Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/A97B972E7FE511EF83081793762E951A.roa
File: A97B972E7FE511EF83081793762E951A.roa (raw, json)
Hash identifier: mN6sdorObjWRjdE+T1AUWFBe0BDnfK2FWZtt0dewwa0=
Subject key identifier: DE:C9:3B:5B:E2:26:28:2E:DE:90:58:89:82:8D:E1:0E:DA:6C:A9:DE
Certificate issuer: /CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Certificate serial: 0C
Authority key identifier: C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/A97B972E7FE511EF83081793762E951A.roa
Signing time: Tue 01 Oct 2024 11:09:44 +0000
ROA not before: Tue 01 Oct 2024 11:09:40 +0000
ROA not after: Wed 01 Oct 2025 11:09:40 +0000
asID: 329403
IP address blocks: 2c0f:2e40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft
rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Validity
Not Before: Oct 1 11:09:40 2024 GMT
Not After : Oct 1 11:09:40 2025 GMT
Subject: CN=66fbd878-f048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cb:fc:12:c4:32:d5:d2:cf:f9:4b:bc:80:71:
ba:a8:ce:de:a4:34:62:0b:ed:46:69:80:a0:7e:08:
51:82:42:fe:f5:16:74:37:1a:1a:05:56:b7:fe:13:
8d:a9:1d:b5:88:64:0a:c0:8a:e8:ac:a2:50:98:18:
52:9e:b8:c7:e3:2f:b1:fe:5b:7e:18:36:5a:45:1e:
47:32:8a:d9:0a:31:b6:2c:93:50:52:f1:a5:0d:5f:
09:e9:fb:e3:68:6c:02:67:13:ca:6a:0d:24:ee:b6:
7d:31:1d:f1:38:aa:36:02:54:00:20:29:71:a5:78:
35:1e:ef:c3:20:72:02:14:33:44:d4:b2:cd:de:0c:
35:4b:e0:26:62:46:3c:55:65:98:4d:f2:19:dd:32:
24:18:0f:9f:e0:5e:d0:a6:17:7e:57:80:f6:cc:46:
d2:80:ee:33:9e:96:01:3b:47:cd:3a:19:ba:33:ee:
13:fe:1f:81:27:2c:99:d2:ff:1e:c5:d7:ba:71:a6:
fc:b0:73:c2:62:26:62:6e:08:b2:27:e1:82:d5:34:
9d:74:cf:6c:14:8f:37:a6:7f:6d:53:fc:9c:ab:f8:
d8:a3:7d:b3:50:63:fd:5b:d8:27:53:c0:f8:2c:f7:
ac:6d:ea:2f:96:62:54:95:cf:1f:43:98:2f:6e:b2:
f4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C9:3B:5B:E2:26:28:2E:DE:90:58:89:82:8D:E1:0E:DA:6C:A9:DE
X509v3 Authority Key Identifier:
keyid:C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/A97B972E7FE511EF83081793762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:2e40:1::/48
Signature Algorithm: sha256WithRSAEncryption
8d:5e:58:d9:b7:c1:c5:0e:71:c2:6c:7b:64:8b:c4:da:a3:2b:
c2:98:4b:60:dd:9b:78:8b:4c:b3:40:be:e1:b9:4a:6f:94:7f:
75:d3:59:3a:33:ac:d7:3e:2b:bc:04:78:b0:d8:c1:be:0e:ab:
61:2e:66:1a:11:77:e1:03:f5:ca:73:c0:d8:b3:46:d2:d4:4d:
d7:2a:b6:d4:66:1d:8a:ea:a4:e3:f9:46:f7:98:1b:68:0b:d1:
be:79:c9:f2:fc:a0:b6:dd:9c:1d:9d:7d:62:12:03:ad:61:79:
b0:ae:03:15:1b:4f:b2:44:e1:b6:1f:21:96:0c:82:7d:8f:f4:
73:8e:0a:ce:0f:53:f7:53:33:52:61:00:9e:48:af:0c:46:2f:
5f:16:1c:65:e0:16:77:7d:eb:e0:c0:73:47:27:c6:d3:e8:e0:
13:49:47:6c:7f:78:95:57:8e:34:51:4c:7a:ee:86:18:4b:65:
56:70:77:cd:ad:22:21:4b:f8:0b:29:8a:bd:cb:83:96:61:e9:
82:3d:85:b8:06:1e:b3:51:ef:4a:f3:52:b5:0c:fc:50:77:f4:
d0:0d:d7:d0:6b:7d:e6:21:38:4a:a7:bc:d0:94:04:41:b4:8d:
05:23:48:60:74:20:8a:7f:36:f6:96:c3:da:30:47:58:0f:6e:
a3:90:da:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:53 2024 by rpki-client on console-fra.rpki-client.org