Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/D3A052DE8C5011EF962EB66B762E951A.roa
File: D3A052DE8C5011EF962EB66B762E951A.roa (raw, json)
Hash identifier: 7F3ZZIsrdZCw76gUa9ufWVDJqlOoOPIvRQ+47HnEl7c=
Subject key identifier: FD:62:A5:2C:D2:65:C6:DA:39:41:62:F7:9C:1A:27:DE:9F:CE:D6:DD
Certificate issuer: /CN=F36311EEAF/serialNumber=BEE8C3B4C535C3AFA0F6E6C4F69C68959045F916
Certificate serial: 14
Authority key identifier: BE:E8:C3:B4:C5:35:C3:AF:A0:F6:E6:C4:F6:9C:68:95:90:45:F9:16
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vujDtMU1w6-g9ubE9pxolZBF-RY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/D3A052DE8C5011EF962EB66B762E951A.roa
Signing time: Thu 17 Oct 2024 06:27:05 +0000
ROA not before: Thu 17 Oct 2024 06:27:01 +0000
ROA not after: Fri 17 Oct 2025 06:27:01 +0000
asID: 37368
IP address blocks: 2c0f:f080::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.mft
rsync://rpki.afrinic.net/repository/afrinic/vujDtMU1w6-g9ubE9pxolZBF-RY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36311EEAF/serialNumber=BEE8C3B4C535C3AFA0F6E6C4F69C68959045F916
Validity
Not Before: Oct 17 06:27:01 2024 GMT
Not After : Oct 17 06:27:01 2025 GMT
Subject: CN=6710ae39-5f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d6:0a:61:81:5c:ea:33:79:c5:c3:89:af:81:
7d:a7:f1:85:43:db:37:be:75:db:d7:06:04:05:ab:
a0:7c:83:25:c5:90:f7:a3:36:ff:68:62:b3:59:f7:
08:33:80:c2:ef:78:62:b9:8c:e7:a5:ac:08:1a:42:
9b:b8:1f:10:18:5a:b8:85:4b:70:65:f7:2c:ad:57:
3b:2f:9b:1f:2d:27:38:00:32:d0:1f:c8:b0:e9:44:
45:7a:de:7f:11:28:4c:ed:41:9e:3d:60:2e:b5:82:
32:f8:8e:39:53:b7:74:45:b1:d9:a6:8f:f7:fb:1f:
9d:68:d3:e9:18:24:80:10:4f:15:38:76:e4:6e:98:
76:0b:3f:f8:ca:42:02:c2:1b:d4:cc:57:ee:92:df:
04:fa:59:8e:51:c5:b9:3f:65:9d:1e:57:e7:8a:ce:
82:3e:0c:23:27:51:cd:e8:50:86:59:76:cf:c0:8d:
8c:8f:d9:6f:ed:eb:8d:b3:82:88:7d:e6:73:73:22:
82:00:df:e5:77:03:ea:a7:17:4d:0d:52:f5:84:89:
64:99:0a:b4:ca:db:57:96:e4:6a:b3:3b:28:7b:45:
4b:8d:fb:5e:9f:8f:26:3b:aa:a0:23:6e:3b:46:fe:
46:76:7f:0a:bb:99:a1:eb:8e:d7:48:8c:80:78:b9:
c5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:62:A5:2C:D2:65:C6:DA:39:41:62:F7:9C:1A:27:DE:9F:CE:D6:DD
X509v3 Authority Key Identifier:
keyid:BE:E8:C3:B4:C5:35:C3:AF:A0:F6:E6:C4:F6:9C:68:95:90:45:F9:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vujDtMU1w6-g9ubE9pxolZBF-RY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/D3A052DE8C5011EF962EB66B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f080::/32
