Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/E2FD811CBC6511EF9197B567762E951A.roa
File: E2FD811CBC6511EF9197B567762E951A.roa (raw, json)
Hash identifier: EXiNgxy7d0tjLX1SpsLd379Zi3cAwKIMh7UFB0zyfF0=
Subject key identifier: 84:6A:51:F7:14:97:EF:D3:1E:64:9E:72:2A:22:E5:AB:40:FB:56:B4
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 05A1
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/E2FD811CBC6511EF9197B567762E951A.roa
Signing time: Tue 17 Dec 2024 10:58:46 +0000
ROA not before: Tue 17 Dec 2024 10:58:41 +0000
ROA not after: Sun 15 Dec 2030 10:58:41 +0000
asID: 5065
IP address blocks: 102.215.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1441 (0x5a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF
Validity
Not Before: Dec 17 10:58:41 2024 GMT
Not After : Dec 15 10:58:41 2030 GMT
Subject: CN=67615966-3511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:12:30:f6:4e:4b:40:f7:ca:b2:84:0f:9f:
7a:df:dc:71:93:79:73:d3:a1:20:4e:3f:eb:82:6a:
c7:a5:1f:34:05:6d:2c:09:ad:42:26:f2:55:90:9c:
03:4e:c1:82:0c:4c:c3:e5:c2:96:4b:94:67:0b:6c:
16:82:42:36:98:e2:8c:57:a0:20:7a:5d:ab:16:2a:
3e:6f:1f:c9:b4:f5:35:d7:87:dc:8e:1f:97:44:37:
e6:f8:b2:5b:5d:60:6b:95:4f:48:8c:23:5c:21:e3:
28:1f:98:66:f9:d5:61:6c:45:a7:9f:1f:ae:36:ff:
10:f1:56:46:a6:71:a2:b5:dc:5c:f8:42:7f:67:00:
82:d4:31:7c:6a:f6:67:48:af:7e:fd:6a:88:13:1b:
cf:39:5e:78:6c:1a:eb:a4:ad:ff:25:3c:41:4b:30:
60:c2:97:49:a7:17:91:67:92:67:f9:5e:bd:99:9e:
c7:58:40:4a:f5:c4:a9:3c:1e:46:7b:44:6d:85:b4:
ea:26:90:86:4b:32:2a:ac:6b:b9:75:60:87:93:d4:
6d:d2:78:86:ac:ce:71:29:ec:bb:e2:6a:a4:d7:78:
d9:bb:0e:a8:41:3f:4d:95:aa:0c:a0:b6:c1:45:a7:
53:61:c8:76:89:e9:bb:4f:1d:58:40:19:b3:c7:3e:
03:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6A:51:F7:14:97:EF:D3:1E:64:9E:72:2A:22:E5:AB:40:FB:56:B4
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/E2FD811CBC6511EF9197B567762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.231.0/24
Signature Algorithm: sha256WithRSAEncryption
16:56:d8:d7:b8:24:72:9f:4d:4c:a4:32:a8:57:ee:09:75:e9:
a5:22:a5:e6:41:3f:82:68:16:dd:d8:15:84:73:36:84:07:05:
fd:9a:87:7b:b4:97:ce:0c:ed:5a:cc:26:e8:f4:53:8f:8e:39:
b7:4a:d6:f0:22:65:b5:88:7a:2d:c3:3d:92:de:55:71:ef:b9:
08:86:df:f0:7b:aa:9e:b3:34:bb:4a:2a:e0:63:9c:d2:f0:c4:
04:3d:46:82:ee:ce:6c:e3:b3:39:eb:51:e9:f8:a0:42:4e:7b:
5a:69:7a:40:af:e3:4e:24:f7:e5:f0:31:b1:52:ff:fe:f2:b8:
fa:4f:2d:04:cd:ce:65:76:bf:36:d5:4d:8b:05:98:2c:ec:18:
93:79:a0:bd:5f:50:de:0e:c3:66:e4:4a:d9:ac:5c:79:82:8e:
3c:82:43:74:5d:de:28:80:af:69:5c:6a:40:1d:30:60:ea:76:
04:2e:9a:d0:1f:e6:0e:a3:84:00:fa:0a:14:c2:1d:2f:8c:bc:
0c:be:aa:ed:09:3b:47:70:7e:51:3f:5e:ee:ca:0d:63:6f:d2:
cf:74:d5:79:69:3a:1a:cc:ae:aa:71:c2:61:25:be:57:ec:ad:
7b:74:8c:22:d9:33:2e:2e:bb:57:59:72:89:69:59:16:e1:48:
9f:cc:55:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:37:02 2025 by rpki-client