Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/3255F1B205E811EEB9D42B0E4AD9E6FC.roa
File: 3255F1B205E811EEB9D42B0E4AD9E6FC.roa (raw, json)
Hash identifier: ruMc9L1ZMERkRe+ZcxuxH9BzsckOqkXG/2NV9YE/0p0=
Subject key identifier: 13:8B:90:E1:2E:48:BF:4D:44:E7:FF:BB:0B:A0:A6:30:54:70:7C:50
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0704
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/3255F1B205E811EEB9D42B0E4AD9E6FC.roa
Signing time: Thu 08 Jun 2023 10:35:33 +0000
ROA not before: Thu 08 Jun 2023 10:35:29 +0000
ROA not after: Wed 08 Jun 2033 10:35:29 +0000
asID: 36916
IP address blocks: 2c0f:fcb0:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1796 (0x704)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jun 8 10:35:29 2023 GMT
Not After : Jun 8 10:35:29 2033 GMT
Subject: CN=6481aef5-c109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:ab:89:16:2e:c4:bc:bb:fe:8a:13:15:a5:
1f:5b:b5:2a:17:d4:c6:4d:2a:4c:6a:99:ee:72:72:
f1:80:8e:76:9a:9c:19:ad:7e:2d:a9:e1:d1:5f:5b:
23:7c:39:24:c4:27:ac:53:98:15:e8:16:ff:b6:cb:
e1:5b:b3:be:25:d6:fd:78:8a:ff:4a:d1:ef:21:6e:
fb:c8:a0:a1:36:0f:e2:5f:cd:a3:ad:1d:86:8a:23:
1c:ad:b2:53:16:5c:03:c2:4b:8a:eb:26:8a:e9:7e:
cc:80:11:a9:38:ab:67:41:37:5e:20:a4:99:b8:d2:
84:bb:ce:66:60:5b:94:e1:3b:be:54:6b:18:14:a6:
6d:69:31:fe:d9:fe:87:90:0f:69:d7:cd:e2:45:70:
be:d4:21:42:91:bd:8e:ed:0f:e9:d7:1f:1a:cd:fa:
a4:c8:be:89:c1:e2:9e:96:96:bf:80:7c:44:42:17:
42:cd:77:34:af:f4:82:ce:90:fd:97:6e:8b:5b:79:
2b:94:97:e2:87:43:a5:a7:e9:4d:c6:51:7d:55:c4:
83:af:2e:35:ba:95:41:6d:fb:46:75:30:92:64:db:
29:62:e2:7c:59:de:ae:8f:c8:0d:4f:99:a0:0a:c4:
35:57:23:9d:05:ac:57:85:43:ed:f9:f3:61:c2:58:
d5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8B:90:E1:2E:48:BF:4D:44:E7:FF:BB:0B:A0:A6:30:54:70:7C:50
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/3255F1B205E811EEB9D42B0E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fcb0:9000::/36
Signature Algorithm: sha256WithRSAEncryption
95:ae:3f:f8:97:5a:3c:85:21:28:a7:68:6c:e7:ea:d4:ea:c2:
8e:6a:b8:94:75:73:6e:57:e1:9a:e9:43:37:65:62:bb:7a:d5:
d9:21:69:f4:c9:67:68:dd:8e:30:8e:7e:86:ea:8f:86:d9:32:
a7:4b:b3:b6:55:9a:33:d1:24:a8:9f:ec:d1:0b:d2:cb:92:b8:
f4:b4:0a:4a:c1:e1:32:fe:03:30:77:f4:3b:d1:08:0a:54:d4:
a1:5a:8b:85:63:50:26:13:f1:07:7a:0b:49:82:6a:bc:6d:ab:
49:1b:76:9c:4f:20:b0:55:55:7b:57:4b:a3:6e:e1:7f:6a:68:
08:0c:b7:5d:73:60:c6:8f:e2:88:95:cc:fb:78:bb:0b:f0:a2:
04:97:fc:30:55:70:21:62:91:03:f2:c3:1e:16:4a:ea:d8:1c:
a8:88:06:02:ff:3d:76:5c:83:b2:61:a6:c1:f1:d8:3f:3e:4e:
e6:51:28:8e:b8:58:f1:41:45:f2:79:4e:98:c3:11:54:63:7d:
c4:60:05:75:1f:99:b9:0a:5b:6e:7f:31:0e:06:31:9e:ce:36:
fb:fb:ec:07:db:09:17:f2:e1:1a:dd:35:de:11:18:ab:3a:c4:
4e:d8:cb:7c:1d:06:38:09:d1:b5:20:46:82:e0:25:bf:b7:6b:
c4:97:89:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:16 2024 by rpki-client on console-fra.rpki-client.org