Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/2AA9064EA65E11EF9B4C49B3762E951A.roa
File: 2AA9064EA65E11EF9B4C49B3762E951A.roa (raw, json)
Hash identifier: l3UjS75Wddi3tQ56JCO9mzw04osMIVHGG4lmyDGrGpo=
Subject key identifier: 3D:B5:21:2C:1E:1E:78:17:51:79:A3:23:20:FE:14:3A:6F:4F:E1:17
Certificate issuer: /CN=F3654AD1AF/serialNumber=80D435BBC77094E85B7BF3082580D127B910779E
Certificate serial: 0121
Authority key identifier: 80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/2AA9064EA65E11EF9B4C49B3762E951A.roa
Signing time: Tue 19 Nov 2024 10:08:05 +0000
ROA not before: Tue 19 Nov 2024 10:08:01 +0000
ROA not after: Mon 22 Nov 2027 10:08:01 +0000
asID: 328331
IP address blocks: 2c0f:eb78::/32 maxlen: 32
2c0f:eb78:1000::/36 maxlen: 36
2c0f:eb78:2000::/36 maxlen: 36
2c0f:eb78:3000::/36 maxlen: 36
2c0f:eb78:4000::/36 maxlen: 36
2c0f:eb78:5000::/36 maxlen: 36
2c0f:eb78:6000::/36 maxlen: 36
2c0f:eb78:7000::/36 maxlen: 36
2c0f:eb78:8000::/36 maxlen: 36
2c0f:eb78:9000::/36 maxlen: 36
2c0f:eb78:a000::/36 maxlen: 36
2c0f:eb78:b000::/36 maxlen: 36
2c0f:eb78:c000::/36 maxlen: 36
2c0f:eb78:d000::/36 maxlen: 36
2c0f:eb78:e000::/36 maxlen: 36
2c0f:eb78:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl
rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3654AD1AF/serialNumber=80D435BBC77094E85B7BF3082580D127B910779E
Validity
Not Before: Nov 19 10:08:01 2024 GMT
Not After : Nov 22 10:08:01 2027 GMT
Subject: CN=673c6384-0693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:4b:50:97:1d:0d:09:40:ca:b3:46:31:aa:
ff:96:98:71:4c:57:33:22:57:a0:dd:de:2c:cb:1f:
56:35:3f:e5:01:08:5d:5c:79:bd:8d:74:6e:b2:5f:
0c:91:ac:50:2e:c3:71:2a:30:70:a1:b4:af:f5:6f:
69:15:26:e6:14:4b:ed:42:e8:43:e5:f6:99:b3:27:
fa:1c:82:10:81:47:cd:37:64:fc:06:a3:bd:cd:a7:
a9:86:06:15:00:a8:cf:e8:0c:2a:e9:bd:8b:3a:dd:
98:21:35:b8:03:5f:75:d0:76:70:e0:a1:df:dc:f4:
c4:94:86:e3:8e:44:d8:60:15:e6:75:4f:6b:22:23:
e9:82:e9:eb:d7:a4:24:32:fd:3c:4f:c7:bd:4b:ed:
25:04:47:61:ea:72:1d:17:61:81:0e:66:42:ef:dc:
7b:f3:dd:ad:dc:e6:62:f9:3b:97:59:66:f1:87:fe:
4d:21:3a:70:7f:b0:2e:94:e3:eb:b0:d6:93:89:a6:
74:35:c7:01:90:1d:bd:a1:ea:58:d2:8b:a4:b7:65:
4b:60:0e:1a:89:d8:b2:b3:5e:96:cd:e0:de:7d:7b:
29:63:b8:ae:06:2e:a1:7c:50:c2:ae:de:3a:b4:d7:
d2:2f:69:6a:b7:5b:5d:ed:49:e9:12:03:be:a4:1a:
89:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B5:21:2C:1E:1E:78:17:51:79:A3:23:20:FE:14:3A:6F:4F:E1:17
X509v3 Authority Key Identifier:
keyid:80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/2AA9064EA65E11EF9B4C49B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:eb78::/32
