Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/CBF2E4B829EC11F0A80400EBDAE4EC9C.roa
File: CBF2E4B829EC11F0A80400EBDAE4EC9C.roa (raw, json)
Hash identifier: JxQxoQO5e0xyVP8JrZC6HNTSh2BQxTdpde2yD+5NMPI=
Subject key identifier: 93:5E:2F:43:78:EF:7B:DA:AC:6C:9A:5E:40:32:C1:77:20:DD:24:35
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 066A
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/CBF2E4B829EC11F0A80400EBDAE4EC9C.roa
Signing time: Mon 05 May 2025 20:09:06 +0000
ROA not before: Mon 05 May 2025 20:09:01 +0000
ROA not after: Mon 13 May 2030 20:09:01 +0000
asID: 47585
IP address blocks: 102.215.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 02:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1642 (0x66a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: May 5 20:09:01 2025 GMT
Not After : May 13 20:09:01 2030 GMT
Subject: CN=68191ae2-b072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:09:f8:b7:f0:3a:7c:df:21:2f:76:86:da:
df:12:f6:21:f6:e2:f5:6b:1d:38:fe:02:99:67:da:
a3:06:a0:51:00:50:24:58:55:58:26:dd:85:b6:c3:
7e:e2:33:e1:99:88:3f:9d:89:ea:95:d7:44:64:c7:
33:ea:1d:96:31:76:9f:a3:2e:d1:07:bd:83:84:93:
6c:6f:79:63:ae:29:52:93:38:e2:a8:a2:8e:78:18:
c7:53:3b:94:fa:73:a0:fa:fc:5c:51:ef:3d:17:21:
68:99:54:54:75:0a:7e:6d:25:8b:9c:92:ae:00:aa:
b7:39:24:5c:47:30:27:df:d5:eb:16:19:41:b8:f2:
de:6f:4e:86:40:da:76:71:41:4f:5d:a6:e8:72:63:
e9:2f:40:7b:13:9a:6d:41:ac:65:ab:d6:73:cc:42:
d1:0c:3b:68:2f:4f:8c:9b:af:14:5f:c8:1b:ed:18:
7f:91:c5:e8:c5:15:10:4a:a4:1b:0d:43:d5:5c:08:
c5:bd:b8:1a:ab:bf:24:7a:8a:e6:7a:e0:9b:36:3d:
2c:97:c2:b1:30:6b:ff:87:49:1b:b7:64:a5:a3:4c:
33:3d:5a:15:ee:79:8a:be:37:0a:45:73:46:77:a5:
57:78:2c:c1:95:28:9f:81:be:15:2e:23:88:4e:44:
b1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5E:2F:43:78:EF:7B:DA:AC:6C:9A:5E:40:32:C1:77:20:DD:24:35
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/CBF2E4B829EC11F0A80400EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.224.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:52:bf:6b:7d:01:60:6d:08:fa:45:4a:24:b5:7f:1c:fb:b7:
43:40:f8:8b:3d:a8:d8:18:98:c3:18:ee:99:e6:4a:a9:a6:a2:
8d:16:f7:07:0d:91:c2:b4:f4:24:16:d7:64:14:c3:31:3c:6d:
55:c9:7e:c6:37:4a:27:39:96:f4:c2:0a:9e:06:62:1d:15:a3:
6c:55:82:a6:86:52:4f:ff:a3:7f:5d:3c:47:ae:80:89:a1:b8:
bb:b9:2a:ec:3d:69:71:fd:aa:15:55:3f:ef:f5:ba:63:ef:79:
cf:a5:40:61:84:c4:e3:90:fe:e8:fa:87:38:e2:6b:22:8b:58:
45:ed:48:4d:23:b4:03:a4:79:3b:80:82:d8:42:15:74:e8:2e:
7c:4f:fd:e9:1c:37:54:10:82:e2:6f:38:89:bf:ae:2b:dd:54:
4d:69:d4:d5:4c:cb:d2:a9:98:fb:a6:f5:35:51:a7:03:3f:01:
6a:b0:97:55:b6:a5:fc:cd:3b:a0:6d:a1:5f:7b:2c:fa:16:cb:
44:32:d0:ee:8f:f3:65:a9:2b:7a:b1:20:f2:4e:6b:b9:bd:40:
41:64:44:00:ff:f4:d3:89:17:f5:99:5d:a9:bf:3e:d3:28:c0:
aa:5e:f0:2a:07:78:14:5d:51:ac:7f:56:36:2c:f0:30:22:9d:
01:88:4a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:50:40 2025 by rpki-client