Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/167F01E28C7711EFB428BC5B762E951A.roa
File: 167F01E28C7711EFB428BC5B762E951A.roa (raw, json)
Hash identifier: 6yoz8ek+/RZHXfeUTfqa5uczLxr2EovXsaiRHYgNI68=
Subject key identifier: D2:9C:44:25:AD:9D:5E:F9:15:1B:2F:FB:D3:46:CD:28:19:AA:9B:D9
Certificate issuer: /CN=F3654397AF/serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2
Certificate serial: 0340
Authority key identifier: 03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/167F01E28C7711EFB428BC5B762E951A.roa
Signing time: Thu 17 Oct 2024 11:00:58 +0000
ROA not before: Thu 17 Oct 2024 11:00:54 +0000
ROA not after: Fri 17 Oct 2025 11:00:54 +0000
asID: 328660
IP address blocks: 102.214.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 832 (0x340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3654397AF/serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2
Validity
Not Before: Oct 17 11:00:54 2024 GMT
Not After : Oct 17 11:00:54 2025 GMT
Subject: CN=6710ee6a-4eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:72:7c:e9:e4:49:83:13:de:a1:9d:df:95:9e:
d0:5b:d9:5c:bc:cf:fe:f9:bf:dd:70:f3:7e:f7:85:
6e:41:b5:a3:a3:af:e8:85:a9:c6:9a:70:fe:13:89:
f8:53:30:24:7b:08:a0:f5:ce:49:b3:32:7c:61:61:
6c:b3:a0:fd:c7:e5:1c:0f:81:35:ee:2b:0a:63:c4:
8e:8b:1b:97:e2:c9:0b:8c:55:aa:68:8a:58:13:cd:
bd:f0:cd:a5:6f:c1:77:78:02:1e:b8:34:01:b2:fd:
c8:7a:9a:6a:bc:6e:83:ab:32:06:37:94:be:f5:4e:
42:be:91:a7:df:b9:76:76:94:b4:7b:a4:81:be:44:
b0:e1:f4:90:92:52:01:50:f9:82:dd:e8:ee:6f:b2:
b3:c8:09:d9:24:27:4a:b3:2c:c4:c0:f6:b6:94:62:
52:59:54:ec:22:1a:6e:49:d9:5d:a2:99:af:65:04:
0b:34:a5:3f:0a:a5:c3:03:0f:3a:b2:02:a0:58:79:
17:c6:3e:6b:9c:7c:a2:c6:af:00:12:0c:fe:82:81:
f8:ca:97:93:89:0c:ec:6b:7d:af:49:2a:2e:2b:27:
d6:bd:4f:10:1e:a3:ed:37:f7:d6:93:55:42:67:14:
2d:31:96:fb:9f:65:7c:ad:f8:6d:04:e5:3d:e0:26:
8d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9C:44:25:AD:9D:5E:F9:15:1B:2F:FB:D3:46:CD:28:19:AA:9B:D9
X509v3 Authority Key Identifier:
keyid:03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/167F01E28C7711EFB428BC5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.180.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:82:83:f7:93:70:19:6c:1d:9a:4e:6f:ad:c0:7c:f9:2a:20:
cb:7e:f4:2c:63:0d:4d:aa:8e:7e:40:f0:79:8d:c5:a9:f9:98:
f5:2e:c6:26:e3:68:cb:bd:92:c3:f0:39:6d:8a:f3:a5:23:3a:
a0:85:08:12:c4:4e:18:60:ab:df:ee:ad:52:93:62:62:59:96:
46:2d:bf:ac:4d:a1:13:4d:72:94:52:ab:4e:9d:6b:78:bc:bf:
f9:bc:0c:c5:d3:d6:a0:9f:83:82:b4:8b:c1:16:cc:5e:28:09:
a7:fd:e9:86:34:01:59:0f:76:60:d3:03:4c:af:2a:40:f0:0a:
6b:95:29:eb:2d:90:d6:c0:e9:15:59:60:87:99:e9:29:ec:ac:
68:19:f1:6f:83:ed:93:60:17:aa:60:cd:76:18:77:25:fd:6d:
88:f8:19:b9:7f:c2:e3:b7:f6:ac:cf:1e:47:d7:06:b5:e2:00:
bf:9f:54:46:33:29:4a:84:4b:48:33:0f:1c:16:fb:54:37:e9:
d8:cf:3c:66:1e:3f:a8:88:b7:15:a3:14:5e:83:ca:aa:28:85:
c2:b8:53:49:d7:91:9e:92:6f:0d:3c:f2:9d:e2:c5:66:6d:b8:
6a:29:ca:9b:0f:b9:14:77:43:17:62:cc:bd:8b:39:06:8f:4c:
f4:e0:bd:53
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA0AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTQzOTdBRjExMC8GA1UEBRMoMDNFMjBFRUYxNTA1MDNBMEIxOTUxMThBRTg4NzY4
N0Y1QTQyNzlDMjAeFw0yNDEwMTcxMTAwNTRaFw0yNTEwMTcxMTAwNTRaMBgxFjAU
BgNVBAMTDTY3MTBlZTZhLTRlYjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDacnzp5EmDE96hnd+VntBb2Vy8z/75v91w8373hW5BtaOjr+iFqcaacP4T
ifhTMCR7CKD1zkmzMnxhYWyzoP3H5RwPgTXuKwpjxI6LG5fiyQuMVapoilgTzb3w
zaVvwXd4Ah64NAGy/ch6mmq8boOrMgY3lL71TkK+kaffuXZ2lLR7pIG+RLDh9JCS
UgFQ+YLd6O5vsrPICdkkJ0qzLMTA9raUYlJZVOwiGm5J2V2ima9lBAs0pT8KpcMD
DzqyAqBYeRfGPmucfKLGrwASDP6CgfjKl5OJDOxrfa9JKi4rJ9a9TxAeo+0399aT
VUJnFC0xlvufZXyt+G0E5T3gJo2HAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU0pxE
Ja2dXvkVGy/700bNKBmqm9kwHwYDVR0jBBgwFoAUA+IO7xUFA6CxlRGK6Idof1pC
ecIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU0Mzk3LzhEN0IzMTgwMUY5NjExRUQ4MjMzRjI4Q0YxMjIyNDY4L0EtSU83
eFVGQTZDeGxSR0s2SWRvZjFwQ2VjSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0EtSU83eFVGQTZDeGxSR0s2SWRvZjFwQ2VjSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjU0Mzk3LzhEN0IzMTgwMUY5NjExRUQ4MjMzRjI4Q0Yx
MjIyNDY4LzE2N0YwMUUyOEM3NzExRUZCNDI4QkM1Qjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm1rQwDQYJKoZIhvcNAQEL
BQADggEBABuCg/eTcBlsHZpOb63AfPkqIMt+9CxjDU2qjn5A8HmNxan5mPUuxibj
aMu9ksPwOW2K86UjOqCFCBLEThhgq9/urVKTYmJZlkYtv6xNoRNNcpRSq06da3i8
v/m8DMXT1qCfg4K0i8EWzF4oCaf96YY0AVkPdmDTA0yvKkDwCmuVKestkNbA6RVZ
YIeZ6SnsrGgZ8W+D7ZNgF6pgzXYYdyX9bYj4Gbl/wuO39qzPHkfXBrXiAL+fVEYz
KUqES0gzDxwW+1Q36djPPGYeP6iItxWjFF6DyqoohcK4U0nXkZ6Sbw088p3ixWZt
uGopypsPuRR3QxdizL2LOQaPTPTgvVM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:34 2024 by rpki-client on console-ams.rpki-client.org