Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/46F2D560934511ED92A7B996F1222468.roa
File: 46F2D560934511ED92A7B996F1222468.roa (raw, json)
Hash identifier: nGUyvzk/a5+GFzWKOpMkRUu0fAOKcVAtnLG++SWQPm0=
Subject key identifier: 7D:7A:3B:1F:1D:AD:B3:35:E4:42:11:5F:75:19:A9:00:98:0D:C4:24
Certificate issuer: /CN=F36E1EE5AF/serialNumber=D7FA734E2AD883A7ABB8EB7699C74194DDF37EA3
Certificate serial: 02
Authority key identifier: D7:FA:73:4E:2A:D8:83:A7:AB:B8:EB:76:99:C7:41:94:DD:F3:7E:A3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/1_pzTirYg6eruOt2mcdBlN3zfqM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/46F2D560934511ED92A7B996F1222468.roa
Signing time: Fri 13 Jan 2023 13:22:07 +0000
ROA not before: Fri 13 Jan 2023 13:22:02 +0000
ROA not after: Wed 12 Jan 2033 13:22:02 +0000
asID: 327982
IP address blocks: 2c0f:f2d0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/1_pzTirYg6eruOt2mcdBlN3zfqM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/1_pzTirYg6eruOt2mcdBlN3zfqM.mft
rsync://rpki.afrinic.net/repository/afrinic/1_pzTirYg6eruOt2mcdBlN3zfqM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E1EE5AF/serialNumber=D7FA734E2AD883A7ABB8EB7699C74194DDF37EA3
Validity
Not Before: Jan 13 13:22:02 2023 GMT
Not After : Jan 12 13:22:02 2033 GMT
Subject: CN=63c15aff-3a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6d:0b:ad:b2:13:24:05:af:3f:03:b0:ca:f5:
d8:32:da:ea:13:a4:6a:5a:e2:bb:b0:ba:c7:b2:56:
33:4b:5f:75:cb:a2:97:8d:f6:70:f2:40:fd:25:a9:
34:d2:1c:7d:e1:71:76:ab:74:5e:b8:a5:72:09:92:
49:d9:f7:4a:c9:03:a4:40:f9:f5:c3:90:36:00:6f:
f3:d2:4b:ba:22:b9:19:a9:80:c9:71:0d:ab:e5:d2:
b7:9f:0f:54:05:4b:a1:01:6e:16:5e:b6:f4:19:9d:
11:8d:5b:7f:cf:55:4e:5b:44:1b:31:f4:8a:1b:d7:
3a:1b:b5:2f:f0:f7:d8:8b:5f:2e:40:2b:b2:10:a2:
ba:fb:96:45:ba:be:4e:4f:7f:6e:6d:51:d0:14:cb:
1c:9a:ac:9c:68:83:af:94:3e:72:93:6a:04:29:46:
ec:e0:9c:a4:cc:65:ff:cc:7b:db:12:bf:21:cd:67:
6f:d3:0d:44:cf:28:40:8d:e2:09:be:30:92:35:c3:
83:5e:a6:29:ee:0b:46:7b:6b:ba:34:5a:f6:bd:03:
b7:6a:47:a1:f1:5e:9d:a0:8a:62:5c:c4:d2:df:26:
53:16:c9:ff:52:c3:97:3d:df:1c:f8:43:4b:4d:c8:
9e:5e:c6:5c:2e:fb:98:56:80:17:e5:f2:91:cc:87:
1d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7A:3B:1F:1D:AD:B3:35:E4:42:11:5F:75:19:A9:00:98:0D:C4:24
X509v3 Authority Key Identifier:
keyid:D7:FA:73:4E:2A:D8:83:A7:AB:B8:EB:76:99:C7:41:94:DD:F3:7E:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/1_pzTirYg6eruOt2mcdBlN3zfqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1_pzTirYg6eruOt2mcdBlN3zfqM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/46F2D560934511ED92A7B996F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f2d0::/32
