Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/309D28EEFEF511EDB00B88614AD9E6FC.roa
File: 309D28EEFEF511EDB00B88614AD9E6FC.roa (raw, json)
Hash identifier: ItCUIKFD8b+1zCASnhN/PPJuqcP6wgszn4o8P0pDqGw=
Subject key identifier: 19:60:2B:AE:73:E1:E1:AE:F6:A9:24:43:BB:D8:B6:74:CA:9F:5F:B3
Certificate issuer: /CN=F36FE536AF/serialNumber=7B5895FF6900470AA81A342DE5F971E5D3C74777
Certificate serial: 08
Authority key identifier: 7B:58:95:FF:69:00:47:0A:A8:1A:34:2D:E5:F9:71:E5:D3:C7:47:77
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e1iV_2kARwqoGjQt5flx5dPHR3c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/309D28EEFEF511EDB00B88614AD9E6FC.roa
Signing time: Tue 30 May 2023 14:20:55 +0000
ROA not before: Tue 30 May 2023 14:20:52 +0000
ROA not after: Fri 30 May 2025 14:20:52 +0000
asID: 37358
IP address blocks: 2c0f:fdd0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/e1iV_2kARwqoGjQt5flx5dPHR3c.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/e1iV_2kARwqoGjQt5flx5dPHR3c.mft
rsync://rpki.afrinic.net/repository/afrinic/e1iV_2kARwqoGjQt5flx5dPHR3c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FE536AF/serialNumber=7B5895FF6900470AA81A342DE5F971E5D3C74777
Validity
Not Before: May 30 14:20:52 2023 GMT
Not After : May 30 14:20:52 2025 GMT
Subject: CN=64760647-6f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ce:fa:21:c7:b9:36:f5:d8:04:15:f6:c5:3b:
95:75:32:f9:57:8b:61:75:de:e3:29:4c:9c:7e:7c:
c8:45:70:1c:5e:ba:b0:1f:49:df:ad:9b:9c:6c:95:
b2:99:5d:19:a0:58:7b:a9:e9:d4:be:8b:8f:82:f1:
d8:4b:85:4b:6a:6c:5d:08:bb:ce:3a:99:d2:0a:df:
8d:77:b7:ef:5c:7a:f8:82:85:c2:d3:43:82:56:ed:
a9:e7:37:89:2a:8d:53:b5:f9:d7:28:71:0b:0b:04:
f5:83:57:e7:a2:cc:6b:db:98:b9:14:ac:10:b5:4d:
db:19:0b:ab:24:5a:20:e8:ce:d2:61:df:94:a6:6d:
bf:ee:bc:75:d3:ef:6f:2b:ce:91:9f:17:ca:c4:9f:
dd:c6:0e:6b:79:0f:64:7f:ca:ea:55:ef:c2:a5:40:
98:5f:57:12:ee:49:64:d6:c2:37:72:af:48:15:94:
85:56:29:a0:e9:e9:f8:cf:0d:7a:e3:69:2c:8a:08:
b8:b6:05:54:e2:5b:07:9f:47:f5:3e:19:09:30:58:
ab:08:78:1d:f8:3b:8f:9e:b0:fe:46:32:af:6c:e6:
32:5b:8d:b5:c9:21:7e:a6:e7:d0:cd:66:a0:6d:01:
96:66:90:57:8f:d8:a4:b8:53:24:04:ae:6d:80:c1:
11:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:60:2B:AE:73:E1:E1:AE:F6:A9:24:43:BB:D8:B6:74:CA:9F:5F:B3
X509v3 Authority Key Identifier:
keyid:7B:58:95:FF:69:00:47:0A:A8:1A:34:2D:E5:F9:71:E5:D3:C7:47:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/e1iV_2kARwqoGjQt5flx5dPHR3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e1iV_2kARwqoGjQt5flx5dPHR3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/309D28EEFEF511EDB00B88614AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fdd0::/32
Signature Algorithm: sha256WithRSAEncryption
67:9f:61:c3:3e:06:e9:8f:00:df:70:16:99:ed:c6:86:5a:b0:
85:62:6e:43:de:51:d0:ab:6d:65:2e:84:6a:f6:e7:a1:ac:5d:
fa:11:88:59:cc:9b:8b:a9:e9:6e:3f:96:b6:20:e1:43:70:f8:
a1:0c:de:6f:9a:a8:0c:13:64:bd:69:57:e2:18:44:11:b3:4a:
f1:7e:cb:f1:90:b9:61:50:e3:7b:60:85:1f:e9:1b:98:f1:a1:
7f:f3:f4:04:bb:d0:00:24:0e:0c:7b:e3:17:8b:1c:73:a2:7e:
7f:a1:cc:81:23:d6:4f:ed:f2:1d:6f:42:9d:57:df:61:a4:38:
30:b3:dc:bb:c5:f8:bc:40:20:f0:18:4c:4f:c5:0c:57:91:fc:
9f:e9:b0:84:48:79:4e:33:98:42:f9:57:47:9c:9f:23:ea:96:
38:d4:e6:5d:a3:31:8d:44:b1:e4:25:4f:db:d2:0c:b1:c8:24:
30:8f:ff:03:11:38:8d:00:46:f2:63:f6:4d:ea:84:de:5d:16:
7f:9e:83:84:95:fb:61:6d:52:07:a2:37:5e:d0:50:9e:ea:3c:
59:8c:f4:f4:9e:cf:5f:1b:4d:b3:d0:c3:8a:9a:ef:41:82:79:
8d:19:04:d6:e8:bf:49:93:0b:f6:ec:89:47:8f:bd:96:6c:e4:
15:6f:dd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:53:01 2024 by rpki-client on console-fra.rpki-client.org