Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/9B7048D0C02F11EEA5399884775412E6.roa
File: 9B7048D0C02F11EEA5399884775412E6.roa (raw, json)
Hash identifier: VTHjupL6YcJaHQh+1pckr7kYov8iwfUDtd/fZWiDaH8=
Subject key identifier: 66:8F:71:54:A5:A8:4D:FE:76:00:7E:AA:92:60:20:F0:84:C8:AE:C9
Certificate issuer: /CN=F364321AAF/serialNumber=3DA3DDAE4FD574BDFADB2FE7524D5D303741352C
Certificate serial: 0163
Authority key identifier: 3D:A3:DD:AE:4F:D5:74:BD:FA:DB:2F:E7:52:4D:5D:30:37:41:35:2C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PaPdrk_VdL362y_nUk1dMDdBNSw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/9B7048D0C02F11EEA5399884775412E6.roa
Signing time: Wed 31 Jan 2024 11:55:20 +0000
ROA not before: Wed 31 Jan 2024 11:55:16 +0000
ROA not after: Thu 31 Jan 2030 11:55:16 +0000
asID: 327697
IP address blocks: 2c0f:3780:2110::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.crl
rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.mft
rsync://rpki.afrinic.net/repository/afrinic/PaPdrk_VdL362y_nUk1dMDdBNSw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 May 2024 00:04:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364321AAF/serialNumber=3DA3DDAE4FD574BDFADB2FE7524D5D303741352C
Validity
Not Before: Jan 31 11:55:16 2024 GMT
Not After : Jan 31 11:55:16 2030 GMT
Subject: CN=65ba3528-b86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:f6:2c:4f:2b:6d:d8:8b:79:92:98:88:7d:
cc:92:72:36:f7:6c:38:aa:21:17:8c:e4:4f:aa:6f:
75:a4:34:b9:02:80:99:04:4c:68:93:7c:3d:b7:e2:
ff:c1:c9:f5:9c:bf:19:7e:85:e4:db:83:ca:af:4c:
e5:a2:37:47:db:e8:30:e6:99:5c:e0:44:f3:d8:26:
05:94:57:fe:66:3c:cf:3d:90:b8:d2:8f:4f:82:ea:
ce:c5:9b:a8:b6:c2:b1:58:f1:84:da:55:58:68:9a:
a5:90:d4:c5:a2:47:bb:5a:ff:69:6b:4d:5a:f7:c8:
75:ed:7d:a1:26:ed:4d:95:d2:87:df:98:f3:cc:d6:
ec:47:43:c8:30:22:ca:01:b7:83:67:55:a2:1c:26:
b4:7b:f9:81:30:2a:f3:5a:ec:dd:f9:5a:e3:96:c0:
91:4c:01:72:24:9a:ea:3a:3b:5d:4a:16:db:55:7f:
bf:c0:79:7f:0a:b3:d8:90:31:1c:ef:41:54:88:6d:
42:13:5f:11:f1:7f:cc:87:67:4a:9b:54:4c:68:42:
81:ed:bc:22:40:1b:4e:9e:c6:8b:9c:aa:7d:3a:3b:
dc:04:4f:a2:8a:b5:e5:f4:71:d1:87:35:e8:a7:96:
31:01:3b:63:66:31:2d:91:23:d6:69:09:02:46:22:
c7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8F:71:54:A5:A8:4D:FE:76:00:7E:AA:92:60:20:F0:84:C8:AE:C9
X509v3 Authority Key Identifier:
keyid:3D:A3:DD:AE:4F:D5:74:BD:FA:DB:2F:E7:52:4D:5D:30:37:41:35:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PaPdrk_VdL362y_nUk1dMDdBNSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/9B7048D0C02F11EEA5399884775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:3780:2110::/44
Signature Algorithm: sha256WithRSAEncryption
27:da:d4:ba:6f:66:95:1e:14:96:b8:ad:5b:43:9b:a3:5a:7b:
9c:d3:30:04:00:7e:a2:97:00:f3:a1:e3:52:de:86:ea:b1:6f:
18:54:5a:fa:a3:ce:8b:2d:00:0b:03:f0:a3:ff:11:17:6e:d4:
19:7a:9f:7b:f9:d3:90:b3:b7:a3:71:41:43:03:1c:b4:5b:18:
d2:cc:53:14:5a:24:c3:6a:2f:7a:35:68:30:99:4a:4a:08:f8:
db:3e:64:fa:2e:df:84:4a:5e:24:43:9b:39:ad:14:82:60:5e:
7f:5b:49:c7:51:e1:ed:4d:a5:30:a4:d6:34:60:c2:c3:76:c0:
24:4a:ce:c7:8c:86:d6:80:51:82:7c:8f:77:87:68:b1:3d:26:
c3:57:7a:9e:2e:31:f0:65:99:3e:14:9f:44:d4:97:1a:8f:44:
ea:6a:40:0b:37:f8:0d:ee:f0:0f:a6:53:0a:60:39:a5:4a:76:
7c:51:68:27:c9:87:1e:7b:de:5b:aa:c4:4f:09:f8:cc:93:68:
3e:04:b8:44:38:3c:59:49:96:c2:c5:75:7d:e1:41:68:93:d4:
4a:77:2f:20:55:2a:ee:3e:26:a4:b0:15:10:07:61:fd:23:6f:
10:9b:7b:56:99:a8:36:9f:bd:90:ec:cd:2f:25:13:00:30:bf:
9a:d6:15:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 03:14:19 2024 by rpki-client on console-fra.rpki-client.org