Signature Algorithm: sha256WithRSAEncryption
47:cc:9a:83:00:0a:69:16:10:b3:4d:9e:80:18:a3:93:57:25:
0b:be:e9:4d:15:56:d8:35:c0:a5:1a:8e:c8:c9:06:da:0b:92:
ec:91:ed:09:54:8a:b9:9d:37:d9:87:f7:98:28:51:f2:aa:c9:
78:e9:c7:14:32:88:44:59:4b:0d:16:f4:ef:85:cc:94:58:fd:
a7:17:5d:13:04:75:90:94:d2:ca:e9:4f:48:98:5b:eb:9c:4b:
8c:ce:54:da:e5:47:0c:6f:ec:53:f3:c1:a5:03:06:f3:c3:14:
dd:8a:57:d6:f6:46:49:63:b4:b3:f9:b4:d2:fa:6d:71:49:4d:
6a:f3:f1:b9:b2:f7:e0:de:f1:df:e6:7a:67:3a:f6:95:12:b4:
3a:59:47:ff:65:8f:77:b1:19:41:ee:a4:3e:16:6e:53:02:c0:
e5:ef:e2:09:82:3f:7b:4a:bd:a5:86:10:c3:7a:23:e2:63:78:
f8:05:91:35:93:d9:ee:98:20:ed:ed:40:04:67:18:f2:9c:94:
66:56:a1:e1:71:8a:d4:f2:06:18:28:e5:0e:45:d9:18:95:9b:
82:13:dc:d0:d4:30:9d:ad:e5:b9:fa:25:5c:3d:d4:19:f9:ba:
26:4e:68:d6:c8:ba:89:f0:5c:99:57:7b:33:80:94:00:5f:85:
8c:86:42:a5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzZF
MUVFNUFGMTEwLwYDVQQFEyhEN0ZBNzM0RTJBRDg4M0E3QUJCOEVCNzY5OUM3NDE5
NERERjM3RUEzMB4XDTIzMDExMzEzMjIwMloXDTMzMDExMjEzMjIwMlowGDEWMBQG
A1UEAwwNNjNjMTVhZmYtM2EyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOVtC62yEyQFrz8DsMr12DLa6hOkalriu7C6x7JWM0tfdcuil432cPJA/SWp
NNIcfeFxdqt0XrilcgmSSdn3SskDpED59cOQNgBv89JLuiK5GamAyXENq+XSt58P
VAVLoQFuFl629BmdEY1bf89VTltEGzH0ihvXOhu1L/D32ItfLkArshCiuvuWRbq+
Tk9/bm1R0BTLHJqsnGiDr5Q+cpNqBClG7OCcpMxl/8x72xK/Ic1nb9MNRM8oQI3i
Cb4wkjXDg16mKe4LRntrujRa9r0Dt2pHofFenaCKYlzE0t8mUxbJ/1LDlz3fHPhD
S03Inl7GXC77mFaAF+XykcyHHRMCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBR9ejsf
Ha2zNeRCEV91GakAmA3EJDAfBgNVHSMEGDAWgBTX+nNOKtiDp6u463aZx0GU3fN+
ozAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RTFFRTUvQzNBODYyRDY5MzQxMTFFRDk0NENFRDhDRjEyMjI0NjgvMV9welRp
cllnNmVydU90Mm1jZEJsTjN6ZnFNLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvMV9welRpcllnNmVydU90Mm1jZEJsTjN6ZnFNLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTFFRTUvQzNBODYyRDY5MzQxMTFFRDk0NENFRDhDRjEy
MjI0NjgvNDZGMkQ1NjA5MzQ1MTFFRDkyQTdCOTk2RjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACwP8tAwDQYJKoZIhvcNAQEL
BQADggEBAEfMmoMACmkWELNNnoAYo5NXJQu+6U0VVtg1wKUajsjJBtoLkuyR7QlU
irmdN9mH95goUfKqyXjpxxQyiERZSw0W9O+FzJRY/acXXRMEdZCU0srpT0iYW+uc
S4zOVNrlRwxv7FPzwaUDBvPDFN2KV9b2RkljtLP5tNL6bXFJTWrz8bmy9+De8d/m
emc69pUStDpZR/9lj3exGUHupD4WblMCwOXv4gmCP3tKvaWGEMN6I+JjePgFkTWT
2e6YIO3tQARnGPKclGZWoeFxitTyBhgo5Q5F2RiVm4IT3NDUMJ2t5bn6JVw91Bn5
uiZOaNbIuonwXJlXezOAlABfhYyGQqU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:59 2024 by rpki-client on console-fra.rpki-client.org