Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/20A24EFC93DD11EDA6760996F1222468.roa
File: 20A24EFC93DD11EDA6760996F1222468.roa (raw, json)
Hash identifier: 0gjhKZEga0GHpw3rTSTf/B5t+TBRrTywPRuXfAT6Utw=
Subject key identifier: 77:56:13:F8:E2:32:42:1D:70:C4:7A:ED:1C:D5:32:4F:C4:57:FB:B0
Certificate issuer: /CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
Certificate serial: 0C12
Authority key identifier: 8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/20A24EFC93DD11EDA6760996F1222468.roa
Signing time: Sat 14 Jan 2023 07:29:06 +0000
ROA not before: Sat 14 Jan 2023 07:29:03 +0000
ROA not after: Thu 31 Jan 2030 07:29:03 +0000
asID: 33764
IP address blocks: 2001:43f8:d00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl
rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.mft
rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3090 (0xc12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
Validity
Not Before: Jan 14 07:29:03 2023 GMT
Not After : Jan 31 07:29:03 2030 GMT
Subject: CN=63c259c2-885f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ae:76:19:cf:ac:0a:89:e4:27:a3:06:30:39:
32:85:76:4c:5f:b9:cc:5d:2f:e6:e8:6f:da:89:4b:
bd:78:4d:1f:5d:4c:9e:64:21:4d:dc:ac:31:01:77:
fe:0e:0b:d3:04:83:12:e6:fe:79:51:77:e0:02:b2:
dd:81:5a:10:48:8a:e9:1f:1e:bf:d7:14:0f:fb:86:
d3:88:f0:89:ed:2d:7e:26:74:19:1a:8f:8a:d6:cb:
b4:ab:9b:78:d0:43:92:2e:07:83:4a:48:b1:14:46:
a4:c1:ce:35:78:e0:a7:88:e7:6b:27:97:d2:ad:c7:
d4:38:3a:c5:c7:eb:b2:07:6a:9b:d2:0d:3a:99:f1:
8d:4b:46:08:a1:e6:22:b6:98:73:a5:b5:2d:67:a0:
e9:85:95:aa:09:86:8d:44:d4:a6:24:6b:0a:f8:54:
71:4d:fc:28:26:cc:dc:02:30:20:ea:0d:7a:91:59:
eb:1d:71:9b:da:c7:d6:63:b8:94:a1:0f:e2:09:14:
47:83:1a:7b:4d:57:db:f7:88:61:21:48:1b:d3:7b:
89:f2:f9:12:1a:c7:66:ea:4c:01:02:b9:3d:0f:e8:
b6:54:8b:ce:31:b1:4b:be:a5:37:89:8b:18:9e:4f:
0f:72:75:81:41:d3:ed:99:f9:03:ef:a2:7c:0e:d4:
75:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:56:13:F8:E2:32:42:1D:70:C4:7A:ED:1C:D5:32:4F:C4:57:FB:B0
X509v3 Authority Key Identifier:
keyid:8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/20A24EFC93DD11EDA6760996F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:d00::/48
Signature Algorithm: sha256WithRSAEncryption
61:88:ea:1a:eb:26:e0:1b:cd:e0:e3:c7:30:6f:34:24:b7:85:
24:27:d2:a4:9a:dc:8c:f5:37:f0:89:a0:74:98:03:8b:1a:74:
bf:35:4d:e7:ad:c5:36:39:87:99:bd:37:e1:23:c8:2c:ee:6d:
aa:fd:18:de:cc:6b:3e:fa:cb:fb:42:00:73:21:e6:15:5f:94:
a9:71:c1:85:96:f1:9b:73:1c:18:91:e1:70:2a:9b:f3:75:2a:
d4:25:41:2a:27:79:bb:bc:83:11:f9:bc:dd:a9:76:a9:6f:28:
f3:91:b6:05:1b:b2:7a:7a:e7:2a:d0:32:62:9c:d3:df:23:c8:
c8:73:c7:35:b7:31:ab:61:5b:36:2b:4b:60:3a:64:2d:62:1f:
8e:ef:8c:33:a3:95:48:97:b3:17:ef:21:ed:fb:f6:b8:57:ff:
f7:a1:80:cc:e0:6d:25:91:80:5f:f7:b0:b0:5c:96:eb:33:9f:
d4:6f:50:42:8c:fa:3f:2e:4f:30:17:c7:85:09:f5:1e:ab:5a:
d2:f0:b1:f4:4b:33:be:82:1b:0e:13:fc:48:60:48:ff:af:71:
ed:61:8b:30:c3:4c:a6:a9:8d:25:e4:0a:7b:91:19:e7:45:24:
a0:29:86:f7:d1:fb:cd:18:a0:92:3d:23:42:e7:7c:bd:f8:9a:
e0:3e:ab:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 01:41:12 2024 by rpki-client on console-fra.rpki-client.org