Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/0A4A7D2C53E011EF97D46343762E951A.roa
File: 0A4A7D2C53E011EF97D46343762E951A.roa (raw, json)
Hash identifier: qkXQan1qrLXn2t2IrFjyvM/NvTWvb3OJlxtePnzO678=
Subject key identifier: 56:AB:38:B3:0A:69:AC:22:54:93:45:00:A2:AF:38:2B:DC:6D:AA:07
Certificate issuer: /CN=F3697E68AF/serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
Certificate serial: 14
Authority key identifier: CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/0A4A7D2C53E011EF97D46343762E951A.roa
Signing time: Tue 06 Aug 2024 10:38:38 +0000
ROA not before: Tue 06 Aug 2024 10:38:35 +0000
ROA not after: Wed 30 Apr 2025 10:38:35 +0000
asID: 329130
IP address blocks: 102.214.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3697E68AF/serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
Validity
Not Before: Aug 6 10:38:35 2024 GMT
Not After : Apr 30 10:38:35 2025 GMT
Subject: CN=66b1fd2e-3835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e6:72:15:c4:9b:d7:d7:e9:78:3f:3d:38:51:
20:be:68:98:91:31:d3:25:a6:b3:15:4f:3f:09:8f:
ba:1f:29:11:3a:22:bf:53:f4:4d:e0:14:6e:fd:30:
23:8a:ac:e0:49:ef:0d:e4:de:06:9b:f6:5b:bd:31:
cc:e5:6b:fe:cb:5d:7e:f5:e3:15:d1:18:53:22:03:
16:ee:f7:0d:ba:a1:3c:4e:99:57:d8:55:9f:ea:d8:
6a:40:34:d9:37:1e:de:d0:16:81:87:0a:f3:6c:7a:
59:a2:87:21:79:cd:c9:2e:88:f2:f7:b5:df:c9:43:
23:d9:21:a5:43:f5:97:03:c0:c2:e4:26:b4:b8:40:
e5:8e:3b:c0:c5:85:4b:a5:4d:bf:1a:ea:23:77:78:
9d:f2:15:95:38:0e:5d:fd:f2:3d:55:de:1d:56:7b:
ae:23:3f:85:e6:f9:48:49:07:ec:a3:54:71:48:55:
12:61:da:99:e9:fb:ba:72:d7:4b:a8:98:6f:08:81:
d2:9d:5a:bd:34:ee:13:45:6d:d6:fa:7b:79:a7:ed:
6e:fb:43:de:af:c1:0d:60:2a:c4:d1:0b:b7:a3:bb:
2f:00:2f:ce:99:4a:fa:d6:f6:6d:28:91:e3:c8:08:
0d:7d:cd:9f:df:6b:65:a1:e3:2f:7d:56:60:35:23:
25:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AB:38:B3:0A:69:AC:22:54:93:45:00:A2:AF:38:2B:DC:6D:AA:07
X509v3 Authority Key Identifier:
keyid:CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/0A4A7D2C53E011EF97D46343762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.164.0/24
Signature Algorithm: sha256WithRSAEncryption
06:41:38:88:21:e3:31:d3:b9:cc:26:b7:8b:5b:48:47:a9:6a:
0f:c8:87:19:c1:53:a8:85:f8:ab:a2:0c:1f:28:a1:63:5e:4c:
e8:d7:39:57:a5:f9:74:55:a9:0d:e8:c4:bc:b5:a6:31:b4:c5:
4a:ef:1e:77:1f:46:8e:da:b3:c3:a9:2e:17:dd:a6:8e:0d:3a:
7c:d2:1e:d5:f9:76:64:6e:67:f8:b8:5d:ec:f9:7e:d3:36:ba:
1e:6e:76:5c:38:f2:22:df:67:78:b0:26:54:90:08:c6:46:99:
f8:0c:94:53:6c:49:a7:c4:48:34:d1:3a:8a:c6:ba:4e:dc:6d:
77:10:e8:50:9f:0e:23:99:20:74:ec:e7:bb:0d:85:38:b8:68:
3f:e9:67:b4:0c:7a:84:31:1c:be:39:33:e4:76:c9:8b:44:e2:
d8:a2:6f:00:eb:5f:42:fc:95:c8:84:46:2f:d2:ce:28:74:ac:
a3:e5:c9:9d:04:b9:b4:93:86:e9:ec:51:d6:e1:95:de:ed:20:
9b:3e:10:f6:4d:45:a1:61:45:8e:2e:88:4d:ef:3f:43:8a:ec:
76:e2:35:8f:29:2c:99:ff:b9:d8:60:f7:7f:9d:7e:90:55:68:
23:f6:db:ab:d1:ae:8e:88:fb:e3:7d:b8:90:fb:5d:78:b0:f7:
0d:07:f7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 06:47:49 2024 by rpki-client on console-fra.rpki-client.org