Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/FA5E14007FE511EFBDA17893762E951A.roa
File: FA5E14007FE511EFBDA17893762E951A.roa (raw, json)
Hash identifier: HOWJLbvAbWrETIKjPES8sLpxeGRDhtV+tpL6Pi7P71U=
Subject key identifier: 3D:C4:FE:34:DE:34:67:D6:BD:72:1A:F8:85:93:B2:2A:03:42:60:32
Certificate issuer: /CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Certificate serial: 12
Authority key identifier: C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/FA5E14007FE511EFBDA17893762E951A.roa
Signing time: Tue 01 Oct 2024 11:12:00 +0000
ROA not before: Tue 01 Oct 2024 11:11:56 +0000
ROA not after: Wed 01 Oct 2025 11:11:56 +0000
asID: 329403
IP address blocks: 2c0f:2e40:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft
rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Validity
Not Before: Oct 1 11:11:56 2024 GMT
Not After : Oct 1 11:11:56 2025 GMT
Subject: CN=66fbd900-c4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:86:80:9c:61:83:1e:13:ca:8e:93:b1:62:97:
e6:8a:6c:a5:24:cb:aa:51:ec:7e:46:ad:2e:e3:45:
c1:33:33:09:63:b0:1a:b1:b3:45:52:d0:d7:cf:2d:
56:0f:4a:1c:7d:fb:1b:9a:2e:00:43:91:e1:0e:59:
79:fa:88:8a:d1:94:35:d1:45:73:18:59:0c:4e:ff:
c0:48:33:20:ec:96:2d:74:b6:50:3a:e1:a7:fb:6d:
30:c8:ea:69:08:20:62:23:b8:b7:bd:be:54:a2:f7:
4b:3b:b2:24:83:e3:79:16:b5:6a:a8:c5:cb:92:3e:
d8:11:9c:09:fc:c4:51:59:97:ed:eb:ce:7b:04:63:
0d:bd:c8:8f:cd:db:7b:2e:dc:6a:e1:bf:39:85:60:
8d:bb:dc:a7:ed:af:21:74:92:2b:38:61:22:a2:1d:
46:ee:60:35:7f:55:12:71:7a:79:c8:79:12:2a:1c:
d8:8a:df:94:a5:d0:a5:93:31:50:4c:60:bf:84:24:
be:cd:68:db:d6:a0:ca:2d:0a:2b:e8:c2:db:19:9a:
5e:5a:57:ca:85:2c:55:87:11:d1:fd:25:6d:a2:61:
b0:7c:82:cd:19:19:94:fd:50:d8:57:9b:82:bc:b9:
9d:19:27:31:74:86:06:46:57:68:98:b8:b6:44:31:
46:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C4:FE:34:DE:34:67:D6:BD:72:1A:F8:85:93:B2:2A:03:42:60:32
X509v3 Authority Key Identifier:
keyid:C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/FA5E14007FE511EFBDA17893762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:2e40:4::/48
Signature Algorithm: sha256WithRSAEncryption
36:49:27:a9:da:8d:bf:2c:9f:40:29:cf:99:29:79:8e:79:af:
3a:90:74:bc:6c:4b:f3:f6:12:f0:39:7c:2e:fc:d1:88:97:ac:
ba:a4:65:bd:ff:f2:03:2e:69:5b:3e:a1:bc:78:b5:a2:6f:b8:
cc:01:83:58:17:32:17:92:b5:9b:e1:a3:24:3e:24:fa:27:f7:
d1:4f:a9:8c:9f:3d:4c:af:e1:a3:7e:b6:72:40:9f:af:4b:db:
82:e9:1b:2b:c3:a9:30:0d:6f:0c:31:21:03:9a:f2:96:ed:e4:
a9:73:c6:8c:7a:6d:8e:d0:4f:c1:12:22:92:e3:4c:cd:18:fc:
a1:68:fc:20:24:90:c7:fe:5a:36:c1:7c:f1:25:33:20:46:ec:
41:d8:90:c2:8b:cd:bc:a1:e3:94:75:85:b4:ea:2f:07:10:0c:
46:84:f0:d2:0d:af:1e:d2:38:db:10:6e:ae:58:d9:b5:f3:6c:
c0:25:93:73:1b:fe:c7:b4:0c:5f:e4:03:9c:5a:f7:7c:e9:ef:
db:a5:38:9a:11:e5:f3:09:2e:d1:e2:8f:74:eb:7b:99:93:1f:
32:dc:b9:c3:57:3b:c9:da:8c:93:05:38:10:22:49:09:45:39:
f9:e6:b6:b3:65:bb:a8:75:62:40:31:6c:7b:8e:05:75:e6:28:
3f:ed:f9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 07:10:16 2024 by rpki-client on console-ams.rpki-client.org