Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/7A8C97107FE511EFB8E44791762E951A.roa
File: 7A8C97107FE511EFB8E44791762E951A.roa (raw, json)
Hash identifier: AH8DtFHeq8MnXy0oZ85/RX+mX+FZ7sL97pcuKDpfLIU=
Subject key identifier: E8:55:48:56:74:BD:AC:14:14:C2:21:D8:82:5F:AC:0E:5B:3A:5F:6E
Certificate issuer: /CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Certificate serial: 0A
Authority key identifier: C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/7A8C97107FE511EFB8E44791762E951A.roa
Signing time: Tue 01 Oct 2024 11:08:25 +0000
ROA not before: Tue 01 Oct 2024 11:08:22 +0000
ROA not after: Wed 01 Oct 2025 11:08:22 +0000
asID: 329403
IP address blocks: 2c0f:2e40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft
rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Validity
Not Before: Oct 1 11:08:22 2024 GMT
Not After : Oct 1 11:08:22 2025 GMT
Subject: CN=66fbd829-ecb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:cf:23:16:9c:a9:81:20:76:c2:04:e9:d1:
15:28:77:14:6c:97:cb:ec:0b:ed:af:77:1e:23:9f:
f4:9a:e1:a2:a6:35:57:46:62:e4:fb:cd:97:a6:6c:
12:50:17:52:a7:66:b9:71:bd:43:95:9d:58:eb:14:
d8:70:08:c4:17:79:5a:88:6c:62:5a:6c:04:d3:c6:
7e:76:89:25:b4:45:66:8b:0c:1c:a4:bc:31:2f:15:
f6:44:68:64:d9:e5:66:00:37:da:87:8c:1a:27:7e:
f9:50:93:a1:76:a0:a5:50:1b:7f:1a:96:8c:27:c7:
4b:ef:ae:13:82:d2:04:db:20:27:f4:74:ad:39:f0:
35:1e:4d:23:48:93:fd:ef:ca:d1:8e:ee:79:23:07:
62:38:27:65:a6:5f:9b:12:df:ab:24:38:81:99:f1:
75:bc:25:76:9d:36:76:ac:3e:1b:c4:73:7d:e9:f2:
33:1e:00:26:39:cf:e6:85:74:f3:1d:72:0d:42:72:
1c:08:8a:c7:75:6f:de:ff:cb:61:ac:5a:a4:6c:75:
c2:f2:33:fb:1d:cc:a7:ed:c8:47:2f:c2:1b:3e:c4:
45:a6:2f:3e:6e:66:ba:a1:70:48:77:52:09:dc:65:
a9:3c:a6:f8:7d:ab:1d:94:ec:55:b4:91:a5:ab:39:
aa:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:55:48:56:74:BD:AC:14:14:C2:21:D8:82:5F:AC:0E:5B:3A:5F:6E
X509v3 Authority Key Identifier:
keyid:C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/7A8C97107FE511EFB8E44791762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:2e40::/48
Signature Algorithm: sha256WithRSAEncryption
7f:3e:5b:cf:d9:04:cc:aa:b3:d1:ad:2a:ac:b1:d6:05:6c:3b:
5a:26:d8:ce:98:c0:34:a8:8d:e0:55:15:93:2c:70:bc:6f:42:
9a:d2:86:2e:33:bf:21:d5:1f:d5:0a:40:a5:1a:d9:7e:27:8f:
22:b3:59:a9:e4:68:32:9e:ca:6c:b7:99:50:0c:5a:64:7a:d0:
