Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/0B46727E5EF011EF8D699F89762E951A.roa
File: 0B46727E5EF011EF8D699F89762E951A.roa (raw, json)
Hash identifier: nreAgp5N7RBReJoLfOebgUnXd2HE0IWmlaF+azLEc+E=
Subject key identifier: BC:18:15:11:81:B1:AF:97:D6:01:D8:DC:CA:2C:4E:C4:7E:22:17:AD
Certificate issuer: /CN=F3652893AF/serialNumber=509AE832ED6B89B16A9E8F7059D31002EBDF5516
Certificate serial: 06
Authority key identifier: 50:9A:E8:32:ED:6B:89:B1:6A:9E:8F:70:59:D3:10:02:EB:DF:55:16
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/UJroMu1ribFqno9wWdMQAuvfVRY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/0B46727E5EF011EF8D699F89762E951A.roa
Signing time: Tue 20 Aug 2024 12:30:55 +0000
ROA not before: Tue 20 Aug 2024 12:30:51 +0000
ROA not after: Thu 01 Aug 2030 12:30:51 +0000
asID: 328480
IP address blocks: 2c0f:ed80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.mft
rsync://rpki.afrinic.net/repository/afrinic/UJroMu1ribFqno9wWdMQAuvfVRY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3652893AF/serialNumber=509AE832ED6B89B16A9E8F7059D31002EBDF5516
Validity
Not Before: Aug 20 12:30:51 2024 GMT
Not After : Aug 1 12:30:51 2030 GMT
Subject: CN=66c48c7f-cebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b5:10:55:c3:a3:06:63:d6:49:87:36:cd:59:
b7:c3:ef:e2:81:a5:cf:13:80:36:55:08:78:8f:2d:
2a:9d:02:1a:07:1f:4a:d2:c0:fc:17:00:88:19:24:
a6:c1:cd:f9:d1:3b:54:5c:b0:a2:62:1c:d7:68:6e:
b1:77:5e:88:fb:37:23:9a:7d:b7:78:13:4f:7b:6d:
d1:4e:69:51:a6:1e:da:25:19:52:36:c0:97:0e:88:
e2:d7:6e:6a:ba:27:0f:34:ff:70:9e:e0:56:ea:c0:
0e:71:47:4c:36:0e:44:ac:70:12:cb:18:ee:3b:03:
f8:ab:aa:8d:31:df:80:7f:87:aa:4d:41:05:a7:1f:
01:19:40:01:26:06:da:3a:ae:e5:10:3f:75:c8:d9:
cb:68:ad:9c:6c:89:9b:6f:99:54:3b:19:5f:7d:a4:
de:98:5c:1b:d8:da:17:30:6e:a3:eb:90:66:66:ff:
2a:83:db:2d:43:80:74:4d:6d:42:49:4b:93:90:a6:
bd:49:c4:47:c1:e5:d2:dd:17:6a:c1:7d:3d:0f:85:
14:79:08:6e:86:2c:16:61:de:35:41:ea:be:9f:29:
ed:bb:9c:54:6b:a3:ea:97:e0:5a:44:1d:27:c9:76:
53:a5:41:d1:4b:a5:22:73:c0:37:ab:04:2b:27:1f:
39:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:18:15:11:81:B1:AF:97:D6:01:D8:DC:CA:2C:4E:C4:7E:22:17:AD
X509v3 Authority Key Identifier:
keyid:50:9A:E8:32:ED:6B:89:B1:6A:9E:8F:70:59:D3:10:02:EB:DF:55:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UJroMu1ribFqno9wWdMQAuvfVRY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/0B46727E5EF011EF8D699F89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:ed80::/32
