Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/757D2A34887711EE836A404E4AD9E6FC.roa
File: 757D2A34887711EE836A404E4AD9E6FC.roa (raw, json)
Hash identifier: +ZI3X/alavjG8hd5TUGXudmlVMdSEsoVpfbaqPGHQKA=
Subject key identifier: 36:AC:5B:01:A5:F6:B5:03:9C:FC:FE:AA:67:A3:32:25:5A:01:3A:BA
Certificate issuer: /CN=F36E4B69AF/serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
Certificate serial: 04
Authority key identifier: CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/757D2A34887711EE836A404E4AD9E6FC.roa
Signing time: Tue 21 Nov 2023 14:08:35 +0000
ROA not before: Tue 21 Nov 2023 14:08:32 +0000
ROA not after: Fri 21 Nov 2025 14:08:32 +0000
asID: 36912
IP address blocks: 2c0f:f070::/34 maxlen: 34
2c0f:f070:1001::/48 maxlen: 48
2c0f:f070:1020::/43 maxlen: 43
2c0f:f070:1100::/44 maxlen: 44
2c0f:f070:1200::/43 maxlen: 43
2c0f:f070:1300::/44 maxlen: 44
2c0f:f070:1400::/43 maxlen: 43
2c0f:f070:1500::/45 maxlen: 45
2c0f:f070:1600::/44 maxlen: 44
2c0f:f070:1700::/45 maxlen: 45
2c0f:f070:1800::/44 maxlen: 44
2c0f:f070:1900::/44 maxlen: 44
2c0f:f070:2000::/48 maxlen: 48
2c0f:f070:4000::/34 maxlen: 34
2c0f:f070:5001::/48 maxlen: 48
2c0f:f070:5a00::/46 maxlen: 46
2c0f:f070:8000::/34 maxlen: 34
2c0f:f070:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E4B69AF/serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
Validity
Not Before: Nov 21 14:08:32 2023 GMT
Not After : Nov 21 14:08:32 2025 GMT
Subject: CN=655cb9e3-9a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:18:16:15:45:12:50:4f:f4:60:ec:e7:ae:
07:bd:ab:d6:11:40:86:b9:ec:b0:40:26:94:aa:f7:
19:5a:31:a3:7a:0f:55:b8:f3:be:5d:69:ff:a5:4b:
31:f9:ce:14:f5:16:e2:31:c3:df:ad:db:6b:4e:08:
07:30:f6:59:a7:f6:4d:0f:b7:50:f6:c4:de:42:66:
8d:4a:c8:de:3d:cf:16:87:69:da:da:f4:43:60:b2:
a1:61:a0:e0:11:9f:74:91:b2:bf:47:9e:71:5a:29:
e8:9e:f9:9c:81:26:8a:8c:5f:32:68:38:b7:08:29:
cd:85:b5:d4:df:13:32:f6:13:84:1e:e2:81:6a:43:
3a:cb:fa:17:80:94:3c:98:63:ac:a3:82:a2:2d:4c:
19:42:f4:14:bb:d2:7d:8a:4c:82:19:b2:9c:d7:c3:
8e:be:bd:d8:b1:ec:e2:c4:4d:50:12:76:ee:65:f2:
49:cf:9b:1d:c4:4b:c2:8b:8a:0e:01:24:ac:05:1a:
38:29:61:50:26:52:1f:65:0d:31:22:6e:46:11:9a:
e2:05:3b:e3:66:64:95:9f:1f:cc:88:8e:d9:54:57:
1c:50:9d:6c:65:b6:c7:21:d0:e9:10:2d:e3:f6:a5:
2f:5b:84:ea:6c:01:f4:f8:45:d3:78:26:68:a5:c6:
9d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AC:5B:01:A5:F6:B5:03:9C:FC:FE:AA:67:A3:32:25:5A:01:3A:BA
X509v3 Authority Key Identifier:
keyid:CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/757D2A34887711EE836A404E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f070::/32
