Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/239555A4B91311EDBDD805C6F1222468.roa
File: 239555A4B91311EDBDD805C6F1222468.roa (raw, json)
Hash identifier: TMW3XM4heg7B+zbYk8n88UWO5D0/PgqY4J8jVrpyTf4=
Subject key identifier: 18:E3:21:26:B0:2C:B8:60:64:12:EE:F7:C8:FF:DF:EB:8C:1F:85:76
Certificate issuer: /CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Certificate serial: 2F
Authority key identifier: 3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/239555A4B91311EDBDD805C6F1222468.roa
Signing time: Thu 02 Mar 2023 15:58:57 +0000
ROA not before: Thu 02 Mar 2023 15:58:54 +0000
ROA not after: Fri 01 Mar 2030 15:58:54 +0000
asID: 33763
IP address blocks: 2c0f:f980:4000::/36 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Validity
Not Before: Mar 2 15:58:54 2023 GMT
Not After : Mar 1 15:58:54 2030 GMT
Subject: CN=6400c7c1-7c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:08:48:dd:8b:0a:15:6c:30:0c:3e:b2:fe:
a3:ea:b8:55:bc:87:e1:fa:89:78:e1:d0:89:6f:8f:
0e:fe:6c:7f:9f:a3:15:44:08:b5:66:84:39:39:a5:
cd:8d:09:61:28:64:26:bf:ab:de:9b:57:b2:40:c6:
01:01:a6:a9:f7:bb:31:42:d7:f4:1b:9f:5c:33:34:
e1:0d:e2:6c:a5:c6:1e:9c:25:eb:59:8e:5d:26:a2:
fd:31:92:c9:30:10:91:eb:42:0f:e2:d1:d9:fb:3c:
03:ac:5e:9d:2c:1d:44:6c:ff:51:f8:30:79:f8:b7:
de:3b:d1:f1:9b:12:25:4e:17:c4:a4:f2:02:88:68:
68:4e:75:b8:fa:d1:e5:9e:b3:e3:9f:70:0a:95:f7:
f8:5c:b2:6d:6b:e5:99:1b:83:1f:cf:ce:1a:a8:b2:
39:4e:3f:5c:e8:d6:9e:f9:40:98:cf:47:a0:8e:d6:
e9:36:0c:5e:4c:66:f6:d0:fb:50:96:77:c3:34:b8:
10:19:f4:a1:46:df:71:c4:9e:5b:b6:67:a9:82:cc:
df:24:0b:ce:12:cf:3c:91:03:33:1d:66:37:fb:07:
46:b0:12:b9:40:a7:02:b2:e0:0a:35:3d:d8:75:0c:
82:3e:4b:a8:c7:54:fd:4a:5b:77:4f:2b:e3:f2:a0:
01:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E3:21:26:B0:2C:B8:60:64:12:EE:F7:C8:FF:DF:EB:8C:1F:85:76
X509v3 Authority Key Identifier:
keyid:3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/239555A4B91311EDBDD805C6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f980:4000::/36
Signature Algorithm: sha256WithRSAEncryption
74:3c:f2:87:82:37:87:9d:c2:a0:23:b1:04:c4:8d:74:5a:fe:
1c:e9:cd:f9:59:72:43:92:5e:c7:34:22:17:6d:1d:36:d7:6e:
a2:5f:b5:a7:dd:0d:48:97:58:ae:c8:59:90:31:a5:20:eb:3d:
af:71:84:d3:15:23:92:7e:a4:31:d1:17:19:87:50:32:ee:fe:
00:28:e3:3f:31:24:5b:40:26:06:73:75:c2:c8:9f:5a:f1:0f:
c4:5b:c7:ba:50:3a:00:87:10:a7:9e:32:3b:6a:08:48:3d:51:
8d:83:d9:7f:da:38:90:7d:76:54:c1:d1:75:e3:39:74:3c:7d:
00:ca:8f:80:02:83:b3:d9:a1:5e:08:d9:f7:e9:b6:e3:95:31:
50:1f:21:70:b2:ee:97:64:b6:30:14:71:84:2b:59:2a:80:86:
7f:b5:c1:53:53:9e:a7:6e:d7:2a:f6:23:fc:73:4f:cb:b1:50:
e8:5a:b0:f4:dd:a0:8b:b8:1b:c4:12:fb:88:b2:b2:78:1e:f4:
9b:12:a3:ca:52:39:ac:02:60:ab:93:11:a2:0c:db:c6:3d:a0:
53:80:88:bf:17:f0:ff:0c:6c:90:81:17:5e:6e:a7:38:b6:35:
c1:b2:f9:b0:b5:2a:70:40:7b:23:be:8b:96:67:a4:5a:31:e6:
be:c3:2f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:56 2024 by rpki-client on console-fra.rpki-client.org