Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/94B69FC84F1B11EFBF7CDAAE762E951A.roa
File: 94B69FC84F1B11EFBF7CDAAE762E951A.roa (raw, json)
Hash identifier: KbxuO2uDPTezjLzyouQUc4XGgC1J865f/dnmoPHmv0Q=
Subject key identifier: E7:CC:A0:7B:68:84:8B:EB:7F:FC:8F:7A:39:37:AA:44:48:E7:92:20
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 04DA
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/94B69FC84F1B11EFBF7CDAAE762E951A.roa
Signing time: Wed 31 Jul 2024 09:02:15 +0000
ROA not before: Wed 31 Jul 2024 09:02:12 +0000
ROA not after: Wed 31 Jul 2030 09:02:12 +0000
asID: 4766
IP address blocks: 102.215.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1242 (0x4da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Jul 31 09:02:12 2024 GMT
Not After : Jul 31 09:02:12 2030 GMT
Subject: CN=66a9fd97-d339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:38:42:bb:05:be:93:e2:d2:1d:2f:a0:b0:43:
c8:50:12:65:63:c5:dd:5b:8d:e2:b7:df:d2:7e:db:
6f:d3:8b:20:34:38:77:83:87:af:5e:0b:f6:c5:80:
70:92:05:85:fd:a6:f4:a7:34:bb:02:10:49:ad:e5:
c4:36:22:18:3c:c2:73:ae:da:5e:da:54:f3:27:e2:
26:a4:42:50:a0:00:91:33:6a:a3:85:60:6a:07:7d:
01:99:56:6e:a7:14:a1:e3:f8:fc:0e:92:f1:79:be:
ca:96:89:3b:e1:fe:85:0c:0f:06:9a:fb:31:9e:52:
13:db:1d:e2:39:92:33:d5:6c:aa:ab:20:26:b9:16:
ff:c9:68:cb:cd:cb:19:94:db:eb:d3:1e:7e:77:83:
a0:06:47:2d:b7:5a:90:64:76:fe:a5:98:ff:e7:40:
cc:03:85:3a:8f:07:d8:76:44:9e:ad:44:6d:e4:46:
ef:fe:3d:d3:e4:49:11:0c:df:8b:ba:50:db:8e:bf:
a7:2a:a6:89:06:b0:a2:1b:cc:e2:1e:4c:f0:21:cd:
a9:e5:d8:43:6c:ce:9a:df:38:cc:08:e7:c3:8a:69:
22:a9:31:c9:42:43:b4:f0:90:53:64:91:43:60:13:
d2:c1:e3:71:fd:f8:3d:66:8f:2d:29:e5:11:18:55:
cf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CC:A0:7B:68:84:8B:EB:7F:FC:8F:7A:39:37:AA:44:48:E7:92:20
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/94B69FC84F1B11EFBF7CDAAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.229.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:47:c0:59:2f:f0:35:d3:2c:63:9b:d1:9c:e0:b4:25:6a:ad:
24:55:44:e7:e2:27:7e:89:22:90:7b:0c:a8:75:0b:3b:05:24:
41:ea:9e:e6:95:d9:8c:b3:69:2e:35:f6:82:e7:4d:33:26:a3:
a5:c2:a5:83:cc:99:30:4a:f6:c3:d4:f5:2d:a7:ec:5d:28:22:
b3:ae:91:a1:75:79:b9:f2:ac:3c:f1:8b:5f:c9:c0:db:23:31:
c3:53:dd:80:27:28:d3:3a:bd:4b:f4:83:e9:ac:16:9d:63:83:
e3:74:fd:94:7c:6f:58:68:b6:5a:34:ca:fa:f8:97:c2:44:19:
ba:20:ee:e2:f8:c4:9b:db:16:60:7d:e0:52:67:9c:26:43:b2:
b2:f1:27:c7:d2:96:70:0f:01:d7:1b:31:09:11:a4:59:f7:f9:
46:c1:6a:9d:7d:17:43:b4:0f:01:be:2e:0a:a7:ef:79:14:37:
91:ab:79:9b:8e:e5:27:02:21:b0:7f:3d:fa:68:16:4b:94:a2:
f1:11:56:58:da:e7:c6:08:b2:70:b5:bc:04:d9:39:b0:5f:64:
48:76:86:30:c5:83:08:77:28:73:0f:5d:a8:b3:a6:05:83:7b:
ce:ae:16:1e:5d:fe:f5:20:7a:8a:26:ea:ee:1c:c8:91:c6:91:
a5:d4:d7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:30 2024 by rpki-client on console-ams.rpki-client.org