Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/C562E1227FE511EFA4266193762E951A.roa
File: C562E1227FE511EFA4266193762E951A.roa (raw, json)
Hash identifier: MeKHI1JwEO0dNY503adBbALC+TfZ50BQKRjHS6uYj7k=
Subject key identifier: E6:F8:B5:38:23:BF:18:CF:D2:32:8B:23:EE:C4:A2:56:14:48:C5:E4
Certificate issuer: /CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Certificate serial: 0E
Authority key identifier: C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/C562E1227FE511EFA4266193762E951A.roa
Signing time: Tue 01 Oct 2024 11:10:31 +0000
ROA not before: Tue 01 Oct 2024 11:10:27 +0000
ROA not after: Wed 01 Oct 2025 11:10:27 +0000
asID: 329403
IP address blocks: 2c0f:2e40:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft
rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Validity
Not Before: Oct 1 11:10:27 2024 GMT
Not After : Oct 1 11:10:27 2025 GMT
Subject: CN=66fbd8a7-d194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4b:ce:89:2b:19:88:c4:54:df:dd:22:47:16:
d7:fd:ae:d5:3d:c6:ad:a0:0a:ae:ab:52:98:e6:3c:
8f:f3:59:75:ef:74:bd:ac:08:51:ea:e9:eb:65:89:
0c:1e:49:74:95:21:1a:4e:57:57:3f:95:43:68:7c:
44:4d:28:95:77:63:7c:9c:60:ef:6c:a4:fd:6d:85:
87:08:c0:91:2a:67:e6:4d:e0:da:67:a0:ff:c3:3b:
5c:9b:62:ad:24:e7:98:33:ae:4c:f5:54:f8:0d:8a:
c1:a1:c2:59:66:9d:cc:4a:82:63:ab:2f:a4:19:69:
63:1f:c3:33:fb:0e:5c:08:06:ca:93:b2:06:a7:51:
27:5a:89:ef:2f:fb:1b:18:27:c6:83:59:0e:8b:e9:
fc:49:75:4c:08:71:ac:59:d2:bf:f6:8f:bd:e7:8e:
57:3d:68:f5:ed:e7:d4:5d:48:15:28:df:e7:fe:0c:
10:8f:ad:5c:2e:27:08:73:4c:9a:a9:ba:cb:fd:12:
ab:ed:40:af:b1:3d:a4:ef:ea:43:28:b7:35:c3:81:
d5:a3:9f:91:40:a5:f4:f7:86:d5:ba:77:12:bf:06:
cf:99:f0:eb:e6:b3:13:3b:f1:d3:00:6c:8a:d1:bf:
11:bb:f9:d8:50:06:9a:99:92:48:11:b0:57:77:3c:
fe:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F8:B5:38:23:BF:18:CF:D2:32:8B:23:EE:C4:A2:56:14:48:C5:E4
X509v3 Authority Key Identifier:
keyid:C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/C562E1227FE511EFA4266193762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:2e40:2::/48
Signature Algorithm: sha256WithRSAEncryption
5a:6a:9f:88:e9:aa:a4:99:10:6e:09:98:d0:1a:ed:e9:92:1a:
2a:48:dc:de:9a:b3:8e:1f:82:b0:84:4e:bc:ec:81:7d:0f:5b:
2a:9c:ca:ab:ea:0d:e5:ed:0b:82:60:e9:06:27:22:8f:c2:c1:
a2:b1:ea:25:72:0a:07:28:a7:03:e7:bc:fe:a1:12:b3:bd:77:
60:1e:7d:1b:72:3d:08:34:6b:b0:fb:ea:8f:98:3f:fe:16:6a:
ee:5d:94:b6:68:ed:7d:d2:4d:2a:61:0f:0d:3d:1d:8b:95:08:
63:0a:0e:fa:a1:19:9c:e0:33:41:27:8b:50:9a:b0:54:4c:36:
a4:03:0d:51:b4:bd:4e:a2:e0:36:d0:67:bd:2c:b7:93:91:87:
7e:0b:06:73:0d:c1:c4:04:54:6e:d4:a5:97:7f:c5:a0:12:8e:
43:c2:28:ac:97:3a:68:79:ff:f4:90:aa:0d:f5:36:14:d3:4a:
f1:c8:1d:1c:cf:dc:03:a1:97:ba:68:ef:e7:7a:5c:28:bb:95:
d3:6f:d3:96:63:09:5f:9e:1b:a6:fd:24:01:4b:a5:f3:84:28:
99:eb:34:6d:1a:fc:12:2c:26:e2:8a:64:09:ba:82:3b:16:04:
c8:5b:45:35:cf:98:91:79:b9:eb:b4:5a:d5:9a:c8:28:fb:0c:
8a:b9:b9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 06:47:45 2024 by rpki-client on console-fra.rpki-client.org