Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/342B0810B63B11EF90F7939C762E951A.roa
File: 342B0810B63B11EF90F7939C762E951A.roa (raw, json)
Hash identifier: l3I41iULJYlF36FRhP6SJO14dWpBvDvvDbngMyHy1DY=
Subject key identifier: EA:6C:DC:36:BB:BA:97:AE:FA:E6:53:21:50:63:43:41:01:0F:42:61
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 074B
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/342B0810B63B11EF90F7939C762E951A.roa
Signing time: Mon 09 Dec 2024 14:38:07 +0000
ROA not before: Mon 09 Dec 2024 14:38:03 +0000
ROA not after: Sat 30 Jul 2033 14:38:03 +0000
asID: 37119
IP address blocks: 2c0f:f888:a900::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1867 (0x74b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF
Validity
Not Before: Dec 9 14:38:03 2024 GMT
Not After : Jul 30 14:38:03 2033 GMT
Subject: CN=675700cf-a8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b9:fb:57:a1:43:97:ba:fe:3c:5e:a1:e9:77:
f1:f4:7d:37:4d:d5:f3:e9:69:ab:49:55:e6:fa:8e:
1b:a0:33:16:22:11:39:84:76:2d:4f:8a:de:ff:8f:
89:ef:5d:f1:05:21:39:0a:a0:a1:44:2a:be:01:fd:
4e:f1:c6:02:f1:f7:20:45:6e:a3:e0:92:4c:79:87:
81:6f:9e:54:29:12:29:0a:01:bf:67:1d:6c:50:c9:
7d:20:74:af:ef:b4:ef:03:7c:9d:2b:0c:dc:f7:05:
0e:da:4e:99:7d:47:fa:03:65:23:a1:b8:3c:a8:07:
1e:bf:02:85:66:e3:26:e8:d5:b6:24:20:b9:2f:30:
a6:20:8f:de:63:a9:c5:f7:28:51:f3:ca:c1:26:30:
cd:e8:56:03:3f:a1:d8:ec:69:b8:64:35:74:51:02:
d2:1e:87:33:7e:bc:89:91:22:24:97:4d:88:f6:a2:
96:eb:fb:63:76:63:a0:b0:df:09:bc:7f:84:a6:b0:
5a:81:a7:00:9b:de:28:2f:4b:4e:7f:f0:29:b6:2e:
4b:5d:17:2b:ad:a5:c6:1b:e3:de:28:67:ca:aa:e7:
4a:e8:75:dd:f4:f8:f1:36:ee:ce:ea:4e:85:19:29:
71:89:b4:77:b7:ad:fe:a4:6f:3a:00:44:dd:8d:35:
2a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6C:DC:36:BB:BA:97:AE:FA:E6:53:21:50:63:43:41:01:0F:42:61
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/342B0810B63B11EF90F7939C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:a900::/44
Signature Algorithm: sha256WithRSAEncryption
be:cb:56:e7:cb:42:a8:8e:ad:fd:06:73:23:fa:02:02:ad:26:
0b:52:18:46:44:e8:8c:56:e3:c5:69:00:6c:60:a2:4e:8c:94:
72:d1:54:4a:09:b8:48:bb:07:50:84:b9:8b:47:59:7c:e4:62:
04:4c:72:4e:71:95:d3:d9:9f:dc:86:99:4c:62:86:58:24:3e:
77:f6:7f:97:af:68:4b:cc:b9:74:85:0c:fe:88:d7:a0:3e:9b:
f3:e8:29:9c:d9:2b:32:9a:a6:3e:ee:61:dc:56:e6:7f:40:a3:
72:3f:ba:a6:37:a8:50:08:25:7d:68:08:4f:dc:7d:7c:42:69:
fa:5c:ff:96:e0:32:b1:66:04:72:31:96:0f:98:a4:ab:0d:6c:
28:d3:87:a8:33:7a:5e:33:17:4b:bc:95:b0:e8:f7:6b:7f:42:
31:b8:ae:62:86:66:63:77:c9:9c:93:63:63:75:d0:5c:2b:ee:
9b:e3:31:01:b6:41:ab:27:1a:3b:9e:0f:a1:7e:72:51:e9:1c:
9c:d2:f9:9e:9b:21:96:47:33:3f:ab:31:6c:76:0a:76:10:ca:
62:91:01:9b:a6:db:77:82:89:4a:08:7b:17:ee:cd:41:1e:a1:
ad:a4:ec:aa:d6:ec:01:48:a5:0a:a0:c4:91:f1:ce:dd:06:a2:
07:c8:0d:ad
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICB0swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDBGNTBBRjExMC8GA1UEBRMoQUU5OEE1RkRBRDJEQzlGNEZDMUJFNDdGNjY4NTdB
OEM0Nzk4ODEwMjAeFw0yNDEyMDkxNDM4MDNaFw0zMzA3MzAxNDM4MDNaMBgxFjAU
BgNVBAMTDTY3NTcwMGNmLWE4YWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDduftXoUOXuv48XqHpd/H0fTdN1fPpaatJVeb6jhugMxYiETmEdi1Pit7/
j4nvXfEFITkKoKFEKr4B/U7xxgLx9yBFbqPgkkx5h4FvnlQpEikKAb9nHWxQyX0g
dK/vtO8DfJ0rDNz3BQ7aTpl9R/oDZSOhuDyoBx6/AoVm4ybo1bYkILkvMKYgj95j
qcX3KFHzysEmMM3oVgM/odjsabhkNXRRAtIehzN+vImRIiSXTYj2opbr+2N2Y6Cw
3wm8f4SmsFqBpwCb3igvS05/8Cm2LktdFyutpcYb494oZ8qq50rodd30+PE27s7q
ToUZKXGJtHe3rf6kbzoARN2NNSoLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6mzc
Nru6l6765lMhUGNDQQEPQmEwHwYDVR0jBBgwFoAUrpil/a0tyfT8G+R/ZoV6jEeY
gQIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4QUVBMjI4L3JwaWxf
YTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JwaWxfYTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4
QUVBMjI4LzM0MkIwODEwQjYzQjExRUY5MEY3OTM5Qzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQsD/iIqQAwDQYJKoZIhvcN
AQELBQADggEBAL7LVufLQqiOrf0GcyP6AgKtJgtSGEZE6IxW48VpAGxgok6MlHLR
VEoJuEi7B1CEuYtHWXzkYgRMck5xldPZn9yGmUxihlgkPnf2f5evaEvMuXSFDP6I
16A+m/PoKZzZKzKapj7uYdxW5n9Ao3I/uqY3qFAIJX1oCE/cfXxCafpc/5bgMrFm
BHIxlg+YpKsNbCjTh6gzel4zF0u8lbDo92t/QjG4rmKGZmN3yZyTY2N10Fwr7pvj
MQG2QasnGjueD6F+clHpHJzS+Z6bIZZHMz+rMWx2CnYQymKRAZum23eCiUoIexfu
zUEeoa2k7KrW7AFIpQqgxJHxzt0GogfIDa0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:09:08 2025 by rpki-client