Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/30F1D0060EA911EE87221F754AD9E6FC.roa
File: 30F1D0060EA911EE87221F754AD9E6FC.roa (raw, json)
Hash identifier: cEPtCliLX4U+3+ySJMRVYmV3uH8KeTlwTAIUjoPeT0o=
Subject key identifier: 54:2C:2D:A4:5B:A6:B8:5E:18:8F:37:E9:2D:91:07:8A:2C:B7:4E:70
Certificate issuer: /CN=F3614D1DAF/serialNumber=27793D215F08805DB8D0BA892D336F29AB7BB05B
Certificate serial: 0145
Authority key identifier: 27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/30F1D0060EA911EE87221F754AD9E6FC.roa
Signing time: Mon 19 Jun 2023 13:57:13 +0000
ROA not before: Mon 19 Jun 2023 13:57:09 +0000
ROA not after: Sun 19 Jun 2033 13:57:09 +0000
asID: 329063
IP address blocks: 102.215.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.mft
rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 02:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325 (0x145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614D1DAF
Validity
Not Before: Jun 19 13:57:09 2023 GMT
Not After : Jun 19 13:57:09 2033 GMT
Subject: CN=64905eb9-ea71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:9b:20:1b:cb:37:27:f0:01:aa:5d:e4:a2:
ab:99:da:0a:a4:0e:86:e0:45:d6:4f:29:f9:5c:cc:
7a:14:ed:34:1c:63:88:c3:67:07:fd:46:ad:7a:f9:
d0:9d:e9:b2:3d:60:ec:9a:2a:82:6b:01:bc:4a:71:
9f:e8:e0:3c:c8:34:2d:c0:74:4b:23:c0:8f:5c:ab:
89:6c:4d:fc:18:21:7a:dc:4d:28:51:3d:ac:42:57:
95:15:ff:a8:0a:e7:8e:3e:6b:0c:1f:ab:47:0e:19:
a8:bf:f1:3d:ed:f7:5b:a3:a0:31:e9:10:ac:6c:b0:
38:43:d4:90:6e:81:a5:68:d3:aa:66:a4:1e:74:53:
8c:ef:ac:8d:25:e5:09:23:2b:37:27:65:e8:b1:3e:
27:11:ff:52:65:bc:9d:7b:c3:30:2f:fc:aa:fe:3a:
74:de:b1:e9:62:21:20:6e:95:39:f9:d2:8d:98:04:
09:c1:18:68:83:85:2e:dd:a2:a3:a1:4f:f3:00:44:
ae:c0:40:92:32:85:3f:5a:82:e8:22:1a:aa:90:2e:
61:8e:01:8e:33:02:a0:d3:82:87:89:2d:14:e2:1c:
9d:be:a9:59:27:24:af:6f:6d:50:24:85:45:29:75:
89:f0:6d:68:94:35:37:86:1e:2a:b3:bc:4b:6c:0c:
60:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2C:2D:A4:5B:A6:B8:5E:18:8F:37:E9:2D:91:07:8A:2C:B7:4E:70
X509v3 Authority Key Identifier:
keyid:27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/30F1D0060EA911EE87221F754AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.132.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:e0:cd:88:9d:e9:e4:c6:24:54:4a:8d:90:02:05:a7:c8:54:
26:06:68:b4:15:c6:b9:29:d1:f8:25:ae:d0:10:80:bd:39:6e:
88:35:04:6f:9f:22:ea:6c:79:79:59:35:85:ce:c3:44:d7:80:
7b:4a:1e:b5:75:00:53:0d:25:88:45:bf:5d:a5:5f:d0:f9:91:
3c:fe:91:21:d4:40:38:76:9f:6f:05:a3:6f:de:b1:16:c2:17:
46:96:2c:1a:b5:2d:6b:50:87:1c:8a:ea:6b:e3:21:42:63:5e:
99:c1:5d:5f:d3:d2:28:64:02:1f:e5:0f:fd:b0:77:14:c4:bd:
3f:a6:a3:ed:ab:b2:aa:16:2b:2e:ff:23:7a:e5:bc:cb:8f:f4:
3e:16:87:60:31:47:90:c3:7d:4e:63:3c:bb:b9:cf:80:f3:68:
d3:5c:07:33:47:04:f0:74:e2:10:2e:5c:ea:d9:4e:a4:1f:47:
5c:21:1a:5f:2b:42:2b:59:23:3d:41:b6:a5:a9:2e:bf:bc:b1:
7b:48:56:f5:d2:63:be:a1:2c:df:ad:d0:ee:c0:3d:5d:95:aa:
36:2e:02:82:da:6c:46:32:32:e4:21:44:ba:55:e0:83:99:68:
50:b1:3f:92:fc:02:f6:79:f9:d3:1a:53:34:7a:cc:ca:f8:a9:
f3:78:a4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:33:32 2025 by rpki-client