Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/EB0E0D70B90D11ED810EF2B6F1222468.roa
File: EB0E0D70B90D11ED810EF2B6F1222468.roa (raw, json)
Hash identifier: qjnrwe3aS+ux+xzqGjAAbOm7cFsu1KPed2tIU2bivU0=
Subject key identifier: 74:55:35:79:88:FE:A8:EB:21:64:DE:93:4E:F3:CE:88:13:98:80:D1
Certificate issuer: /CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Certificate serial: 1F
Authority key identifier: 3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/EB0E0D70B90D11ED810EF2B6F1222468.roa
Signing time: Thu 02 Mar 2023 15:21:35 +0000
ROA not before: Thu 02 Mar 2023 15:21:31 +0000
ROA not after: Mon 02 Mar 2026 15:21:31 +0000
asID: 33763
IP address blocks: 197.234.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Validity
Not Before: Mar 2 15:21:31 2023 GMT
Not After : Mar 2 15:21:31 2026 GMT
Subject: CN=6400beff-d6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:62:ab:07:3c:a5:48:3f:c2:9a:79:66:31:89:
00:36:74:cb:4a:8d:fa:ee:96:29:f8:1f:18:16:ca:
bb:53:9c:9c:29:f4:77:87:e8:19:b7:5c:c3:75:4a:
fa:c3:57:d9:7f:e9:ad:59:69:0f:a1:06:39:df:a8:
16:aa:19:e0:4d:43:2c:46:f5:c5:28:ba:93:13:25:
5b:30:49:ad:70:fe:29:b1:26:34:c9:38:cf:95:e0:
f0:ed:85:5d:1a:37:6e:3e:6a:08:b7:d0:74:86:32:
72:75:8f:69:2f:a9:6e:06:e8:ef:c0:7c:07:6d:22:
6c:b8:39:98:91:73:03:03:c7:1e:26:17:8c:f1:e1:
76:cc:73:4b:f8:7d:a7:73:c5:c3:0c:73:03:d7:38:
08:5c:d6:10:f9:6d:dd:90:47:60:64:91:72:df:f1:
f9:b4:d2:18:4c:15:a0:6c:b7:5d:f8:ec:78:79:28:
c3:92:d2:ec:df:81:84:9b:fe:91:4a:a1:d4:c5:fd:
6f:34:76:1a:3d:73:78:0e:0f:f9:f2:f6:86:c1:dc:
e3:50:d1:7d:26:4e:0b:4e:fe:11:00:7b:5c:30:60:
97:90:7a:5f:56:74:99:70:0d:ab:3b:37:16:32:e6:
33:74:0d:da:3c:7d:ce:34:59:dc:2a:9e:70:f6:d8:
0d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:55:35:79:88:FE:A8:EB:21:64:DE:93:4E:F3:CE:88:13:98:80:D1
X509v3 Authority Key Identifier:
keyid:3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/EB0E0D70B90D11ED810EF2B6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.234.80.0/20
Signature Algorithm: sha256WithRSAEncryption
74:33:34:f0:62:e9:35:f7:d6:df:7c:3c:0a:e6:c1:87:a1:1a:
28:b1:fa:60:b3:3f:b2:bc:9a:f7:6a:0b:a8:77:ba:df:ae:9c:
26:25:ee:69:b5:dd:20:07:9f:b7:38:de:6b:e8:20:44:58:fb:
80:f9:5d:28:42:9e:97:81:56:b4:12:12:f8:0f:51:c4:79:f0:
05:32:46:37:40:09:5c:a4:0b:ab:de:2a:be:c4:9b:b1:02:47:
ed:75:fe:15:66:33:60:d8:14:60:27:9f:94:98:b3:f4:5d:1d:
26:a2:c5:72:06:5a:1d:85:c9:83:26:fd:23:9a:00:c5:9a:86:
8b:79:3b:7f:5e:99:40:eb:63:a5:a7:78:7b:8c:4d:0c:85:14:
ab:02:e7:b0:78:28:fe:eb:43:e7:66:f7:2a:f2:48:73:2e:06:
ff:62:5d:17:c1:76:b4:09:f6:dd:11:7e:50:27:e8:41:e9:b6:
0a:e3:50:c6:5b:ea:1c:b3:e2:b1:2d:ac:5d:78:74:a2:6c:af:
dc:e1:6a:99:7e:c4:cd:d3:4e:01:9e:70:ce:d2:91:ff:b6:cd:
24:b2:5b:c0:a1:f9:f3:38:5b:c2:0e:7d:28:45:0e:ef:20:7c:
f4:a2:a7:77:77:5d:57:96:5d:47:8b:b7:3a:48:68:d3:2c:a9:
d5:76:95:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:56 2024 by rpki-client on console-fra.rpki-client.org