Signature Algorithm: sha256WithRSAEncryption
48:04:8d:38:d8:a1:ed:24:2b:1f:03:eb:1e:43:de:b5:14:69:
ec:31:a6:74:fc:06:5e:d3:52:af:82:cf:1a:f8:5d:f4:d5:1a:
73:d3:8c:de:c6:44:07:a9:77:93:a3:db:ca:93:1f:8f:82:e4:
fc:7f:c0:fa:88:bf:ce:57:c3:62:68:e1:d3:35:1c:ac:6d:69:
b8:ee:ac:9e:d6:87:73:07:3b:69:55:73:0f:b4:05:5d:c5:ab:
09:77:6c:4b:85:d8:9a:e5:73:b7:3e:4c:97:27:c8:89:f8:8b:
3c:ae:92:88:5b:7c:96:af:1b:4b:5f:5e:6b:ac:31:ff:33:55:
b1:ea:32:f8:9d:68:8f:aa:9e:05:05:97:18:c6:ce:0e:6e:a0:
30:21:42:30:2e:57:7a:6c:8f:27:94:94:a5:d3:d8:d4:cc:45:
2a:c3:d2:7a:a0:d9:cf:2c:83:fc:d0:23:23:02:31:6d:be:3d:
39:7a:b0:55:1a:5a:5d:35:76:44:29:19:0b:c0:f9:58:28:04:
9f:24:b5:85:cb:13:91:5a:16:af:74:e5:80:f2:2e:30:a8:dc:
d0:be:54:ea:f9:48:ac:10:15:a2:f8:28:06:3c:9e:61:34:29:
1a:e5:51:42:79:5a:41:7f:be:8f:75:60:33:7c:d3:76:37:dc:
f5:97:18:99
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZF
NEI2OUFGMTEwLwYDVQQFEyhDQTY2NDJFQTlBRkNDNzNBQTI0QUE0MDQ3NTQ0QjE3
QzI2MDNDQkQyMB4XDTIzMTEyMTE0MDgzMloXDTI1MTEyMTE0MDgzMlowGDEWMBQG
A1UEAxMNNjU1Y2I5ZTMtOWE4NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMOHGBYVRRJQT/Rg7OeuB72r1hFAhrnssEAmlKr3GVoxo3oPVbjzvl1p/6VL
MfnOFPUW4jHD363ba04IBzD2Waf2TQ+3UPbE3kJmjUrI3j3PFodp2tr0Q2CyoWGg
4BGfdJGyv0eecVop6J75nIEmioxfMmg4twgpzYW11N8TMvYThB7igWpDOsv6F4CU
PJhjrKOCoi1MGUL0FLvSfYpMghmynNfDjr692LHs4sRNUBJ27mXySc+bHcRLwouK
DgEkrAUaOClhUCZSH2UNMSJuRhGa4gU742ZklZ8fzIiO2VRXHFCdbGW2xyHQ6RAt
4/alL1uE6mwB9PhF03gmaKXGnZsCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBQ2rFsB
pfa1A5z8/qpnozIlWgE6ujAfBgNVHSMEGDAWgBTKZkLqmvzHOqJKpAR1RLF8JgPL
0jAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RTRCNjkvREUxNDc3MEU4ODczMTFFRTg5QjgxMTQzNEFEOUU2RkMveW1aQzZw
cjh4enFpU3FRRWRVU3hmQ1lEeTlJLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMveW1aQzZwcjh4enFpU3FRRWRVU3hmQ1lEeTlJLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTRCNjkvREUxNDc3MEU4ODczMTFFRTg5QjgxMTQzNEFE
OUU2RkMvNzU3RDJBMzQ4ODc3MTFFRTgzNkE0MDRFNEFEOUU2RkMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACwP8HAwDQYJKoZIhvcNAQEL
BQADggEBAEgEjTjYoe0kKx8D6x5D3rUUaewxpnT8Bl7TUq+Czxr4XfTVGnPTjN7G
RAepd5Oj28qTH4+C5Px/wPqIv85Xw2Jo4dM1HKxtabjurJ7Wh3MHO2lVcw+0BV3F
qwl3bEuF2Jrlc7c+TJcnyIn4izyukohbfJavG0tfXmusMf8zVbHqMvidaI+qngUF
lxjGzg5uoDAhQjAuV3psjyeUlKXT2NTMRSrD0nqg2c8sg/zQIyMCMW2+PTl6sFUa
Wl01dkQpGQvA+VgoBJ8ktYXLE5FaFq905YDyLjCo3NC+VOr5SKwQFaL4KAY8nmE0
KRrlUUJ5WkF/vo91YDN803Y33PWXGJk=
-----END CERTIFICATE-----
Generated at Sun Nov 24 04:29:40 2024 by rpki-client on console-fra.rpki-client.org