Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/C3D711B60EA811EEBCB2FD734AD9E6FC.roa
File: C3D711B60EA811EEBCB2FD734AD9E6FC.roa (raw, json)
Hash identifier: v74BuAK39xflrjP35mv/hhNBB93p0EzHdrXne1JiLfM=
Subject key identifier: B7:88:B7:5C:52:14:25:12:41:19:9B:78:8D:EC:60:C2:25:BD:4E:A7
Certificate issuer: /CN=F3614D1DAF/serialNumber=27793D215F08805DB8D0BA892D336F29AB7BB05B
Certificate serial: 013E
Authority key identifier: 27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/C3D711B60EA811EEBCB2FD734AD9E6FC.roa
Signing time: Mon 19 Jun 2023 13:54:10 +0000
ROA not before: Mon 19 Jun 2023 13:54:05 +0000
ROA not after: Sun 19 Jun 2033 13:54:05 +0000
asID: 329063
IP address blocks: 2c0f:7680::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.mft
rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 318 (0x13e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614D1DAF/serialNumber=27793D215F08805DB8D0BA892D336F29AB7BB05B
Validity
Not Before: Jun 19 13:54:05 2023 GMT
Not After : Jun 19 13:54:05 2033 GMT
Subject: CN=64905e02-6097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0f:53:7f:4b:da:f0:4c:b4:eb:ac:26:7b:e2:
b0:2d:07:b9:d2:75:a5:2b:66:9e:53:34:3f:1f:4f:
cf:7c:39:7d:91:6b:a8:21:d3:2a:0b:38:c5:df:e1:
e0:a3:f1:49:79:21:e5:41:fa:b0:da:bf:1f:2d:a4:
3f:dd:60:e1:7f:b4:b1:d9:d9:47:4d:3e:f0:ee:ac:
28:eb:ef:9b:c6:42:75:11:74:d9:3d:e3:86:91:ed:
05:6e:f6:11:7d:6f:d3:02:aa:0f:f6:1f:00:12:11:
2d:32:a7:ba:bb:3e:62:4a:71:91:9f:87:2b:89:b0:
f9:3a:14:a1:7f:0b:9d:30:2a:5c:09:67:58:c3:8b:
83:20:81:b5:39:ed:4d:c2:67:b6:9e:0c:7f:8f:93:
be:53:11:a7:6b:06:4f:1a:d2:8b:3e:16:d9:63:19:
1b:67:af:8a:81:a6:27:ab:f5:7b:88:e4:c0:33:38:
35:5e:c5:38:24:31:c6:43:29:2e:f9:66:ec:1d:6a:
c0:00:86:68:06:73:d1:87:79:f7:0d:e9:4c:d6:5a:
9a:38:0c:b5:39:18:3c:fc:cd:9a:78:1a:d1:64:fb:
4b:e1:1a:83:c5:1d:b6:45:10:eb:81:5b:dc:3d:f5:
45:8c:f0:1f:92:e8:22:6d:a4:dd:3c:9d:30:09:a5:
d3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:88:B7:5C:52:14:25:12:41:19:9B:78:8D:EC:60:C2:25:BD:4E:A7
X509v3 Authority Key Identifier:
keyid:27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/C3D711B60EA811EEBCB2FD734AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:7680::/32
Signature Algorithm: sha256WithRSAEncryption
34:d4:1e:68:84:6e:74:90:b6:28:d3:9f:af:f3:87:1a:eb:e6:
f1:1a:aa:f2:65:f4:13:2a:7c:4e:30:ff:d9:99:31:11:30:13:
85:53:29:1f:cf:89:4d:4a:f6:0d:08:a8:02:73:e3:e9:52:28:
f9:bd:8c:ec:5b:0c:e3:f7:53:a5:ab:b0:8e:91:b9:c8:91:fe:
66:11:d1:36:a6:74:94:e2:6a:f9:a2:18:0c:98:23:29:52:04:
11:41:a6:66:15:a6:d8:bf:8c:1b:0e:32:c4:e2:db:24:7b:14:
10:07:b7:20:7f:22:61:42:9a:60:4a:41:f8:4d:1f:2c:29:84:
64:32:65:df:61:8c:21:d3:d3:c8:92:60:36:27:14:06:71:d3:
22:96:bf:a4:51:e4:c8:ea:c9:ee:60:81:89:20:16:17:06:f4:
9a:e0:a8:c8:f4:49:38:5b:d7:a1:59:91:ac:bb:b2:81:20:bb:
08:56:40:5c:85:07:f4:40:db:0d:d2:c1:d8:04:ac:02:a6:00:
83:e0:e2:49:ce:b7:df:34:36:13:ff:c4:7b:19:0e:48:41:a5:
df:74:76:8e:d3:1b:58:77:d9:07:2d:e8:e2:e0:35:c5:ef:31:
a1:48:87:0b:e7:51:be:d3:38:1f:ba:c2:1b:7e:13:7b:a9:38:
33:f0:21:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:48:42 2024 by rpki-client on console-fra.rpki-client.org