Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/8981BFF8CD7511EDADBDC297F1222468.roa
File: 8981BFF8CD7511EDADBDC297F1222468.roa (raw, json)
Hash identifier: XHwwuY3b3DDaJzLvFzJY6Cge3h5RZq961ny7aXpfhL8=
Subject key identifier: 39:32:1E:D9:3B:B5:A8:44:EB:3D:4F:F8:56:0E:ED:BE:03:EA:C3:A4
Certificate issuer: /CN=F365062AAF/serialNumber=5D254CBC9DCA24767E2486009680B743411F08F8
Certificate serial: 08
Authority key identifier: 5D:25:4C:BC:9D:CA:24:76:7E:24:86:00:96:80:B7:43:41:1F:08:F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/8981BFF8CD7511EDADBDC297F1222468.roa
Signing time: Tue 28 Mar 2023 14:33:42 +0000
ROA not before: Tue 28 Mar 2023 14:33:38 +0000
ROA not after: Thu 31 Mar 2033 14:33:38 +0000
asID: 37309
IP address blocks: 2c0f:fd08::/32 maxlen: 56
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.crl
rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft
rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365062AAF/serialNumber=5D254CBC9DCA24767E2486009680B743411F08F8
Validity
Not Before: Mar 28 14:33:38 2023 GMT
Not After : Mar 31 14:33:38 2033 GMT
Subject: CN=6422fac6-33b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:66:bf:73:63:23:22:39:81:ef:da:b1:bb:
ec:2e:e8:25:17:67:19:54:a8:5c:44:2f:2f:bf:c2:
8d:bf:72:f0:4e:39:d4:40:dc:49:9f:19:ae:8e:fe:
be:14:60:4f:3f:2f:45:24:c4:69:9e:92:f3:6e:a2:
3d:29:6b:a8:29:0e:de:31:dc:40:b6:74:02:9e:6f:
0b:9a:64:9a:f2:49:c2:d5:1d:03:39:02:d7:cb:89:
a8:82:be:12:5c:9c:5f:06:45:5e:1a:2c:2f:f4:f8:
38:41:80:41:5b:17:b1:dd:f4:49:b7:4b:17:bf:95:
e8:2e:ca:fe:97:99:ae:e3:fb:f6:18:c9:80:9c:66:
a1:38:3a:c4:3e:f9:47:91:ae:e9:b7:00:1d:f7:1d:
04:f1:12:c7:b9:fa:80:e0:24:ed:d4:2f:17:cf:a5:
ab:49:bd:f7:83:07:44:99:9a:4c:44:ef:32:09:fc:
1a:9c:85:f4:f1:6a:47:4b:7c:34:ab:bb:3e:13:c0:
3b:8e:bb:09:be:0d:a3:0e:48:c5:47:5f:27:ea:43:
56:08:d5:53:3e:6a:c3:0b:e2:ea:d0:ad:88:5f:5b:
0d:02:64:88:d9:7c:a2:01:4b:7b:04:9c:2c:13:23:
42:60:c1:b7:01:ac:f6:58:e5:c1:76:ba:72:50:be:
02:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:32:1E:D9:3B:B5:A8:44:EB:3D:4F:F8:56:0E:ED:BE:03:EA:C3:A4
X509v3 Authority Key Identifier:
keyid:5D:25:4C:BC:9D:CA:24:76:7E:24:86:00:96:80:B7:43:41:1F:08:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/8981BFF8CD7511EDADBDC297F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fd08::/32
Signature Algorithm: sha256WithRSAEncryption
95:dd:52:e6:69:5d:bf:e7:cd:86:99:1a:c7:75:3e:f9:5a:2d:
22:d8:e7:10:99:b1:97:b7:76:75:66:82:77:48:86:7c:64:84:
f5:6e:37:21:9c:73:f3:1f:4a:6f:78:19:0d:3f:a2:0c:81:a4:
bc:dc:a2:c4:ad:6d:d1:ac:40:34:5a:b4:58:d1:07:af:0a:79:
9b:e5:a1:ab:66:9b:cc:51:4f:41:bd:52:e5:71:1e:72:f0:16:
bc:58:9d:1f:ef:6e:c5:de:21:a9:e0:70:fd:8f:f7:f8:c4:33:
f5:ee:28:bd:c6:b7:e0:60:84:6b:e4:cc:5a:c6:e5:b6:8c:f6:
5b:a7:8b:a2:d7:81:1e:a3:25:c0:58:91:f0:de:cc:3d:2a:61:
74:e2:bb:96:93:70:b8:08:cf:6f:9a:46:37:43:c0:d0:d0:8d:
01:52:3b:b7:0e:fd:a5:a6:3b:1c:2d:4e:25:aa:59:22:78:32:
95:c6:35:10:f7:ec:09:59:27:80:86:50:e1:d6:2a:44:71:e1:
0e:48:39:d9:8a:93:41:e1:2d:f0:0b:fd:87:e8:55:39:08:7b:
2f:52:65:e8:c5:8d:3a:47:2e:2d:9a:44:09:d3:f6:ee:e8:92:
42:0e:91:85:75:90:7d:43:7c:4d:6c:3d:02:9b:12:8f:51:68:
ac:b2:c1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:54 2024 by rpki-client on console-fra.rpki-client.org