Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/34F917D2770411EDA96E30B4F1222468.roa
File: 34F917D2770411EDA96E30B4F1222468.roa (raw, json)
Hash identifier: NZij2AM4xI89XsMRYjuIH/jJ2N0YqmTdzA3GAsQAexw=
Subject key identifier: 69:E8:2E:2C:1C:E2:DE:50:8B:C2:5F:0C:4C:50:87:0F:37:62:5A:6A
Certificate issuer: /CN=F3652E81AF/serialNumber=813164E535DF5B1B43F8FA6E225DD0FA98CF6FED
Certificate serial: 0193
Authority key identifier: 81:31:64:E5:35:DF:5B:1B:43:F8:FA:6E:22:5D:D0:FA:98:CF:6F:ED
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/34F917D2770411EDA96E30B4F1222468.roa
Signing time: Thu 08 Dec 2022 14:25:47 +0000
ROA not before: Thu 08 Dec 2022 14:25:43 +0000
ROA not after: Fri 31 Dec 2049 14:25:43 +0000
asID: 5713
IP address blocks: 196.13.70.0/24 maxlen: 24
196.13.79.0/24 maxlen: 24
2c0f:f440::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.mft
rsync://rpki.afrinic.net/repository/afrinic/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 26 Jun 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3652E81AF/serialNumber=813164E535DF5B1B43F8FA6E225DD0FA98CF6FED
Validity
Not Before: Dec 8 14:25:43 2022 GMT
Not After : Dec 31 14:25:43 2049 GMT
Subject: CN=6391f3eb-f6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:02:b7:1f:55:f6:f6:5d:f9:73:60:0e:8e:36:
e2:cc:07:b6:c6:d0:80:6a:5c:02:63:19:d2:ed:4e:
1f:2a:35:53:55:7b:83:7a:a9:9c:a3:2f:31:6f:80:
ee:cb:99:45:5b:3c:fe:60:cf:55:d1:ca:96:b4:1f:
15:ef:26:7f:8c:6e:c1:36:9a:f2:4f:10:ab:87:f7:
a5:8b:8d:98:58:aa:3f:9b:33:fe:93:ec:22:9d:7b:
78:71:9b:19:b6:e9:cc:ba:76:47:d5:8b:fb:ee:5c:
dc:66:2e:e6:80:ad:c1:9c:10:eb:f8:ad:bc:08:45:
54:53:ce:b9:0e:92:ab:e1:d9:42:8e:e1:af:9a:9c:
04:e1:d6:5a:ac:00:96:c8:c1:65:9e:4a:7c:c9:e3:
dc:80:59:10:2f:8d:88:5d:1a:b0:6f:63:ee:f5:89:
0d:53:7f:6b:ba:44:e4:f7:24:00:8e:ff:2a:0b:88:
7e:98:1b:31:40:51:1f:60:af:f6:f4:5e:91:2d:c4:
72:d6:5a:87:68:95:2d:b9:2f:bd:21:6b:df:34:f7:
3b:ac:c4:41:9b:91:95:90:27:1a:60:b9:3b:b7:af:
ad:0c:a2:46:79:e3:1c:2b:4f:93:35:2e:47:25:9b:
60:06:22:29:9c:2b:49:db:78:20:a4:77:12:d0:a0:
f7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E8:2E:2C:1C:E2:DE:50:8B:C2:5F:0C:4C:50:87:0F:37:62:5A:6A
X509v3 Authority Key Identifier:
keyid:81:31:64:E5:35:DF:5B:1B:43:F8:FA:6E:22:5D:D0:FA:98:CF:6F:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/34F917D2770411EDA96E30B4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.13.70.0/24
196.13.79.0/24
IPv6:
2c0f:f440::/32
Signature Algorithm: sha256WithRSAEncryption
12:f5:39:c5:2e:39:eb:1a:08:d2:08:d2:67:00:04:b9:2c:54:
5c:6d:77:c3:8a:73:36:bf:d5:6d:72:de:41:ec:c6:a1:69:8b:
a3:22:0b:33:50:47:b4:5b:77:d3:d3:bc:a8:fc:3c:23:0c:15:
e0:e3:50:1b:f8:ab:95:46:c4:ce:6a:71:d8:09:3f:63:90:47:
d0:88:b6:7e:0f:b5:ba:78:2b:c9:d3:4e:34:f0:7b:fc:04:cc:
8f:8e:00:3e:f7:b4:5a:f5:fe:cf:d4:7a:e5:92:7b:8d:5a:5f:
62:12:c5:86:10:1f:61:7d:6e:a7:9a:8d:0c:30:24:ff:cd:e5:
42:a5:9e:26:ed:ef:6e:44:60:7b:36:f3:47:5b:9b:ee:be:b2:
ee:1c:cf:a9:9b:c9:d7:dc:fd:a4:5f:a5:e3:a3:70:5c:7e:67:
82:78:9b:b2:94:1a:9d:d7:1f:c7:29:4b:31:55:5c:48:bf:d7:
00:d5:5c:f4:a4:26:85:92:22:9c:87:56:68:1d:78:db:3b:37:
a9:9f:8b:47:43:24:1a:4f:ed:da:ff:56:73:cc:67:00:da:0f:
e1:23:2c:b1:67:c0:26:cf:bf:26:df:35:94:76:a7:38:ca:82:
e8:23:45:aa:73:3f:a8:1e:48:06:03:18:37:bc:11:1f:6f:f1:
1a:23:ee:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 03:59:02 2024 by rpki-client on console-fra.rpki-client.org