Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/5ECDBA44DEEB11EF86169982762E951A.roa
File: 5ECDBA44DEEB11EF86169982762E951A.roa (raw, json)
Hash identifier: 33WlCnp9lrSicDVPt+G6kRAngEGsmjoeZ/V6n0jYYRk=
Subject key identifier: F4:57:0B:5A:2E:B1:A7:22:69:17:75:05:DC:AF:7E:66:F0:BC:3C:3A
Certificate issuer: /CN=F365C604AF/serialNumber=83035995DE18C9D6AD4BCBB9CD95A1504D9FCA1F
Certificate serial: 0499
Authority key identifier: 83:03:59:95:DE:18:C9:D6:AD:4B:CB:B9:CD:95:A1:50:4D:9F:CA:1F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gwNZld4YydatS8u5zZWhUE2fyh8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/5ECDBA44DEEB11EF86169982762E951A.roa
Signing time: Thu 30 Jan 2025 09:19:56 +0000
ROA not before: Thu 30 Jan 2025 09:19:52 +0000
ROA not after: Mon 01 Jan 2035 09:19:52 +0000
asID: 328826
IP address blocks: 2c0f:7240::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/gwNZld4YydatS8u5zZWhUE2fyh8.crl
rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/gwNZld4YydatS8u5zZWhUE2fyh8.mft
rsync://rpki.afrinic.net/repository/afrinic/gwNZld4YydatS8u5zZWhUE2fyh8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1177 (0x499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365C604AF
Validity
Not Before: Jan 30 09:19:52 2025 GMT
Not After : Jan 1 09:19:52 2035 GMT
Subject: CN=679b443c-0ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ad:b6:94:4f:04:9e:d0:e0:d3:9c:e1:77:08:
b2:3b:15:82:a6:b8:0a:bb:8b:f4:05:b7:3f:b8:a3:
42:e2:a2:23:25:af:ef:f4:32:ca:0a:05:ec:ec:8d:
0a:14:ef:10:a3:ac:f8:bf:f5:11:de:68:77:27:17:
ac:50:2d:f4:09:40:24:af:0c:28:2c:d0:f7:0c:88:
f5:c5:41:0c:4f:b4:a5:eb:85:93:2b:ff:82:38:d5:
66:e3:b5:02:77:51:da:5b:28:1b:5e:fa:a9:2f:a1:
a1:5e:51:3e:0c:1c:13:02:39:0d:b8:68:e8:e3:06:
14:b8:73:58:40:b4:34:9f:7f:7e:c0:d6:65:e8:fa:
eb:9b:94:95:6c:8c:c3:83:2b:dc:21:ea:1e:78:f4:
f6:e6:c4:f5:1c:aa:fd:bb:d0:66:ec:08:50:31:50:
2b:c9:64:ff:22:42:11:d3:80:36:e7:7d:e7:df:31:
39:f6:a6:4b:92:38:5f:92:80:d7:2e:b3:d4:db:af:
2b:24:79:89:82:62:1d:b4:a1:f8:29:1b:44:69:b9:
8f:2e:a0:f8:0d:55:79:6b:5a:93:fe:b7:eb:78:f9:
53:aa:2c:c8:66:c6:5d:78:71:f6:c0:43:93:37:1c:
0f:9f:3a:f4:b1:b5:78:ff:8b:b0:83:98:92:8a:a6:
e6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:57:0B:5A:2E:B1:A7:22:69:17:75:05:DC:AF:7E:66:F0:BC:3C:3A
X509v3 Authority Key Identifier:
keyid:83:03:59:95:DE:18:C9:D6:AD:4B:CB:B9:CD:95:A1:50:4D:9F:CA:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/gwNZld4YydatS8u5zZWhUE2fyh8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gwNZld4YydatS8u5zZWhUE2fyh8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/5ECDBA44DEEB11EF86169982762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:7240::/32
Signature Algorithm: sha256WithRSAEncryption
6e:b1:b1:79:fd:4c:5e:95:6d:2c:ed:db:63:cb:b5:a1:f0:21:
36:dd:f1:ee:cb:bc:c2:15:8d:d7:a1:0b:c6:33:b5:8d:bf:28:
c2:bb:90:e0:92:78:29:77:9c:bb:c2:c9:38:16:80:b7:df:c6:
dc:a7:2a:a9:36:44:ca:14:ce:b6:0c:61:2e:5c:fb:7e:41:68:
5a:56:a1:d5:bd:f3:61:fc:c1:8e:97:86:7f:7f:13:dc:e7:7d:
25:d0:f9:62:f8:96:24:08:25:bc:fe:69:ff:ff:10:0c:b9:d3:
ab:4f:56:e0:95:37:58:da:5e:6d:3a:44:41:99:81:ad:60:cc:
1b:e5:64:ba:1d:20:5e:cd:b8:79:54:a4:2a:ac:fc:a1:0b:3b:
c4:81:8a:39:e5:d3:0c:5d:83:b5:f8:11:2b:0e:c6:62:df:d9:
c4:a8:23:27:a3:87:01:cd:13:7c:fc:43:20:35:cd:32:d9:6f:
c6:6a:68:8f:88:a4:fa:40:70:26:25:55:58:13:64:7e:64:3a:
f6:94:e8:43:b0:bf:14:64:1e:5d:dd:f1:19:e7:32:8c:ba:4b:
41:85:4b:3b:6d:6a:84:0d:41:0f:fe:fc:c5:d2:ae:57:b2:00:
ec:8b:66:2b:70:3c:23:71:b9:22:68:d7:2a:86:04:7f:1d:cb:
77:49:7d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:00:07 2025 by rpki-client