Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/771608343F6511EFB9F4EABA762E951A.roa
File: 771608343F6511EFB9F4EABA762E951A.roa (raw, json)
Hash identifier: 9Q+GZAt0BfDQgU00GMZWd99zLhXCbOr7gAEaYiC7Dyo=
Subject key identifier: B6:A8:BD:F8:FE:62:DA:75:BA:BC:6C:41:A0:63:0B:84:4E:56:F8:80
Certificate issuer: /CN=F3656BB8AF/serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
Certificate serial: 0107
Authority key identifier: F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/771608343F6511EFB9F4EABA762E951A.roa
Signing time: Thu 11 Jul 2024 09:10:49 +0000
ROA not before: Thu 11 Jul 2024 09:10:46 +0000
ROA not after: Tue 11 Jul 2034 09:10:46 +0000
asID: 14618
IP address blocks: 2001:43ff:d000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Oct 2024 00:19:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656BB8AF/serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
Validity
Not Before: Jul 11 09:10:46 2024 GMT
Not After : Jul 11 09:10:46 2034 GMT
Subject: CN=668fa199-6e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bd:c5:41:f7:0c:d0:f8:ce:db:18:e8:8e:d7:
26:c4:b6:a0:21:d6:53:94:da:24:9a:7c:31:09:ff:
b3:b3:a3:a4:0a:66:71:d3:3c:dc:54:94:16:d9:72:
70:3a:6b:86:40:88:36:ff:72:b5:59:7a:2d:1c:41:
5b:51:69:7a:91:e4:0c:15:0f:2a:a9:32:b2:57:60:
82:d7:9c:db:35:f1:8b:1a:a1:63:98:a9:18:b4:18:
e5:fa:ca:f9:00:df:ac:09:99:15:28:34:e2:a4:2c:
a7:81:9f:cb:26:c1:17:25:28:0b:48:a2:a3:f6:83:
a5:a7:22:d7:b9:4a:1f:0e:94:fd:ba:00:08:19:c3:
c8:5e:1d:b2:86:f5:d9:c7:8b:80:27:f6:bf:fe:a9:
ae:f4:5e:85:68:6c:68:cb:e1:b2:0e:25:65:b8:d5:
ac:fc:14:0c:54:5d:97:30:db:4f:5a:f3:77:87:d0:
da:b2:20:3f:73:d5:d6:07:b5:98:c9:67:de:2a:b5:
29:88:a3:93:3c:8b:d7:e9:9c:48:38:13:61:e0:8b:
69:9b:e2:d1:52:a7:b1:4c:e0:a5:ce:a1:94:45:17:
f4:36:71:87:12:80:c2:9c:73:03:39:a1:1b:5a:68:
0e:c2:33:dc:07:6f:e5:fa:3c:1c:eb:c4:c1:42:06:
40:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A8:BD:F8:FE:62:DA:75:BA:BC:6C:41:A0:63:0B:84:4E:56:F8:80
X509v3 Authority Key Identifier:
keyid:F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/771608343F6511EFB9F4EABA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43ff:d000::/48
Signature Algorithm: sha256WithRSAEncryption
62:91:f9:c2:c3:54:f5:7a:19:15:f2:e7:bd:2c:3b:04:39:ba:
48:29:0f:bc:7b:46:59:7e:34:23:2e:19:03:eb:75:7e:fd:61:
ba:68:14:45:f1:eb:37:83:1a:2d:80:1f:68:37:06:02:7b:3d:
cb:93:71:02:18:34:b5:14:8b:f4:10:93:c6:12:cb:81:ac:9e:
9d:1b:cf:90:72:d6:96:24:28:53:0d:d3:55:12:0e:4b:19:42:
00:ee:94:d1:d8:c2:c7:6b:f0:eb:09:dc:51:87:28:c6:05:5e:
2b:18:64:3d:28:06:0b:5b:4d:ce:9e:97:55:ee:39:98:70:a5:
ba:8d:4b:54:e5:24:66:df:21:07:cf:5f:ec:cd:e4:64:7e:b1:
4c:0c:50:08:88:24:b8:ff:13:e8:f6:39:3b:46:91:59:1b:ed:
f8:19:a1:2d:61:d3:00:10:47:ce:f8:ed:c8:f2:13:13:2f:40:
91:75:43:d3:0d:fc:17:cb:70:c6:87:58:87:fc:e0:94:1d:64:
ae:85:5a:f3:5d:b3:26:1a:5f:03:c7:2a:ab:34:98:49:4a:b3:
16:85:eb:de:59:19:d0:ec:2c:52:93:fe:c9:89:58:ef:92:05:
b7:36:d7:50:bc:1d:ab:f8:47:42:8b:05:b4:6b:cc:79:35:89:
f2:09:c7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 10:18:04 2024 by rpki-client on console-ams.rpki-client.org