Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/4ED14CDCA6DA11EDAEF82299F1222468.roa
File: 4ED14CDCA6DA11EDAEF82299F1222468.roa (raw, json)
Hash identifier: iXehJ8WLWU6cHBFHQ5qsEfloV58oVEhPLmmW3fV/BY4=
Subject key identifier: 31:C6:01:66:84:85:0F:1C:E2:DC:2E:87:3A:B2:D5:9A:48:E3:80:FB
Certificate issuer: /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial: 84
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/4ED14CDCA6DA11EDAEF82299F1222468.roa
Signing time: Tue 07 Feb 2023 11:26:48 +0000
ROA not before: Tue 07 Feb 2023 11:26:43 +0000
ROA not after: Tue 09 Feb 2027 11:26:43 +0000
asID: 23764
IP address blocks: 2c0f:f7a8:37::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 13 May 2024 00:04:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Validity
Not Before: Feb 7 11:26:43 2023 GMT
Not After : Feb 9 11:26:43 2027 GMT
Subject: CN=63e23578-46c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:26:3f:0f:f4:a7:e7:80:84:15:a7:18:8b:29:
f1:0b:db:0d:4a:cf:5b:10:2a:64:3e:a1:2b:3a:89:
9b:eb:83:f1:10:d5:93:42:5a:4a:42:af:07:9f:1c:
73:31:90:76:a6:9f:07:ed:78:00:65:47:0f:56:c0:
9d:04:8c:78:07:a2:45:b1:02:8c:e4:df:4c:62:53:
78:5d:5a:9a:48:82:d0:3b:8b:fb:a0:79:23:6d:be:
a5:9e:31:d8:d8:0f:21:f8:7b:4c:e5:dd:46:62:46:
27:05:44:51:b6:a3:c1:92:c6:34:ba:0a:c1:fd:dc:
13:ec:d1:9e:df:ec:67:ef:14:9a:92:64:3c:14:55:
e6:7f:42:b7:1a:c3:0b:65:15:f4:49:fe:0f:c5:e0:
c4:2b:c7:a8:d3:f7:26:ac:22:96:3e:97:fd:cc:f0:
1c:82:c0:ef:6a:90:5f:aa:77:52:ac:30:f1:b1:9c:
e4:5d:cf:10:9a:9e:82:a3:cf:04:bc:53:d7:b6:7c:
dc:f1:38:c5:dd:b4:f3:9c:5a:f5:b0:8b:d1:ad:cc:
ed:1f:65:9f:0d:6f:83:cf:b2:d4:37:c4:40:2c:b1:
35:82:6e:ae:cc:e9:26:9b:ec:35:c1:37:62:6c:0a:
f2:de:ed:0c:28:44:c9:f8:c5:b7:1d:56:a3:7c:b1:
e6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C6:01:66:84:85:0F:1C:E2:DC:2E:87:3A:B2:D5:9A:48:E3:80:FB
X509v3 Authority Key Identifier:
keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/4ED14CDCA6DA11EDAEF82299F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f7a8:37::/48
Signature Algorithm: sha256WithRSAEncryption
94:ea:8c:93:a1:d9:7a:94:68:3e:22:62:41:52:34:f5:6c:35:
09:e9:55:c4:40:d2:23:f1:52:e8:c0:d0:38:7b:35:44:e9:fb:
72:58:22:fb:56:38:fd:a8:32:cd:55:76:ad:ef:c9:e4:72:84:
45:5a:91:71:fe:69:33:9e:84:5b:32:4f:27:c1:af:3b:e9:4b:
ca:50:1c:66:fa:4f:55:ac:b9:01:c6:34:f5:7d:77:41:c3:b2:
33:9e:b5:35:b6:61:08:1e:25:4f:cc:4f:3e:b3:6b:0a:b4:22:
da:ae:43:42:74:17:a9:bb:9d:74:2c:8e:13:b2:0c:45:8a:78:
86:24:05:47:4c:60:27:32:19:2c:a2:7e:23:fc:7e:c1:89:2e:
84:56:f0:b5:db:36:eb:93:66:6e:33:48:fe:d9:b6:8f:a6:67:
c7:67:70:c1:a2:b7:bb:71:5a:1d:e3:07:fb:8d:ed:7d:ae:67:
db:43:4d:c7:f9:b9:16:e8:5e:1b:26:3c:4c:67:3a:7b:87:24:
4c:f2:47:98:b9:9e:54:be:9a:60:1f:e2:6c:e3:37:e3:64:38:
c1:bb:dc:fb:16:c5:e7:ff:f3:75:03:8a:95:04:31:59:d9:cb:
78:df:be:8a:5f:36:26:64:a9:79:ac:7d:1a:e2:9b:8e:36:d1:
3d:a5:5a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:39:16 2024 by rpki-client on console-fra.rpki-client.org