Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/399EC6ACDD5E11EF94E31475762E951A.roa
File: 399EC6ACDD5E11EF94E31475762E951A.roa (raw, json)
Hash identifier: gAeSPAZ0k2oD4rBDBXtSvp2FI22GocUMJrD0WxJ/to4=
Subject key identifier: A5:C1:DE:C5:F0:39:59:BC:4C:29:88:2C:5E:F5:BD:62:BE:02:4D:54
Certificate issuer: /CN=F36CEBD2AF/serialNumber=184413EAD0ECC5BE11C711B3E6DFE4B4DCC8D84F
Certificate serial: 01CB
Authority key identifier: 18:44:13:EA:D0:EC:C5:BE:11:C7:11:B3:E6:DF:E4:B4:DC:C8:D8:4F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GEQT6tDsxb4RxxGz5t_ktNzI2E8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/399EC6ACDD5E11EF94E31475762E951A.roa
Signing time: Tue 28 Jan 2025 09:57:04 +0000
ROA not before: Tue 28 Jan 2025 09:57:00 +0000
ROA not after: Sun 28 Jan 2035 09:57:00 +0000
asID: 329263
IP address blocks: 2c0f:14c0::/32 maxlen: 32
2c0f:14c0:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/GEQT6tDsxb4RxxGz5t_ktNzI2E8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/GEQT6tDsxb4RxxGz5t_ktNzI2E8.mft
rsync://rpki.afrinic.net/repository/afrinic/GEQT6tDsxb4RxxGz5t_ktNzI2E8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 02:48:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459 (0x1cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CEBD2AF
Validity
Not Before: Jan 28 09:57:00 2025 GMT
Not After : Jan 28 09:57:00 2035 GMT
Subject: CN=6798a9ef-1062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:5d:f3:66:50:5e:4f:96:b8:a2:c3:bb:f1:
56:a9:2a:f4:b5:3f:4a:77:4f:56:88:d7:56:e4:a5:
1b:00:b1:1c:41:df:6b:17:0e:37:a2:6b:5a:3b:e5:
41:49:36:39:bb:ad:0d:eb:9d:60:20:c8:be:c7:35:
70:11:86:92:f6:04:13:18:bd:3f:e1:c8:20:fe:df:
80:4f:b9:c1:ea:f2:67:0b:18:8b:41:9c:b2:23:ff:
d3:d7:2c:76:2c:3a:61:2e:d4:ad:5c:7d:bd:f5:81:
18:a0:5a:db:d9:11:d7:8a:26:3e:e2:7b:48:ea:bf:
21:d1:4a:1e:21:4d:fb:4b:53:41:b2:39:dc:75:81:
fa:8f:c2:c9:32:4a:7e:fd:e2:76:ea:fe:56:b1:c5:
e6:d8:b6:f2:65:fe:26:97:35:fe:a7:e8:f5:80:e9:
11:ee:47:04:bb:c5:18:b0:94:de:8f:f8:67:f5:e3:
58:32:63:81:b4:1d:54:3b:36:80:ff:10:2e:5a:cf:
ba:19:ff:87:81:6d:a7:ca:ae:f6:ae:9c:3e:bf:07:
d2:b0:82:71:9c:f0:76:e2:90:28:2f:a1:f2:0d:53:
89:1b:ac:72:79:84:b6:08:20:49:72:cf:ca:7d:bb:
8a:a0:2a:39:5e:0b:5d:2d:d8:43:78:a4:bc:97:31:
fc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C1:DE:C5:F0:39:59:BC:4C:29:88:2C:5E:F5:BD:62:BE:02:4D:54
X509v3 Authority Key Identifier:
keyid:18:44:13:EA:D0:EC:C5:BE:11:C7:11:B3:E6:DF:E4:B4:DC:C8:D8:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/GEQT6tDsxb4RxxGz5t_ktNzI2E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GEQT6tDsxb4RxxGz5t_ktNzI2E8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/399EC6ACDD5E11EF94E31475762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:14c0::/32
Signature Algorithm: sha256WithRSAEncryption
92:ab:5a:bb:0f:6c:5d:b1:74:c8:17:df:30:7f:58:00:d0:f6:
7d:ee:4a:b2:eb:a5:8a:dd:9f:f5:e8:91:30:13:00:6c:ef:da:
5e:4d:a5:36:41:cd:43:e8:c4:9c:d6:50:28:0e:73:b3:29:4d:
cb:20:e4:e7:f1:29:30:33:7a:10:37:16:30:36:a7:2b:eb:b5:
61:ee:e0:80:1a:b1:e0:f0:00:b0:9a:e3:bd:1c:31:cc:cf:82:
18:2b:89:9c:19:8b:1c:cf:93:11:6c:27:7f:30:8d:9c:e8:38:
9a:1f:39:a8:79:88:37:34:8c:2b:c0:4a:7e:8b:41:02:b1:91:
c2:48:da:95:b1:81:42:a5:81:3d:93:eb:8b:c2:91:74:d5:6c:
b9:e2:cd:92:3c:02:e3:e1:72:b8:da:14:2d:43:47:66:c3:fe:
45:29:00:86:18:07:76:64:a5:c2:97:8e:11:8f:d0:f3:ae:f2:
84:20:a0:27:2e:27:9d:43:ec:72:5c:dc:7e:e1:86:48:02:8a:
36:c7:70:bc:ea:cb:d8:d9:72:92:9c:ee:cd:3b:9f:58:90:78:
6e:a0:4d:a3:11:94:01:3c:56:ea:eb:ad:fc:33:97:d5:3a:ef:
ca:2f:0f:eb:ae:9b:8f:5b:b5:f0:07:81:eb:01:59:9d:5c:b7:
33:10:2e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:43 2025 by rpki-client