Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/A8566A94136C11EF9A119E33017001B1.roa
File: A8566A94136C11EF9A119E33017001B1.roa (raw, json)
Hash identifier: 8n6hGcHTkYJois2LH442hMoRDS4eG3DkPDkUW4heEZ8=
Subject key identifier: 53:45:C3:AA:EE:16:99:83:F3:B3:5B:18:AD:0D:1A:6A:73:1D:53:07
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0463
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/A8566A94136C11EF9A119E33017001B1.roa
Signing time: Thu 16 May 2024 10:11:27 +0000
ROA not before: Thu 16 May 2024 10:11:24 +0000
ROA not after: Thu 16 May 2030 10:11:24 +0000
asID: 212609
IP address blocks: 102.217.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 13 Dec 2024 00:06:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1123 (0x463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: May 16 10:11:24 2024 GMT
Not After : May 16 10:11:24 2030 GMT
Subject: CN=6645dbcf-b136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:4b:8e:df:59:a9:6c:30:8a:99:39:c4:09:
1b:43:34:e6:9f:4a:27:67:c5:da:06:70:3b:09:2d:
e6:ff:6a:63:ed:9f:fa:bf:32:97:7d:89:3d:7a:2b:
54:4d:b7:9b:6d:93:62:49:65:8a:51:28:ca:22:4a:
a6:4f:6d:e0:f1:36:50:e8:32:bd:48:de:2f:56:ec:
ad:e5:68:00:75:c0:aa:f0:89:49:1f:a4:b6:8d:d6:
21:78:b5:c2:8c:5e:b1:cc:45:b5:05:eb:93:14:f3:
90:4c:c7:19:29:ba:d3:bf:92:1d:0f:fc:4a:1a:88:
43:a2:3c:04:a9:4b:dc:a8:08:8a:71:a9:5a:ea:cb:
cd:4f:95:06:6e:75:8b:ca:32:fc:3c:d5:98:bd:d3:
ff:03:da:ab:6a:90:fe:6a:82:04:88:78:bc:42:37:
73:2b:91:0c:5b:36:98:88:99:4d:cc:48:9f:31:9b:
e2:57:7e:29:ec:03:c9:e4:24:26:75:37:02:e5:81:
58:e7:e7:21:67:fd:a3:3b:da:d3:9e:90:31:cf:c7:
c3:e1:ac:6e:b2:0b:38:9a:ba:14:6f:1e:ff:9f:b2:
e5:91:46:83:ec:7a:71:77:67:20:1a:33:d0:2e:c8:
41:ed:63:ce:b4:b5:25:0c:e5:72:6c:75:e3:9a:ce:
ac:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:45:C3:AA:EE:16:99:83:F3:B3:5B:18:AD:0D:1A:6A:73:1D:53:07
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/A8566A94136C11EF9A119E33017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.107.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:cb:a7:64:52:2d:00:ca:0f:4f:15:9e:e9:8e:b4:2f:38:16:
ca:eb:67:e4:d1:98:a3:03:2e:df:2d:45:15:53:81:92:e9:d0:
f8:9d:04:a0:a0:4e:9b:4a:95:3c:ef:fc:9f:7d:57:5b:01:38:
63:ec:22:7d:77:5f:f3:ec:26:be:94:cb:78:4c:15:79:ba:7f:
20:c5:80:8d:91:52:00:25:f5:02:7c:8b:7d:0d:d5:1a:42:e0:
e4:61:98:0b:aa:9a:ff:f9:ed:2d:e9:d4:07:ac:30:08:28:ad:
c3:20:c6:b4:a7:09:61:dc:7d:12:4f:55:59:6c:64:b1:81:3d:
09:1a:a5:e1:67:ad:71:5b:0f:c6:25:04:85:e2:78:b5:b7:58:
44:ab:df:d7:45:96:fa:c8:84:70:e2:26:c6:66:c0:4f:b8:9a:
c5:1d:9d:38:c9:f8:d1:02:2b:76:b4:e3:a3:11:5e:91:8b:94:
44:ec:fa:d3:bb:00:12:11:48:cc:7e:80:20:69:f9:db:37:fb:
8e:63:ab:0d:70:d2:fb:ca:96:5d:1e:cb:09:85:1d:89:9c:6b:
43:dd:79:a4:be:d7:ac:98:b2:39:1b:32:b8:b8:04:4a:84:3b:
bf:b3:59:59:35:db:9e:41:9d:38:42:6d:51:15:25:5e:cf:e5:
51:e5:84:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 11 03:37:27 2024 by rpki-client on console-fra.rpki-client.org