fa:0f:06:69:26:70:b7:d3:04:3c:1e:e4:88:e5:4b:08:87:ae:
e1:c8:9f:cc:44:fd:09:33:65:81:a2:ac:83:04:07:b9:9d:54:
9c:36:3c:34:1a:80:78:c7:b5:33:ce:91:5e:14:88:e4:78:82:
ec:92:7a:7f:ad:46:79:5b:02:bd:ab:02:c0:5d:2a:33:3d:da:
5e:b9:ee:75:44:8e:e5:5c:95:13:22:be:85:63:98:ce:04:9b:
f3:f3:6a:8c:ca:55:ec:10:93:29:6e:73:2f:92:8f:22:92:08:
2b:78:69:66:30:98:ed:e2:05:83:ef:c1:6f:1c:ab:52:5b:f9:
b6:d4:f5:4d:7c:63:4f:f1:f3:89:af:2a:b7:95:9d:e2:0c:a3:
d3:fd:2f:58:df:1a:68:ca:99:d3:b3:bd:40:74:a2:9f:87:76:
7d:59:c4:40:ee:0f:0c:62:5f:09:57:79:66:6f:81:eb:4c:f0:
ad:1e:52:25
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIBCjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYz
MzdFNUFGMTEwLwYDVQQFEyhDOUMxMjlGQkMzQzgyNzNBNDYyOTU1QTk1MjhFMEFB
QzJGMkU5ODJDMB4XDTI0MTAwMTExMDgyMloXDTI1MTAwMTExMDgyMlowGDEWMBQG
A1UEAxMNNjZmYmQ4MjktZWNiNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALvgzyMWnKmBIHbCBOnRFSh3FGyXy+wL7a93HiOf9JrhoqY1V0Zi5PvNl6Zs
ElAXUqdmuXG9Q5WdWOsU2HAIxBd5WohsYlpsBNPGfnaJJbRFZosMHKS8MS8V9kRo
ZNnlZgA32oeMGid++VCToXagpVAbfxqWjCfHS++uE4LSBNsgJ/R0rTnwNR5NI0iT
/e/K0Y7ueSMHYjgnZaZfmxLfqyQ4gZnxdbwldp02dqw+G8RzfenyMx4AJjnP5oV0
8x1yDUJyHAiKx3Vv3v/LYaxapGx1wvIz+x3Mp+3IRy/CGz7ERaYvPm5muqFwSHdS
CdxlqTym+H2rHZTsVbSRpas5qqUCAwEAAaOCAqgwggKkMB0GA1UdDgQWBBToVUhW
dL2sFBTCIdiCX6wOWzpfbjAfBgNVHSMEGDAWgBTJwSn7w8gnOkYpValSjgqsLy6Y
LDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MzM3RTUvOTc5QkE2NDA3RkUzMTFFRjgzNDc1NTg2NzYyRTk1MUEveWNFcC04
UElKenBHS1ZXcFVvNEtyQzh1bUN3LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMveWNFcC04UElKenBHS1ZXcFVvNEtyQzh1bUN3LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzM3RTUvOTc5QkE2NDA3RkUzMTFFRjgzNDc1NTg2NzYy
RTk1MUEvN0E4Qzk3MTA3RkU1MTFFRkI4RTQ0NzkxNzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACwPLkAAADANBgkqhkiG9w0B
AQsFAAOCAQEAfz5bz9kEzKqz0a0qrLHWBWw7WibYzpjANKiN4FUVkyxwvG9CmtKG
LjO/IdUf1QpApRrZfiePIrNZqeRoMp7KbLeZUAxaZHrQ+g8GaSZwt9MEPB7kiOVL
CIeu4cifzET9CTNlgaKsgwQHuZ1UnDY8NBqAeMe1M86RXhSI5HiC7JJ6f61GeVsC
vasCwF0qMz3aXrnudUSO5VyVEyK+hWOYzgSb8/NqjMpV7BCTKW5zL5KPIpIIK3hp
ZjCY7eIFg+/BbxyrUlv5ttT1TXxjT/Hzia8qt5Wd4gyj0/0vWN8aaMqZ07O9QHSi
n4d2fVnEQO4PDGJfCVd5Zm+B60zwrR5SJQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:32 2024 by rpki-client on console-ams.rpki-client.org