT
Not After : Dec 31 14:50:01 2030 GMT
Subject: CN=67506c1c-ae84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:60:7d:01:59:a2:09:45:d5:37:4c:29:1b:ab:
01:ba:05:fd:9d:98:51:96:0c:37:c5:74:bb:f0:77:
20:6d:19:12:dd:e7:a0:83:24:16:21:74:41:9e:fb:
dc:a1:45:e2:32:47:63:31:b0:8a:30:e3:30:f6:6f:
64:2b:16:06:3c:bc:e2:d9:d9:d8:3b:2d:4d:af:c2:
56:f1:2e:7f:69:65:97:80:47:59:41:d6:d0:41:e9:
a1:ac:7e:c8:36:d0:6d:46:75:6e:6e:df:30:7f:63:
94:01:eb:a5:1c:a8:14:39:3a:90:8c:f5:c3:64:4f:
0f:d7:35:47:5d:1e:5d:46:14:17:5d:9d:a2:53:48:
c7:39:ea:b9:97:54:74:43:70:54:96:43:ae:56:99:
e5:16:b8:04:c3:78:2d:6b:ec:75:1e:d6:b2:04:dc:
86:4b:5a:a0:10:48:d7:e1:00:d2:fb:d7:30:ab:82:
8f:72:72:74:7b:c8:98:8d:f5:40:1e:1b:43:1d:5a:
a2:41:76:19:61:df:81:12:79:9f:77:51:c1:2e:f5:
04:09:12:5d:d2:b6:95:ed:a2:d3:c1:86:58:27:d5:
c3:18:9e:d8:ec:e3:dc:9f:1b:fc:a6:c7:ef:b3:33:
fe:15:4b:89:07:95:32:2c:0b:06:e6:47:cd:cf:36:
a8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BE:68:7D:0C:FE:64:A5:3F:23:C9:9C:6E:C4:C9:01:3A:D4:13:E6
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/0C083320B24F11EF80B52F71762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.228.0/24
Signature Algorithm: sha256WithRSAEncryption
38:de:4f:b5:8b:ae:e0:6a:8e:a9:73:52:50:a0:a1:33:4f:6a:
db:78:7f:fc:3d:99:fe:0e:ba:44:1d:c6:a1:bc:bc:1a:59:7f:
0b:63:65:79:e1:81:69:79:09:37:1b:80:e5:95:e9:34:46:12:
ee:83:75:77:df:e7:9d:f7:2e:69:bf:8e:ce:38:0d:79:12:02:
7b:75:c2:bc:29:3d:3e:2f:de:f8:90:bb:31:ed:03:8e:8e:58:
6a:2d:6c:18:48:78:7c:9a:05:c5:81:04:d8:3b:2c:68:4e:96:
f9:78:56:76:96:a8:c7:0f:d4:1b:21:8e:ef:06:5c:4f:6c:e8:
06:8c:65:ae:49:bf:78:65:8a:6d:c5:e5:cb:4a:d4:f9:66:0e:
f6:6b:c0:6e:19:26:f7:f6:39:85:49:db:36:65:63:9e:77:cc:
04:77:87:60:58:78:23:29:e8:a5:6b:cc:41:c8:71:80:2f:2f:
8b:d0:5e:6c:56:70:72:b6:dd:70:9e:15:3d:9b:88:16:a2:c9:
2b:9f:26:2f:46:d0:f0:56:fe:10:1f:76:8d:7d:01:ac:9b:d3:
55:45:7b:f6:df:4a:4f:f4:17:8b:87:7f:5e:bc:55:9b:d1:b5:
c8:20:a6:26:fd:6b:1a:6c:ea:14:5b:59:44:c7:b0:ac:50:60:
20:ed:82:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:53:44 2025 by rpki-client