Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/B258B1565D0411EE96F5E0604AD9E6FC.roa
File: B258B1565D0411EE96F5E0604AD9E6FC.roa (raw, json)
Hash identifier: lENYn+z/UP3uj+chQuw1XzzU8SwP6HpovDS9mQhQc6g=
Subject key identifier: 83:89:F0:AE:DE:66:48:7C:33:FA:08:9A:08:76:03:DD:6A:77:95:6B
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 034B
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/B258B1565D0411EE96F5E0604AD9E6FC.roa
Signing time: Wed 27 Sep 2023 07:08:45 +0000
ROA not before: Wed 27 Sep 2023 07:08:42 +0000
ROA not after: Tue 30 Sep 2025 07:08:42 +0000
asID: 328327
IP address blocks: 2c0f:c00:4004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 30 Apr 2024 00:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 843 (0x34b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Sep 27 07:08:42 2023 GMT
Not After : Sep 30 07:08:42 2025 GMT
Subject: CN=6513d4fd-c11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8d:10:11:7b:dc:6b:c5:df:79:26:c0:41:cf:
b4:6a:18:8b:08:b0:f1:64:20:d5:2d:64:3f:8d:22:
c6:ae:02:c8:e6:23:65:e3:20:f6:91:3c:09:15:42:
ca:ac:05:0c:77:70:e6:1f:9e:b0:f8:31:cb:c4:5f:
9a:ec:df:c4:3a:d3:a9:d3:24:e8:9b:12:4f:1c:53:
10:87:9f:c9:78:5f:70:80:63:e8:6c:b2:fe:57:4b:
48:9e:e5:f5:de:a7:0c:2f:49:6c:c6:c8:7b:35:8d:
bd:1c:f8:67:21:48:fa:2b:93:15:39:11:63:05:42:
ed:1f:6a:f8:f6:9c:74:8e:dd:3b:ce:58:d4:7f:c2:
a4:8b:4e:77:c4:cc:6f:cb:b5:67:d0:19:4c:c2:90:
fc:e1:48:06:3b:88:87:0c:95:51:f6:7a:45:a5:76:
35:c0:2c:2d:70:7d:ba:ab:35:f0:81:d3:78:02:d9:
fb:48:9c:27:d2:f9:b1:9a:fc:9e:8e:3e:3f:d9:de:
8d:4c:b2:4e:90:ca:91:d8:34:7b:66:5c:2f:6a:da:
61:a8:c7:2e:40:c9:4f:65:01:a3:32:ad:30:b9:a9:
fa:ec:5b:10:8b:6c:18:94:2e:f5:51:f5:f3:45:6c:
b9:da:e4:e4:c1:2d:45:f7:62:7b:2f:ce:a3:d6:ad:
62:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:89:F0:AE:DE:66:48:7C:33:FA:08:9A:08:76:03:DD:6A:77:95:6B
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/B258B1565D0411EE96F5E0604AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:c00:4004::/48
Signature Algorithm: sha256WithRSAEncryption
43:f3:51:a3:2c:b8:fc:5e:51:86:0f:fe:df:03:01:10:32:29:
3b:e6:64:16:83:32:f1:1a:08:7a:c1:c9:7e:d2:7a:e8:77:41:
4f:43:1d:7f:2c:16:3b:45:a8:61:d2:3a:b1:48:37:20:4f:a1:
df:3b:ca:6a:9e:29:f3:17:bb:fc:35:97:74:95:d2:b3:19:5d:
62:2f:a5:98:f7:5f:4c:17:9d:33:b3:cf:e0:b3:1e:f2:2a:da:
65:9c:cd:0b:96:5f:6b:b5:2d:ea:37:dc:52:a7:be:18:46:13:
da:44:09:87:75:3e:00:f5:08:8a:22:d5:09:a6:a7:6b:b8:5a:
39:54:11:93:f9:4a:53:4e:e0:e0:a1:22:0e:89:41:be:e4:23:
ee:ba:10:b2:a8:9f:35:77:25:51:75:aa:fc:b8:fc:c7:b8:1f:
1d:65:9d:c1:96:f3:61:43:46:cb:c6:40:ed:3d:af:fd:85:c7:
ba:d1:78:4c:fb:00:03:58:0e:10:91:83:a9:a3:54:b6:f1:bc:
1b:cf:37:33:6c:40:65:ad:e8:70:74:7c:e4:87:73:cc:e4:56:
16:06:63:a7:90:89:ed:4a:2a:50:bd:53:76:ab:8c:ab:2b:7f:
dc:c3:9f:a7:ec:01:a7:38:6e:40:d4:e8:63:01:d1:11:f5:89:
22:32:98:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:49:13 2024 by rpki-client on console-fra.rpki-client.org