Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/6023B6466D9011EEB59691864AD9E6FC.roa
File: 6023B6466D9011EEB59691864AD9E6FC.roa (raw, json)
Hash identifier: 8Vfkb/3Ajxlzq/FEl75zlD6gPZ0n60l+v2tc/Wmueqg=
Subject key identifier: 5B:F0:3A:42:F2:75:30:75:66:9D:AE:C7:D4:02:44:84:4E:84:15:A8
Certificate issuer: /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial: 0AB5
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/6023B6466D9011EEB59691864AD9E6FC.roa
Signing time: Wed 18 Oct 2023 08:28:55 +0000
ROA not before: Wed 18 Oct 2023 08:28:52 +0000
ROA not after: Fri 18 Oct 2030 08:28:52 +0000
asID: 11845
IP address blocks: 2c0f:fd58::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2741 (0xab5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Validity
Not Before: Oct 18 08:28:52 2023 GMT
Not After : Oct 18 08:28:52 2030 GMT
Subject: CN=652f9747-6919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3a:db:1a:a2:8c:8b:40:2d:1f:78:05:8d:ca:
3f:2b:e0:70:e2:ee:1d:20:a4:9e:35:b8:1d:40:9f:
b9:b8:45:f7:33:d1:f6:09:e3:70:41:0e:b2:88:e8:
4d:3a:89:ae:02:8c:c9:81:e6:7d:f2:9e:f4:35:30:
22:18:17:8b:ff:e9:6b:5e:85:36:fb:fd:3b:da:bc:
da:50:9d:2d:8a:ca:18:ea:f9:96:0c:aa:58:c8:22:
b4:21:6b:a7:9e:cf:58:e2:0a:12:2c:7e:95:e0:6a:
bd:43:e5:af:03:b6:0c:36:c5:d8:e4:f4:ac:d9:ca:
93:ee:00:8f:3d:58:50:68:d1:22:b3:aa:c3:9f:cf:
09:13:74:14:84:41:c2:c2:20:17:d6:f1:05:02:e4:
d8:dc:fb:cb:bd:2d:a4:f6:8e:68:f9:c3:dc:41:63:
dd:fa:84:ab:a2:a4:12:04:d1:d4:a9:72:1d:01:13:
3f:1c:26:82:ae:b6:97:dd:f4:ed:ce:fb:d9:94:05:
79:fc:6c:7e:b7:a7:32:d9:e7:54:d1:6c:ce:e1:a7:
52:13:e4:fd:66:d2:18:11:bd:d9:e5:19:bb:fd:07:
d2:3e:5e:5e:c4:3e:d7:6d:23:15:09:cd:58:50:7a:
23:32:bf:53:13:92:d5:a3:03:98:df:e9:33:d7:b7:
16:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F0:3A:42:F2:75:30:75:66:9D:AE:C7:D4:02:44:84:4E:84:15:A8
X509v3 Authority Key Identifier:
keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/6023B6466D9011EEB59691864AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fd58::/29
Signature Algorithm: sha256WithRSAEncryption
68:e6:af:e5:7e:fa:50:50:cd:8e:c5:65:95:e8:8f:fc:11:18:
49:84:26:4a:df:a8:35:e7:10:07:41:f2:48:67:75:49:f2:b8:
49:e8:60:af:13:9f:a7:b4:d3:94:78:c8:2c:eb:c8:32:b4:5c:
79:b4:9e:de:2f:10:e7:07:da:c0:94:fa:36:93:61:43:b4:92:
ac:8c:3b:45:8b:67:9f:65:7a:57:b3:2c:c0:e1:72:32:42:8f:
61:cc:5d:8c:ed:d7:68:08:74:1e:8a:14:96:92:fc:83:3f:4d:
99:39:b6:32:af:1a:c4:f4:81:52:02:19:dc:a8:fe:81:ef:e1:
23:70:68:a4:f6:3c:5d:c0:e6:3e:20:20:6f:35:17:dd:b8:0c:
30:1a:6e:42:75:1b:40:3a:54:d7:3e:90:05:bc:d8:71:9a:d4:
3a:d8:98:ca:a1:36:a9:74:54:f0:d1:2a:25:04:ee:5c:a7:40:
f1:02:1e:56:4e:8c:8b:2b:41:a6:75:ff:6b:b3:28:8e:91:69:
7e:15:31:d9:70:7e:bd:7a:be:e6:22:f3:96:4b:42:63:58:b4:
9a:1f:0f:4a:4b:6c:c2:b8:d7:f0:32:0a:2d:de:53:9a:ee:b2:
9f:5f:a2:69:69:af:ad:82:25:9d:8f:05:56:ee:14:37:28:df:
82:ef:0d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:46:57 2024 by rpki-client on console-ams.rpki-client.org