Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/E1E725E27FE511EF94A66F93762E951A.roa
File: E1E725E27FE511EF94A66F93762E951A.roa (raw, json)
Hash identifier: kXVFpXwBX0moo6oFgHbW2bzPwFLvjsGItQkg+knk97g=
Subject key identifier: A9:24:D7:C7:34:AB:F8:C6:52:E9:2F:92:6D:D8:D3:65:B3:C1:8B:DF
Certificate issuer: /CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Certificate serial: 10
Authority key identifier: C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/E1E725E27FE511EF94A66F93762E951A.roa
Signing time: Tue 01 Oct 2024 11:11:19 +0000
ROA not before: Tue 01 Oct 2024 11:11:15 +0000
ROA not after: Wed 01 Oct 2025 11:11:15 +0000
asID: 329403
IP address blocks: 2c0f:2e40:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft
rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Validity
Not Before: Oct 1 11:11:15 2024 GMT
Not After : Oct 1 11:11:15 2025 GMT
Subject: CN=66fbd8d6-b32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a6:97:5c:5f:c3:f5:e8:e7:f1:af:38:14:2b:
82:12:bb:cf:f3:ce:22:ee:1a:64:a4:d7:84:c8:a2:
23:9b:28:9b:d8:21:dd:d7:e7:4a:e6:1c:a6:06:f3:
fd:b4:69:de:39:19:bc:09:a8:a3:6f:ae:c5:e2:bd:
3a:71:ba:28:4f:11:65:c2:a8:ba:fe:1d:56:84:84:
5a:ac:d4:67:74:84:ad:b3:7e:2c:56:8e:a1:39:ce:
c9:00:6a:da:36:79:14:2f:0c:f4:35:57:b7:34:ec:
59:e1:43:1b:a7:e0:f1:a5:50:b2:43:2b:3a:a7:bc:
c1:bb:68:02:51:3f:a3:f0:3a:56:aa:bd:7e:f5:83:
3d:26:c3:67:fa:e1:db:a1:42:9f:06:d8:c0:36:72:
b4:53:b9:e1:ae:ab:57:e2:47:17:90:bc:e8:c4:16:
89:72:01:58:6f:6f:74:99:05:c0:62:d3:00:db:ef:
3a:62:b6:70:b9:b0:e5:6a:6c:08:c4:3d:9a:05:61:
2b:d6:36:9a:d6:cd:48:82:36:92:3b:e9:d6:fb:93:
63:27:48:81:b3:4f:9a:64:17:41:25:f6:93:6f:12:
cd:fc:16:5c:8b:2c:45:18:a9:8e:cb:6c:63:d7:da:
62:ce:7e:e9:11:45:37:30:38:36:63:c9:53:f4:70:
48:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:24:D7:C7:34:AB:F8:C6:52:E9:2F:92:6D:D8:D3:65:B3:C1:8B:DF
X509v3 Authority Key Identifier:
keyid:C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/E1E725E27FE511EF94A66F93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:2e40:3::/48
Signature Algorithm: sha256WithRSAEncryption
4c:b4:4f:f4:65:71:f7:2e:ad:2c:9c:50:2f:6a:2f:19:7a:25:
2b:30:4b:95:4b:49:39:e8:05:2a:03:be:53:64:b9:84:1c:05:
16:08:ae:67:7e:13:66:9d:97:78:ba:b9:e0:b5:3b:57:94:15:
99:4b:eb:f6:fa:56:19:a3:f8:6f:66:b4:63:74:25:5b:ac:43:
61:57:b1:89:ad:22:bc:38:bf:9f:bf:b7:54:c0:05:e4:f5:7c:
9d:54:ad:26:48:c1:a8:72:88:2b:af:17:8b:8c:aa:01:d5:b6:
5c:09:1f:6a:af:e5:9a:a6:61:8e:f4:8e:ec:ed:66:42:d8:e5:
34:ab:b2:f8:cf:4c:b5:59:95:fa:3b:39:10:97:19:cb:87:50:
48:85:77:27:13:84:e6:39:0f:78:42:8a:c7:d3:b3:b3:b2:6a:
6a:62:2d:1e:38:a7:aa:b6:68:da:e7:f8:a7:be:38:09:2f:12:
67:6b:0b:43:ad:d7:fb:69:f7:ef:d4:e7:3a:d8:ac:67:ce:3e:
69:10:b9:ec:27:d5:3e:15:2d:2e:86:2c:17:b9:c5:1a:25:c2:
80:f9:b2:57:60:65:4e:5d:83:23:03:a3:25:47:d0:b8:3d:eb:
23:23:ed:b7:85:31:2b:22:05:6a:72:2d:08:4c:84:f5:e3:14:
de:06:44:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 06:47:45 2024 by rpki-client on console-fra.rpki-client.org