Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/615FFEA4A65E11EF903E76B3762E951A.roa
File: 615FFEA4A65E11EF903E76B3762E951A.roa (raw, json)
Hash identifier: AaKVjZQe73GcXnsIAj31QxOm6ROcXoPa0qfMAokaUHI=
Subject key identifier: 98:71:53:53:0B:76:D8:57:01:5B:E0:C4:5E:18:94:F2:A4:06:D9:F9
Certificate issuer: /CN=F3654AD1AF/serialNumber=80D435BBC77094E85B7BF3082580D127B910779E
Certificate serial: 0123
Authority key identifier: 80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/615FFEA4A65E11EF903E76B3762E951A.roa
Signing time: Tue 19 Nov 2024 10:09:36 +0000
ROA not before: Tue 19 Nov 2024 10:09:33 +0000
ROA not after: Mon 22 Nov 2027 10:09:33 +0000
asID: 328331
IP address blocks: 2c0f:eb78:1010::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl
rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3654AD1AF/serialNumber=80D435BBC77094E85B7BF3082580D127B910779E
Validity
Not Before: Nov 19 10:09:33 2024 GMT
Not After : Nov 22 10:09:33 2027 GMT
Subject: CN=673c63e0-445f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:78:69:ad:4d:03:0e:8d:2f:8f:f3:69:63:62:
df:55:6b:d7:58:74:f5:b8:48:ba:a0:71:15:54:b1:
85:44:0f:ef:2c:8a:39:5c:45:b1:00:db:f3:6c:b1:
9b:22:07:d1:c0:0f:07:fd:e3:c3:72:96:65:45:8d:
e0:fe:59:82:59:47:2a:d0:6c:bd:1e:f2:59:58:8e:
d6:16:e7:4f:0d:ba:17:6f:bc:17:7d:61:61:a7:6d:
b3:cb:9a:9c:db:31:a7:df:fc:4d:d4:c0:35:54:b3:
9e:e3:78:3f:50:ea:2e:52:63:64:47:d3:8b:76:29:
bb:fb:52:76:c6:9e:7d:f6:70:fc:08:78:dd:03:6a:
05:8d:de:fb:62:19:a6:64:3b:8e:c1:d5:ee:23:86:
49:8c:f6:73:8b:89:15:78:84:bb:d8:d4:7c:d5:8c:
dc:e2:ed:73:cf:e0:d5:c9:36:77:de:19:43:27:3c:
92:b1:d4:f9:6f:c0:3b:cc:38:9e:b9:1e:62:35:23:
0e:55:93:56:dd:99:54:8b:1e:08:b0:01:9e:1b:38:
13:7f:44:25:bc:4d:92:6d:6e:d6:44:0f:06:8f:18:
f8:ea:f9:90:6c:81:c8:c8:b1:b4:a3:f7:f3:7b:58:
c7:79:98:49:42:1a:18:1b:d1:f6:a6:41:3b:59:c9:
47:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:71:53:53:0B:76:D8:57:01:5B:E0:C4:5E:18:94:F2:A4:06:D9:F9
X509v3 Authority Key Identifier:
keyid:80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/615FFEA4A65E11EF903E76B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:eb78:1010::/44
Signature Algorithm: sha256WithRSAEncryption
45:ca:69:51:6a:26:e2:c5:94:f2:50:97:a7:e7:f8:e8:f0:63:
67:44:e9:d2:49:68:61:1f:fd:02:ea:58:92:50:a8:ca:71:56:
b2:31:91:4e:89:f8:9c:05:2c:24:32:98:c8:44:30:d6:9e:3a:
fa:fa:99:86:2a:14:89:83:49:5e:b5:cb:7b:7a:bc:cf:80:bd:
e1:9f:8e:35:a6:12:5d:a5:39:42:34:cc:01:6c:ed:b6:fc:e9:
9a:72:91:7b:ad:c8:6b:7c:84:de:fd:a5:a9:66:6d:e4:1b:5a:
41:6f:75:02:c1:47:6e:03:b6:7a:49:01:5b:b8:df:1b:d4:97:
c1:a7:25:5c:9d:b5:49:e9:7d:52:1e:8f:15:e6:de:27:76:d2:
4a:ea:86:27:4c:97:85:c5:ee:ef:e0:39:4a:7d:53:a7:9d:f3:
5f:d6:cc:e7:a8:60:3f:cd:37:98:fd:43:42:c9:8a:95:3d:7a:
83:21:ce:4c:ac:55:e5:63:51:ce:b3:63:8a:26:02:34:7a:3f:
72:69:8b:91:c3:44:3e:d5:29:0a:9e:1c:d0:ae:b2:c8:32:9c:
e0:e2:7f:cc:5f:8b:6f:40:e3:0e:a1:4a:7c:17:88:2f:6e:9c:
78:a0:46:16:87:0a:3f:f2:de:7c:17:4c:b4:6c:12:79:1e:d7:
88:6c:8e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 05:19:31 2024 by rpki-client on console-ams.rpki-client.org