Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/0CBAC432B27111EF99B95144762E951A.roa
File: 0CBAC432B27111EF99B95144762E951A.roa (raw, json)
Hash identifier: gmMvunoj5KNwjAHQwXEB9NQDDcCeTBCj9SxbM2LLQYk=
Subject key identifier: DC:81:B2:7F:65:50:04:8C:1D:44:01:66:DA:41:6B:78:0B:8A:EF:DC
Certificate issuer: /CN=F3623AE4AF/serialNumber=9EAC083DFCCD295D56160555B3EABE6D15770B20
Certificate serial: 02
Authority key identifier: 9E:AC:08:3D:FC:CD:29:5D:56:16:05:55:B3:EA:BE:6D:15:77:0B:20
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nqwIPfzNKV1WFgVVs-q-bRV3CyA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/0CBAC432B27111EF99B95144762E951A.roa
Signing time: Wed 04 Dec 2024 18:53:29 +0000
ROA not before: Wed 04 Dec 2024 18:53:18 +0000
ROA not after: Sun 31 Dec 2034 18:53:18 +0000
asID: 328237
IP address blocks: 2c0f:f1a8::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft
rsync://rpki.afrinic.net/repository/afrinic/nqwIPfzNKV1WFgVVs-q-bRV3CyA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 30 Dec 2024 00:05:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3623AE4AF/serialNumber=9EAC083DFCCD295D56160555B3EABE6D15770B20
Validity
Not Before: Dec 4 18:53:18 2024 GMT
Not After : Dec 31 18:53:18 2034 GMT
Subject: CN=6750a529-6d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:28:c0:a0:7b:3d:b8:52:2a:b7:e5:48:93:
72:0f:23:0b:04:d6:86:a5:76:49:44:48:bd:e1:be:
d8:3f:ed:64:86:ce:66:e1:67:6b:4b:57:c5:0c:52:
ab:16:85:84:da:e2:eb:fb:69:12:4b:37:6c:47:f3:
69:d3:82:b1:e0:a6:55:49:b0:22:71:9d:7c:b9:88:
31:1a:80:0a:a7:c9:f0:64:03:4f:19:47:e0:a1:41:
87:0c:f0:00:f2:7d:e5:d3:69:42:d5:2d:53:79:10:
74:b5:60:a0:b5:6e:7c:40:e1:6e:6d:60:a2:ce:63:
44:59:79:c4:e6:70:6f:c0:7f:ce:25:50:19:7c:40:
b0:49:cc:1d:6d:68:cd:35:8c:0a:2b:4a:e5:fd:38:
52:ff:54:29:eb:73:a0:c5:9d:88:33:83:65:a9:9a:
00:e1:1b:d4:a1:89:8e:29:a3:28:7d:c5:96:87:01:
65:6a:79:0f:10:0c:6a:c9:89:97:94:38:22:36:f6:
25:85:2f:38:bb:38:58:a5:f0:c2:87:79:6a:d0:75:
30:52:e3:47:79:0f:2f:7e:74:92:01:bc:88:94:f1:
c9:9e:c5:15:8e:c3:e9:97:90:60:f3:9d:99:c4:9d:
8a:4c:89:2c:e1:77:ec:fd:00:b0:8c:aa:9c:3e:b0:
7a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:81:B2:7F:65:50:04:8C:1D:44:01:66:DA:41:6B:78:0B:8A:EF:DC
X509v3 Authority Key Identifier:
keyid:9E:AC:08:3D:FC:CD:29:5D:56:16:05:55:B3:EA:BE:6D:15:77:0B:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nqwIPfzNKV1WFgVVs-q-bRV3CyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/0CBAC432B27111EF99B95144762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f1a8::/32
Signature Algorithm: sha256WithRSAEncryption
50:34:f5:e4:db:03:6f:0a:e7:aa:ba:49:16:a4:33:2d:c8:4a:
91:25:a6:e9:54:d3:ca:7f:32:45:a6:ae:a1:41:d1:3a:49:19:
84:e5:27:1c:b5:a9:4d:27:eb:33:6c:79:46:99:44:81:88:fc:
be:57:05:00:48:db:f9:96:58:6a:a0:11:fc:bd:56:31:c2:7d:
75:51:fc:33:6a:fc:8f:d8:b6:09:65:22:4f:af:68:18:35:3a:
8c:74:ee:e3:91:be:e8:bc:dd:de:da:cd:20:a7:5d:b5:b4:54:
e4:a2:2a:7c:b7:7b:91:2a:56:dc:a1:95:3e:11:37:1e:b0:48:
e0:ad:4f:60:2f:33:3f:03:44:ae:6f:cc:dd:e0:6c:94:66:e5:
8a:23:29:8f:2c:62:d1:36:39:67:38:94:79:3c:04:f8:6b:26:
ba:f8:db:b0:5e:51:b8:01:2c:1a:52:ce:5a:7f:dc:bd:97:bf:
25:7e:50:08:53:1b:c3:fd:9a:4f:31:89:67:9d:11:4a:5b:fc:
86:1d:97:26:54:0e:81:9d:f8:f7:b1:6a:7c:cb:73:05:85:ef:
8d:e5:e1:56:bc:28:be:98:33:59:5b:1e:53:39:fc:c1:09:76:
af:1e:bb:e1:1d:e5:3c:52:13:72:63:7e:0f:11:ff:7e:96:7f:
78:fe:a5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 28 04:22:03 2024 by rpki-client on console-fra.rpki-client.org