Signature Algorithm: sha256WithRSAEncryption
5e:5b:fe:72:54:30:e2:09:9e:aa:f9:50:b2:68:66:20:48:e0:
11:65:7e:54:5a:51:98:95:e5:3f:84:71:20:c2:f3:56:71:6c:
9d:61:80:5b:c7:3e:44:95:22:06:52:12:a3:51:ec:bd:94:57:
56:c7:6a:cc:6c:a0:ed:68:32:f4:91:11:7e:dc:77:fd:ba:01:
ec:ee:d1:f1:93:a1:1b:54:d5:51:39:2d:99:ed:7b:dc:5d:87:
4f:29:a4:ac:f4:d4:6f:3d:dd:7b:70:e6:3b:88:53:50:c5:9f:
22:52:99:14:26:96:1b:36:49:73:26:5c:e1:5c:03:2c:d0:e9:
a4:d4:3e:a7:26:aa:6c:67:c9:7d:2e:cc:95:3b:54:ff:84:44:
f4:7e:e9:74:88:67:9b:e8:01:9f:8c:10:77:2f:b6:c7:30:86:
69:90:59:f0:e4:b1:5c:c9:85:be:0c:b1:99:b5:00:98:77:82:
d1:84:19:d3:7d:6f:ee:29:3b:ae:fc:82:81:68:87:96:e5:b3:
76:e8:b7:00:1b:fa:e7:22:c4:1b:2f:dd:b8:bd:ec:61:2b:e4:
8a:75:2d:dc:b3:75:13:3f:45:f3:b3:55:01:43:94:60:cd:f1:
eb:78:d0:b0:59:86:37:89:a0:3d:01:8a:92:6d:15:22:80:f6:
4a:00:8f:1d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
Mjg5M0FGMTEwLwYDVQQFEyg1MDlBRTgzMkVENkI4OUIxNkE5RThGNzA1OUQzMTAw
MkVCREY1NTE2MB4XDTI0MDgyMDEyMzA1MVoXDTMwMDgwMTEyMzA1MVowGDEWMBQG
A1UEAxMNNjZjNDhjN2YtY2ViYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMu1EFXDowZj1kmHNs1Zt8Pv4oGlzxOANlUIeI8tKp0CGgcfStLA/BcAiBkk
psHN+dE7VFywomIc12husXdeiPs3I5p9t3gTT3tt0U5pUaYe2iUZUjbAlw6I4tdu
aronDzT/cJ7gVurADnFHTDYORKxwEssY7jsD+KuqjTHfgH+Hqk1BBacfARlAASYG
2jqu5RA/dcjZy2itnGyJm2+ZVDsZX32k3phcG9jaFzBuo+uQZmb/KoPbLUOAdE1t
QklLk5CmvUnER8Hl0t0XasF9PQ+FFHkIboYsFmHeNUHqvp8p7bucVGuj6pfgWkQd
J8l2U6VB0UulInPAN6sEKycfObMCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBS8GBUR
gbGvl9YB2NzKLE7EfiIXrTAfBgNVHSMEGDAWgBRQmugy7WuJsWqej3BZ0xAC699V
FjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTI4OTMvOTc0MkE2NEM1RUVEMTFFRjhDOTM0Mzc5NzYyRTk1MUEvVUpyb011
MXJpYkZxbm85d1dkTVFBdXZmVlJZLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvVUpyb011MXJpYkZxbm85d1dkTVFBdXZmVlJZLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTI4OTMvOTc0MkE2NEM1RUVEMTFFRjhDOTM0Mzc5NzYy
RTk1MUEvMEI0NjcyN0U1RUYwMTFFRjhENjk5Rjg5NzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACwP7YAwDQYJKoZIhvcNAQEL
BQADggEBAF5b/nJUMOIJnqr5ULJoZiBI4BFlflRaUZiV5T+EcSDC81ZxbJ1hgFvH
PkSVIgZSEqNR7L2UV1bHasxsoO1oMvSREX7cd/26Aezu0fGToRtU1VE5LZnte9xd
h08ppKz01G893Xtw5juIU1DFnyJSmRQmlhs2SXMmXOFcAyzQ6aTUPqcmqmxnyX0u
zJU7VP+ERPR+6XSIZ5voAZ+MEHcvtscwhmmQWfDksVzJhb4MsZm1AJh3gtGEGdN9
b+4pO678goFoh5bls3botwAb+ucixBsv3bi97GEr5Ip1LdyzdRM/RfOzVQFDlGDN
8et40LBZhjeJoD0BipJtFSKA9koAjx0=
-----END CERTIFICATE-----
Generated at Thu Oct 24 06:47:46 2024 by rpki-client on console-fra.rpki-client.org