Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/075388F6FCAC11EEB4E57D3E017001B1.roa
File: 075388F6FCAC11EEB4E57D3E017001B1.roa (raw, json)
Hash identifier: eKzAeuVOR3ng3o0dNkBvQwXCrawx7kRQBOnRVRbdKhY=
Subject key identifier: B0:24:4C:26:40:47:ED:38:4B:F9:82:B9:C6:57:32:E7:78:DA:3C:EA
Certificate issuer: /CN=F3659F22AF/serialNumber=5556D637278A4D6987D448763BD3CAEBA058A50F
Certificate serial: 04
Authority key identifier: 55:56:D6:37:27:8A:4D:69:87:D4:48:76:3B:D3:CA:EB:A0:58:A5:0F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/075388F6FCAC11EEB4E57D3E017001B1.roa
Signing time: Wed 17 Apr 2024 11:17:08 +0000
ROA not before: Wed 17 Apr 2024 11:17:05 +0000
ROA not after: Tue 01 Apr 2025 11:17:05 +0000
asID: 328711
IP address blocks: 2c0f:e928::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.mft
rsync://rpki.afrinic.net/repository/afrinic/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F22AF/serialNumber=5556D637278A4D6987D448763BD3CAEBA058A50F
Validity
Not Before: Apr 17 11:17:05 2024 GMT
Not After : Apr 1 11:17:05 2025 GMT
Subject: CN=661fafb4-76da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f4:cf:18:d9:3d:c2:9c:9c:56:a2:8d:55:62:
e7:6e:2a:9b:7b:51:69:2e:e0:85:2c:8f:8a:4b:0e:
95:92:eb:82:4e:af:9c:12:b6:75:0f:88:dd:1f:7d:
d2:77:8f:83:e8:c4:e9:5e:fe:0a:c1:f7:28:2f:2d:
d4:74:c3:1f:af:8a:24:ea:04:af:61:fa:2b:ee:de:
65:3d:47:79:4c:79:9b:98:b5:c0:e1:9d:8c:a3:8b:
77:f0:04:a4:51:62:15:50:ab:ed:c3:ff:11:17:21:
99:24:2c:f2:bc:27:ac:9b:c9:04:e7:a3:6d:b3:34:
18:00:fd:67:29:56:07:79:1f:b4:f6:f9:21:eb:be:
a3:04:b2:d2:3d:65:80:c2:37:60:ab:8d:f3:d7:2c:
94:d5:ee:a5:93:03:51:45:89:a6:67:53:3f:8b:22:
ca:09:61:0a:f1:07:9f:c0:09:56:8d:33:59:9b:cc:
49:45:8d:58:1b:b4:9a:e5:1b:83:61:67:fe:b2:b8:
5e:00:3a:57:fd:92:d1:22:dd:18:57:95:b4:e5:28:
cd:de:27:09:6e:39:d0:ba:a4:9a:0e:bc:a8:55:95:
6e:43:e5:02:7d:bc:3b:24:1e:5f:61:aa:cc:5b:46:
e3:e7:af:d1:4a:1a:f6:80:03:10:35:eb:1f:4a:7e:
f4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:24:4C:26:40:47:ED:38:4B:F9:82:B9:C6:57:32:E7:78:DA:3C:EA
X509v3 Authority Key Identifier:
keyid:55:56:D6:37:27:8A:4D:69:87:D4:48:76:3B:D3:CA:EB:A0:58:A5:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VVbWNyeKTWmH1Eh2O9PK66BYpQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F22/9A0832F6FCAB11EEA6901B3D017001B1/075388F6FCAC11EEB4E57D3E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:e928::/32
Signature Algorithm: sha256WithRSAEncryption
71:6b:67:79:d6:b8:b7:0e:16:db:ae:79:23:a3:70:13:ca:d7:
15:44:69:9e:22:7f:52:2a:84:b6:18:1d:93:6d:5a:d2:65:f7:
a0:64:4c:50:d7:bf:1f:99:da:68:c9:92:46:0b:ae:61:1c:bb:
8b:2c:18:cb:6a:eb:63:f3:aa:6f:44:95:63:da:70:34:f9:ff:
1d:59:dd:d3:98:1a:fc:6c:5f:e9:a0:66:00:51:88:19:b6:a6:
45:50:32:d3:2d:06:08:44:9b:5f:89:6c:5d:51:7f:11:5e:f8:
47:4d:e6:e7:de:6a:e7:6b:4a:08:0c:4c:a1:c2:88:c2:92:cd:
98:56:00:e4:2b:19:13:37:12:31:d9:f9:8e:5e:3b:4e:ec:a8:
24:ac:bc:44:63:69:60:35:2e:ef:f2:ea:3b:c9:ac:b5:c2:41:
df:80:a0:31:55:02:4b:bc:f4:69:47:28:22:40:ad:a3:13:71:
d4:aa:13:4f:22:cc:57:5d:23:87:53:e7:bf:3f:a5:f5:53:bd:
04:2f:3b:26:ee:d6:b8:c6:ec:35:53:46:7e:37:37:c3:b7:6c:
61:4a:15:db:27:49:be:b2:5c:db:c4:da:a5:d0:b7:ca:8f:c5:
f2:64:18:2c:10:14:8b:60:e0:9c:05:13:3e:44:b3:2a:8f:5b:
df:78:6b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:56:33 2024 by rpki-client on console-ams.rpki-client.org