Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/9291A14C941E11EEBBAE4A1ED25BE465.roa
File: 9291A14C941E11EEBBAE4A1ED25BE465.roa (raw, json)
Hash identifier: hoQ0WHzltGfNVqWYNvwkPi5gw4CWcPqSrUNOVflBYxw=
Subject key identifier: 20:FA:4D:93:66:A9:04:A2:02:32:8C:BE:6F:0E:43:CC:77:A6:24:8F
Certificate issuer: /CN=F363EA80AF/serialNumber=C67C6231120941235581D5942565ABF7419DCECC
Certificate serial: FC
Authority key identifier: C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/9291A14C941E11EEBBAE4A1ED25BE465.roa
Signing time: Wed 06 Dec 2023 10:02:32 +0000
ROA not before: Wed 06 Dec 2023 10:02:29 +0000
ROA not after: Tue 06 Dec 2033 10:02:29 +0000
asID: 19711
IP address blocks: 2001:4338::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.crl
rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.mft
rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 20 Jun 2024 00:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363EA80AF/serialNumber=C67C6231120941235581D5942565ABF7419DCECC
Validity
Not Before: Dec 6 10:02:29 2023 GMT
Not After : Dec 6 10:02:29 2033 GMT
Subject: CN=657046b8-d084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c4:35:40:0d:bb:5d:9b:2a:5e:21:c5:8f:7a:
9f:59:08:58:a1:3e:ab:f9:39:a1:21:43:a7:8b:00:
69:09:ce:e4:2a:26:c6:a8:e9:2f:5e:7f:b5:a3:21:
04:51:98:59:b7:c1:a4:0c:33:46:bb:e4:89:35:ae:
8e:22:5b:4d:98:cf:3a:e8:98:2c:ee:0e:d7:5d:37:
e7:38:44:b7:89:cb:30:33:52:3d:29:ed:72:f8:b9:
69:b2:ce:26:67:22:a5:84:cd:0a:09:3b:8e:e2:64:
4e:e2:27:f5:f7:9e:13:da:ab:61:26:61:e1:d4:86:
bc:44:e2:71:47:ef:86:c8:06:e4:57:eb:5a:c2:fb:
a6:62:55:30:d1:47:c7:44:d2:47:2b:c3:07:27:04:
5e:33:04:05:ad:cf:e4:1f:87:24:7d:f9:8c:e5:3b:
40:c7:db:f2:79:8a:d5:21:b5:87:9c:36:62:7a:8f:
e1:80:6c:c2:2f:52:9b:86:1d:7d:8b:70:96:25:07:
44:10:c7:dd:d6:0b:2e:17:de:90:44:fd:99:83:b8:
28:b5:60:b8:89:c6:b1:57:6e:4f:8f:a4:60:1b:02:
ef:31:da:15:2f:9c:dd:5d:a8:fb:de:c1:8f:fb:60:
64:cd:e9:23:f7:fe:93:47:43:04:ae:69:9c:b4:b7:
ae:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FA:4D:93:66:A9:04:A2:02:32:8C:BE:6F:0E:43:CC:77:A6:24:8F
X509v3 Authority Key Identifier:
keyid:C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/9291A14C941E11EEBBAE4A1ED25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:4338::/64
Signature Algorithm: sha256WithRSAEncryption
75:48:7b:5d:66:c9:c2:db:57:ad:e5:08:71:01:32:e8:e3:dc:
ca:cc:4e:ff:01:59:3b:0b:0a:7f:ab:82:92:a1:83:bc:80:7e:
d3:e1:36:00:26:e5:23:ef:17:13:44:5c:1c:15:90:51:1a:14:
b6:22:86:c4:8a:8b:06:15:8f:ef:4b:4c:db:4a:9d:1b:3a:89:
06:d7:27:d5:02:9e:98:a7:28:11:44:b8:27:e0:2a:9b:42:31:
4b:38:39:2e:7f:1e:74:3a:b7:cc:74:08:e6:66:3d:26:9d:ae:
78:8f:a8:90:35:e2:cb:ae:db:95:70:87:6a:4c:2e:8b:4c:94:
7d:53:3b:0e:4f:33:a2:36:56:5f:15:19:e2:4b:0d:80:23:50:
b4:11:15:ee:94:3d:1f:9a:54:13:d4:9e:34:a5:61:28:35:d4:
91:ba:51:fa:1c:ab:9b:79:27:d3:a9:8b:6e:cf:3e:a6:b0:cf:
cf:cf:18:3a:2a:6a:a5:39:38:42:ca:cc:57:f2:8d:ac:2d:95:
a5:2d:3b:75:26:12:7c:2a:c2:32:0e:a9:08:91:ed:f8:a8:16:
d3:bf:d7:5f:80:3d:c7:dd:b3:d3:bd:6d:60:77:e3:b9:49:c8:
22:ae:fb:91:90:38:68:d8:6b:a7:d8:40:71:a5:d7:6c:ea:28:
91:b4:52:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 02:56:14 2024 by rpki-client on console-fra.rpki-client.org