Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/50F16C540EA911EEA82A7D754AD9E6FC.roa
File: 50F16C540EA911EEA82A7D754AD9E6FC.roa (raw, json)
Hash identifier: JFMeuBCREn8gEQG0l1Zx/WGjkNjij2O55EpjmCaZhIk=
Subject key identifier: B5:83:45:66:29:DF:5C:C0:C8:E5:94:F0:EB:B5:7D:72:53:A5:73:8E
Certificate issuer: /CN=F3614D1DAF/serialNumber=27793D215F08805DB8D0BA892D336F29AB7BB05B
Certificate serial: 0147
Authority key identifier: 27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/50F16C540EA911EEA82A7D754AD9E6FC.roa
Signing time: Mon 19 Jun 2023 13:58:07 +0000
ROA not before: Mon 19 Jun 2023 13:58:02 +0000
ROA not after: Sun 19 Jun 2033 13:58:02 +0000
asID: 329063
IP address blocks: 102.215.132.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.mft
rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 02:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614D1DAF
Validity
Not Before: Jun 19 13:58:02 2023 GMT
Not After : Jun 19 13:58:02 2033 GMT
Subject: CN=64905eee-5fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:fa:87:32:83:d9:36:1f:7e:8a:8a:66:77:
76:99:18:41:53:2a:3c:0c:55:21:c9:7f:d0:f4:91:
84:9f:fa:f2:25:1e:c3:7f:4b:71:4c:48:6d:0f:60:
ec:75:da:47:6f:e8:b0:a2:82:3e:0c:1b:c5:8d:bc:
5d:ef:f1:65:95:28:c7:15:89:9b:d7:7b:59:91:85:
a5:cc:fb:2e:4b:e4:56:b7:37:36:7d:2e:95:1c:15:
75:f8:66:52:47:82:db:c4:4b:d0:24:15:e3:bd:ca:
9a:ab:1a:32:ad:92:1e:21:1a:3a:91:d1:02:01:7d:
f1:da:ed:27:77:30:9f:16:d5:81:54:05:c5:17:7b:
dc:ef:e9:e7:70:f7:73:12:8a:cc:7e:1a:83:08:56:
36:0a:a0:ed:60:fa:bd:72:a3:92:be:5d:5a:1e:cf:
3e:9d:7d:a2:49:57:4b:6b:b8:d3:ab:15:ba:59:e4:
60:cf:50:0a:1a:05:06:c8:d4:96:ef:e5:f9:7c:6c:
7d:ac:09:1e:36:43:b1:96:92:81:81:dd:9d:5b:bb:
3b:bf:0b:77:a1:d4:eb:48:59:d0:0c:85:69:3c:f6:
cf:68:56:c2:a5:54:d7:08:c8:ff:9c:c6:d9:43:55:
9b:a1:ea:bc:85:03:3d:05:c4:82:46:8b:99:e9:d7:
77:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:83:45:66:29:DF:5C:C0:C8:E5:94:F0:EB:B5:7D:72:53:A5:73:8E
X509v3 Authority Key Identifier:
keyid:27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/50F16C540EA911EEA82A7D754AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.132.0/23
Signature Algorithm: sha256WithRSAEncryption
46:64:22:ee:15:c8:f7:b1:1b:58:c0:20:77:3e:db:4b:33:03:
a9:8a:87:67:7e:af:b8:e1:53:23:6b:2b:33:23:13:03:98:73:
d0:9e:7e:f6:bb:a7:ca:ce:ff:74:9a:e2:0b:42:01:c1:6e:3e:
71:d0:4d:45:0d:53:0d:53:94:82:ad:9c:1d:7b:44:a5:44:9a:
66:a4:cf:76:02:b0:d6:5f:41:d7:cb:72:a1:30:30:96:19:d3:
56:f6:06:19:9b:33:77:41:f7:14:b4:da:12:2d:3f:09:1f:34:
9f:f6:46:8a:43:d7:d6:3d:a2:9d:43:d9:6e:52:21:55:40:4d:
59:53:15:8a:71:ea:a1:b8:12:f7:ba:ea:b9:f5:5b:1b:9b:cd:
38:37:f7:b2:a6:aa:ae:5c:a8:82:95:8a:ad:47:92:ee:dc:cb:
e6:d2:b5:bb:d3:0d:0b:35:2e:72:89:08:59:b1:26:40:35:9f:
a9:e9:18:4d:1c:07:01:c5:03:6a:38:e6:c4:eb:0e:c9:f1:d2:
9a:0e:c1:3c:ce:43:80:39:bc:09:62:61:eb:f5:7f:c1:42:0d:
83:de:c8:a2:56:e2:bb:3d:38:c8:3b:2c:f9:21:23:4c:07:1b:
e4:a2:86:e3:27:2b:57:04:9f:41:9d:62:f3:94:9d:56:a6:1f:
57:22:10:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:42 2025 by rpki-client