Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA3E3/826086642E3311ED9DD7C8EFF1222468/CEB318502E3411ED8DC02BF3F1222468.roa
File: CEB318502E3411ED8DC02BF3F1222468.roa (raw, json)
Hash identifier: Wm4DcMTnAivsk/On/IdgoSuvphYObO138D3HduLkIjA=
Subject key identifier: 6F:4F:5F:90:19:CC:E2:07:4D:B5:EB:86:1C:42:C6:1C:B2:BB:A4:61
Certificate issuer: /CN=F36BA3E3AF/serialNumber=AFAC0AB31A4066808F00919F1D828ED7B41AC26A
Certificate serial: 0A
Authority key identifier: AF:AC:0A:B3:1A:40:66:80:8F:00:91:9F:1D:82:8E:D7:B4:1A:C2:6A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/r6wKsxpAZoCPAJGfHYKO17Qawmo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BA3E3/826086642E3311ED9DD7C8EFF1222468/CEB318502E3411ED8DC02BF3F1222468.roa
Signing time: Tue 06 Sep 2022 22:39:46 +0000
ROA not before: Wed 07 Sep 2022 22:39:42 +0000
ROA not after: Wed 30 Apr 2031 22:39:42 +0000
asID: 327750
IP address blocks: 2c0f:3480::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BA3E3/826086642E3311ED9DD7C8EFF1222468/r6wKsxpAZoCPAJGfHYKO17Qawmo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BA3E3/826086642E3311ED9DD7C8EFF1222468/r6wKsxpAZoCPAJGfHYKO17Qawmo.mft
rsync://rpki.afrinic.net/repository/afrinic/r6wKsxpAZoCPAJGfHYKO17Qawmo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BA3E3AF/serialNumber=AFAC0AB31A4066808F00919F1D828ED7B41AC26A
Validity
Not Before: Sep 7 22:39:42 2022 GMT
Not After : Apr 30 22:39:42 2031 GMT
Subject: CN=6317cc32-8dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bd:be:c6:39:9d:1b:66:21:6a:55:1b:c4:c4:
f5:dd:24:83:6e:5b:32:a7:bc:6b:56:16:f1:33:ef:
6d:a5:a2:64:4b:d8:b8:4f:a0:76:bf:67:4f:2a:36:
0d:b4:81:11:61:71:a5:62:a0:81:d4:f5:9b:dd:10:
24:7b:1b:2a:d8:f0:3c:4b:4a:26:40:38:8a:e9:9c:
b1:b6:35:8d:13:9d:ab:d9:e3:57:34:92:41:48:92:
95:4e:39:a2:dd:4d:be:9b:a0:21:e8:66:21:10:d5:
e7:04:ba:94:63:19:bd:e3:26:1e:30:ae:ba:4c:86:
c9:fc:40:4e:0f:bb:4a:33:04:17:a0:a8:cc:4f:c9:
96:0c:14:f9:d7:ac:60:66:cb:82:77:f2:35:58:1a:
ac:a6:f1:af:8d:96:d2:4f:46:e4:79:74:75:48:d3:
ce:e9:a3:04:b2:5e:33:29:96:c4:1d:84:e2:21:03:
95:2c:a8:94:91:19:23:80:ba:c7:f7:5e:c0:f6:1f:
b6:cb:eb:43:42:b6:e3:8c:92:6d:95:fd:c9:bd:bf:
2c:a7:d8:7d:46:b3:e8:0a:81:85:95:cc:21:20:29:
74:d8:e7:07:17:46:f8:18:5e:01:b3:51:83:0a:2e:
41:6b:79:48:f4:be:f6:83:e7:af:3d:1e:e4:81:25:
99:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4F:5F:90:19:CC:E2:07:4D:B5:EB:86:1C:42:C6:1C:B2:BB:A4:61
X509v3 Authority Key Identifier:
keyid:AF:AC:0A:B3:1A:40:66:80:8F:00:91:9F:1D:82:8E:D7:B4:1A:C2:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA3E3/826086642E3311ED9DD7C8EFF1222468/r6wKsxpAZoCPAJGfHYKO17Qawmo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/r6wKsxpAZoCPAJGfHYKO17Qawmo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA3E3/826086642E3311ED9DD7C8EFF1222468/CEB318502E3411ED8DC02BF3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:3480::/32
Signature Algorithm: sha256WithRSAEncryption
59:9e:10:e1:bb:e9:17:d4:31:36:f8:3c:15:0e:42:d6:6e:27:
48:0e:5a:23:a9:c2:37:7c:92:a9:48:fb:9a:cf:7e:75:6b:be:
0e:d3:fa:e8:0e:ed:27:ed:8c:71:e9:e6:fa:27:51:ed:15:f2:
0d:11:cb:88:55:66:1f:35:e5:c6:24:db:f4:c3:30:e0:5c:e4:
eb:51:2a:23:f0:c1:b4:b1:ee:bc:e3:37:1b:94:d4:f2:90:e1:
af:00:21:33:30:d5:0c:b1:fa:78:b6:63:ec:a8:56:77:59:bf:
fe:a2:93:55:ce:93:50:f0:15:c5:bd:19:a2:94:c7:22:90:eb:
62:08:96:12:e1:8b:50:40:92:b8:57:b9:38:23:7d:59:12:ec:
eb:38:5d:83:b6:79:59:9e:7a:68:02:57:76:0c:9d:81:66:12:
40:30:f9:2f:8f:8c:98:a8:72:e1:f1:5e:f9:e0:5e:e5:0e:cf:
76:11:84:0c:ca:32:de:24:ac:88:13:9c:a8:e3:34:c6:e4:ec:
bb:f0:ae:af:1e:7e:ca:b4:0b:de:f6:56:4f:b5:40:c1:9f:22:
e2:ec:03:36:3d:98:13:26:77:75:f0:24:59:6a:e9:f9:14:da:
4f:2f:d5:ca:8b:d9:6f:5b:db:91:5b:97:28:cf:49:6d:98:73:
2e:db:1b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:07:18 2024 by rpki-client on console-ams.rpki-client.org