Signature Algorithm: sha256WithRSAEncryption
68:cb:5b:67:ae:21:75:0f:81:12:68:21:19:30:50:8e:26:67:
c9:6e:e2:06:43:17:97:33:a2:73:f4:ae:47:3a:7a:a7:8e:78:
27:67:44:d0:e5:2c:50:8b:ec:16:43:5c:87:6e:b2:c1:33:f7:
0f:24:a4:57:30:6c:22:df:48:ab:8b:6f:e1:5f:6f:90:4c:f2:
76:cb:e6:66:b0:0d:96:8c:b0:25:6b:f9:ed:0f:92:39:d5:5b:
38:35:48:95:3d:ee:c0:e1:29:3b:fe:b4:3a:68:93:e4:d8:d0:
46:cc:73:d0:99:43:e0:df:00:d0:f8:8b:0c:bc:eb:cb:88:d5:
70:01:f7:3a:95:80:b1:f6:12:4c:60:c0:4f:96:64:97:05:37:
6a:a3:ed:04:6d:ea:22:4a:e9:0f:18:40:b8:bb:8e:60:66:7c:
9d:54:a2:ef:82:5b:a3:5d:ae:f8:87:11:f5:98:98:44:8e:78:
4a:9a:ad:94:40:b9:38:25:67:d4:b8:76:14:b2:8f:6f:cc:9f:
d9:62:f5:5c:33:b6:a1:25:ac:ef:40:b0:31:be:6b:6a:ed:cb:
6e:ca:f3:88:47:dc:13:55:f4:7a:6a:65:e8:c4:b5:d6:3b:3a:
17:65:9a:de:10:5b:40:89:4c:4e:6e:1e:23:0f:06:c6:db:5c:
59:6d:aa:fd
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYz
MTFFRUFGMTEwLwYDVQQFEyhCRUU4QzNCNEM1MzVDM0FGQTBGNkU2QzRGNjlDNjg5
NTkwNDVGOTE2MB4XDTI0MTAxNzA2MjcwMVoXDTI1MTAxNzA2MjcwMVowGDEWMBQG
A1UEAxMNNjcxMGFlMzktNWYxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOfWCmGBXOozecXDia+BfafxhUPbN75129cGBAWroHyDJcWQ96M2/2his1n3
CDOAwu94YrmM56WsCBpCm7gfEBhauIVLcGX3LK1XOy+bHy0nOAAy0B/IsOlERXre
fxEoTO1Bnj1gLrWCMviOOVO3dEWx2aaP9/sfnWjT6RgkgBBPFTh25G6Ydgs/+MpC
AsIb1MxX7pLfBPpZjlHFuT9lnR5X54rOgj4MIydRzehQhll2z8CNjI/Zb+3rjbOC
iH3mc3MiggDf5XcD6qcXTQ1S9YSJZJkKtMrbV5bkarM7KHtFS437Xp+PJjuqoCNu
O0b+RnZ/CruZoeuO10iMgHi5xQkCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBT9YqUs
0mXG2jlBYvecGifen87W3TAfBgNVHSMEGDAWgBS+6MO0xTXDr6D25sT2nGiVkEX5
FjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MzExRUUvMzk3QkFEMEE4QkE4MTFFRjhBNzQwODQyNzYyRTk1MUEvdnVqRHRN
VTF3Ni1nOXViRTlweG9sWkJGLVJZLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvdnVqRHRNVTF3Ni1nOXViRTlweG9sWkJGLVJZLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzExRUUvMzk3QkFEMEE4QkE4MTFFRjhBNzQwODQyNzYy
RTk1MUEvRDNBMDUyREU4QzUwMTFFRjk2MkVCNjZCNzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACwP8IAwDQYJKoZIhvcNAQEL
BQADggEBAGjLW2euIXUPgRJoIRkwUI4mZ8lu4gZDF5czonP0rkc6eqeOeCdnRNDl
LFCL7BZDXIdussEz9w8kpFcwbCLfSKuLb+Ffb5BM8nbL5mawDZaMsCVr+e0PkjnV
Wzg1SJU97sDhKTv+tDpok+TY0EbMc9CZQ+DfAND4iwy868uI1XAB9zqVgLH2Ekxg
wE+WZJcFN2qj7QRt6iJK6Q8YQLi7jmBmfJ1Uou+CW6NdrviHEfWYmESOeEqarZRA
uTglZ9S4dhSyj2/Mn9li9VwztqElrO9AsDG+a2rty27K84hH3BNV9HpqZejEtdY7
Ohdlmt4QW0CJTE5uHiMPBsbbXFltqv0=
-----END CERTIFICATE-----
Generated at Thu Oct 24 07:10:16 2024 by rpki-client on console-ams.rpki-client.org