Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/499C7404C61211EFAA119D97762E951A.roa
File: 499C7404C61211EFAA119D97762E951A.roa (raw, json)
Hash identifier: 4gShz1bQAkjXRI1VFQW3pOoyw4R8N15ARzQqWLOr8BY=
Subject key identifier: 8D:0F:CB:E8:09:ED:ED:CB:CE:F2:5A:50:58:36:3A:3E:71:21:F5:96
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 05BA
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/499C7404C61211EFAA119D97762E951A.roa
Signing time: Sun 29 Dec 2024 18:25:32 +0000
ROA not before: Sun 29 Dec 2024 18:25:28 +0000
ROA not after: Sun 29 Dec 2030 18:25:28 +0000
asID: 329403
IP address blocks: 102.216.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1466 (0x5ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF
Validity
Not Before: Dec 29 18:25:28 2024 GMT
Not After : Dec 29 18:25:28 2030 GMT
Subject: CN=6771941c-0f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:b1:2e:b8:ce:aa:af:33:6f:da:74:a4:b7:
63:5e:cb:9d:9c:87:8e:42:99:19:ef:83:7f:8a:6d:
36:10:a3:17:18:4f:94:eb:9f:77:cf:ed:3b:e0:7b:
05:d9:60:62:ac:24:1d:0f:98:d1:ab:75:10:86:86:
58:1d:52:78:82:dd:f7:6f:8a:1c:32:f6:9c:a8:91:
7b:b8:2f:8a:cf:dd:dc:a8:52:02:b7:a8:22:ee:89:
ce:bd:76:cb:e6:3d:f0:86:0e:d6:0b:b3:fe:dc:5c:
28:38:41:bc:ed:70:01:91:b2:c9:37:e5:cb:58:70:
ef:2f:b2:c0:cf:4a:2b:82:61:d7:c7:1c:23:a6:c8:
fd:f5:ac:89:c9:61:d6:04:b4:e1:35:e0:e7:a2:40:
3b:23:ba:62:79:eb:08:99:94:d4:a5:c1:25:c7:03:
64:a9:55:b8:7a:eb:a8:fd:05:85:b8:8f:7b:01:53:
31:72:60:a0:3b:2e:7e:6c:75:34:78:cf:27:7b:eb:
2c:b8:ed:6c:38:93:1c:8a:fb:15:32:25:b1:d2:4b:
3b:45:6c:e5:f2:9d:ac:ce:1b:51:b0:6f:a3:9c:92:
96:cb:c9:b2:87:8c:2c:63:fe:5a:04:24:76:4a:4d:
16:71:5c:b0:0d:fa:de:fa:40:52:a4:e2:0c:7c:cd:
1b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0F:CB:E8:09:ED:ED:CB:CE:F2:5A:50:58:36:3A:3E:71:21:F5:96
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/499C7404C61211EFAA119D97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.80.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:8f:46:a5:d4:f4:d9:10:1a:97:b4:65:c4:bd:e9:8b:43:47:
eb:38:26:7a:96:57:27:13:a7:24:3c:a7:80:d4:1e:58:ed:ac:
28:47:28:62:5c:6d:ba:df:05:04:fe:a9:18:ec:f5:a7:df:02:
09:de:59:89:50:f4:0e:24:c9:f9:c4:e1:f6:7f:ff:28:cb:95:
cf:a9:08:6d:c6:34:01:b4:3e:15:7e:38:94:31:6d:72:a5:e0:
d5:dd:3b:48:da:ad:4f:70:2f:c7:72:a8:ac:4a:98:56:44:fb:
d5:ff:06:f4:bd:43:19:23:ee:90:6c:34:ae:4f:73:fa:ae:cc:
31:7b:90:df:13:df:a9:cc:42:a3:31:e3:1d:69:5d:19:ff:9f:
9a:2b:b4:d7:e1:46:86:b8:2b:06:06:dd:0d:22:f3:79:75:de:
e4:50:88:a0:cc:a1:f4:a7:a6:92:19:19:8a:7d:c8:39:13:d5:
22:9c:c0:21:2d:3d:85:94:6a:04:ca:e8:f4:2d:00:fb:30:75:
1f:35:4f:30:1d:3d:7b:1e:f8:a8:f9:a1:3b:69:5d:31:6e:54:
a5:cf:34:9c:d1:b7:88:9c:da:6d:a5:0f:d8:ac:db:c5:c5:e3:
ee:c8:6b:d7:65:03:1c:b6:9d:9a:da:85:82:78:39:fc:3f:cb:
6c:ee:33:99
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBbowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTQ2NTlBRjExMC8GA1UEBRMoNjBBMEU1RDFBQzY2QzhBRTNCN0M5RTZBOEVGNUJD
MDRCOEJCQjg4RTAeFw0yNDEyMjkxODI1MjhaFw0zMDEyMjkxODI1MjhaMBgxFjAU
BgNVBAMTDTY3NzE5NDFjLTBmMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/W7EuuM6qrzNv2nSkt2Ney52ch45CmRnvg3+KbTYQoxcYT5Trn3fP7Tvg
ewXZYGKsJB0PmNGrdRCGhlgdUniC3fdvihwy9pyokXu4L4rP3dyoUgK3qCLuic69
dsvmPfCGDtYLs/7cXCg4QbztcAGRssk35ctYcO8vssDPSiuCYdfHHCOmyP31rInJ
YdYEtOE14OeiQDsjumJ56wiZlNSlwSXHA2SpVbh666j9BYW4j3sBUzFyYKA7Ln5s
dTR4zyd76yy47Ww4kxyK+xUyJbHSSztFbOXynazOG1Gwb6OckpbLybKHjCxj/loE
JHZKTRZxXLAN+t76QFKk4gx8zRtbAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUjQ/L
6Ant7cvO8lpQWDY6PnEh9ZYwHwYDVR0jBBgwFoAUYKDl0axmyK47fJ5qjvW8BLi7
uI4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVBNDBENTc3L1lLRGww
YXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1lLRGwwYXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVB
NDBENTc3LzQ5OUM3NDA0QzYxMjExRUZBQTExOUQ5Nzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2FAwDQYJKoZIhvcNAQEL
BQADggEBAC6PRqXU9NkQGpe0ZcS96YtDR+s4JnqWVycTpyQ8p4DUHljtrChHKGJc
bbrfBQT+qRjs9affAgneWYlQ9A4kyfnE4fZ//yjLlc+pCG3GNAG0PhV+OJQxbXKl
4NXdO0jarU9wL8dyqKxKmFZE+9X/BvS9Qxkj7pBsNK5Pc/quzDF7kN8T36nMQqMx
4x1pXRn/n5ortNfhRoa4KwYG3Q0i83l13uRQiKDMofSnppIZGYp9yDkT1SKcwCEt
PYWUagTK6PQtAPswdR81TzAdPXse+Kj5oTtpXTFuVKXPNJzRt4ic2m2lD9is28XF
4+7Ia9dlAxy2nZrahYJ4Ofw/y2zuM5k=
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:59:20 2025 by rpki-client