Signature Algorithm: sha256WithRSAEncryption
8d:f4:a1:b4:2e:7d:3b:60:55:0b:30:72:c3:4d:fc:a5:88:e4:
92:72:21:9b:06:e9:09:5e:b1:09:83:b2:55:68:79:40:55:a5:
7b:8f:9d:d7:b8:fc:e5:98:d4:76:41:52:93:2d:40:a6:a8:5c:
0b:0d:02:32:ae:bf:c8:00:9c:75:cd:43:b9:33:cd:ec:5a:44:
32:40:c8:e0:94:10:c5:e3:97:37:e9:db:44:52:12:63:2b:2c:
cf:aa:62:54:e4:70:81:54:6b:29:73:72:95:ce:9e:91:80:04:
43:e7:2b:99:40:ef:b2:1d:7d:7d:6a:cb:34:cc:77:34:64:93:
6f:92:8e:e8:72:97:53:7e:0a:b0:67:ff:c9:ce:7b:04:c6:dd:
fc:bb:85:39:64:d1:2d:bc:68:93:29:17:30:18:a9:e8:ef:50:
b5:63:14:23:8d:b5:a3:23:16:fd:51:3a:a1:a8:33:4b:c2:b4:
8e:76:9f:48:9e:1c:7b:fb:3e:de:27:02:61:f2:bb:1a:09:f5:
5e:d2:a6:2b:3c:56:d3:ba:88:c4:c7:43:2e:da:80:f0:e4:88:
54:e7:f9:08:45:81:5c:c6:9e:e3:a9:b8:27:bd:4c:a8:0c:53:
5a:94:4f:f2:fa:fe:bc:b9:36:a4:be:20:6d:7a:b4:cf:af:b7:
d6:df:04:c9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTRBRDFBRjExMC8GA1UEBRMoODBENDM1QkJDNzcwOTRFODVCN0JGMzA4MjU4MEQx
MjdCOTEwNzc5RTAeFw0yNDExMTkxMDA4MDFaFw0yNzExMjIxMDA4MDFaMBgxFjAU
BgNVBAMTDTY3M2M2Mzg0LTA2OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDD6UtQlx0NCUDKs0Yxqv+WmHFMVzMiV6Dd3izLH1Y1P+UBCF1ceb2NdG6y
XwyRrFAuw3EqMHChtK/1b2kVJuYUS+1C6EPl9pmzJ/ocghCBR803ZPwGo73Np6mG
BhUAqM/oDCrpvYs63ZghNbgDX3XQdnDgod/c9MSUhuOORNhgFeZ1T2siI+mC6evX
pCQy/TxPx71L7SUER2Hqch0XYYEOZkLv3Hvz3a3c5mL5O5dZZvGH/k0hOnB/sC6U
4+uw1pOJpnQ1xwGQHb2h6ljSi6S3ZUtgDhqJ2LKzXpbN4N59eyljuK4GLqF8UMKu
3jq019IvaWq3W13tSekSA76kGonVAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUPbUh
LB4eeBdReaMjIP4UOm9P4RcwHwYDVR0jBBgwFoAUgNQ1u8dwlOhbe/MIJYDRJ7kQ
d54wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU0QUQxLzIyOEY1QjMyQ0YwMTExRUU5NEY1ODZCOTc3NTQxMkU2L2dOUTF1
OGR3bE9oYmVfTUlKWURSSjdrUWQ1NC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2dOUTF1OGR3bE9oYmVfTUlKWURSSjdrUWQ1NC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjU0QUQxLzIyOEY1QjMyQ0YwMTExRUU5NEY1ODZCOTc3
NTQxMkU2LzJBQTkwNjRFQTY1RTExRUY5QjRDNDlCMzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD+t4MA0GCSqGSIb3DQEB
CwUAA4IBAQCN9KG0Ln07YFULMHLDTfyliOSSciGbBukJXrEJg7JVaHlAVaV7j53X
uPzlmNR2QVKTLUCmqFwLDQIyrr/IAJx1zUO5M83sWkQyQMjglBDF45c36dtEUhJj
KyzPqmJU5HCBVGspc3KVzp6RgARD5yuZQO+yHX19ass0zHc0ZJNvko7ocpdTfgqw
Z//JznsExt38u4U5ZNEtvGiTKRcwGKno71C1YxQjjbWjIxb9UTqhqDNLwrSOdp9I
nhx7+z7eJwJh8rsaCfVe0qYrPFbTuojEx0Mu2oDw5IhU5/kIRYFcxp7jqbgnvUyo
DFNalE/y+v68uTakviBterTPr7fW3wTJ
-----END CERTIFICATE-----
Generated at Sun Nov 24 05:19:31 2024 by rpki-client on console-ams.rpki-client.org