Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/0DB547A45B7E11EE95F5E0774AD9E6FC.roa
File: 0DB547A45B7E11EE95F5E0774AD9E6FC.roa (raw, json)
Hash identifier: sgLUjm9KT8NBSGsfPuF7zb59LXdnTNhjWZlBuJluY4o=
Subject key identifier: 88:40:E3:8B:62:A8:3C:77:AC:23:0E:67:14:35:F1:81:A4:D1:9E:AD
Certificate issuer: /CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B
Certificate serial: 34
Authority key identifier: A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/0DB547A45B7E11EE95F5E0774AD9E6FC.roa
Signing time: Mon 25 Sep 2023 08:32:25 +0000
ROA not before: Mon 25 Sep 2023 08:32:22 +0000
ROA not after: Sat 31 Dec 2033 08:32:22 +0000
asID: 61266
IP address blocks: 2c0f:eb00:1400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B
Validity
Not Before: Sep 25 08:32:22 2023 GMT
Not After : Dec 31 08:32:22 2033 GMT
Subject: CN=65114599-2590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:38:ab:06:1a:ab:cd:29:d8:01:df:a9:1b:
3a:e7:06:0d:6c:65:bb:d2:98:76:9f:7c:28:71:0c:
ed:ba:4b:44:6f:d2:4e:b5:d6:68:15:be:05:89:c4:
df:64:fd:56:de:83:b9:dc:bc:a3:eb:1e:40:18:16:
b6:ff:8e:5d:19:5c:1d:19:0c:bc:a4:9e:f2:af:97:
4d:49:6f:4f:82:5e:2a:74:fa:3b:9d:ea:13:f2:16:
31:48:77:9a:c4:83:3d:e7:59:3a:b2:1f:b5:02:2e:
85:da:25:dc:a8:3a:25:30:64:c5:30:95:61:12:cd:
d0:01:f4:ba:df:45:72:ba:24:88:aa:40:a3:a2:5d:
18:06:dd:23:7e:ff:1b:09:f7:79:d1:36:d6:56:dc:
6c:22:4a:95:cf:74:a6:84:e7:0c:c2:1f:9d:bd:47:
56:44:b2:ac:b8:36:af:cb:90:57:b6:0e:1c:7f:15:
6b:07:0f:21:b1:ce:a0:b8:62:79:e7:8f:a1:5b:9d:
2e:5e:46:fd:16:66:a7:ba:f3:5d:fe:9c:0b:a0:db:
b7:c5:30:70:f3:40:a4:fd:d0:f4:10:39:fe:ec:d3:
ba:46:b2:7d:fe:2a:31:48:09:72:dd:00:73:f5:90:
e3:e8:dc:f3:db:28:d4:10:69:1f:db:72:29:4a:10:
b9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:40:E3:8B:62:A8:3C:77:AC:23:0E:67:14:35:F1:81:A4:D1:9E:AD
X509v3 Authority Key Identifier:
keyid:A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/0DB547A45B7E11EE95F5E0774AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:eb00:1400::/40
Signature Algorithm: sha256WithRSAEncryption
5a:45:99:2b:f1:bd:2d:ca:f0:9a:a8:96:c0:07:0a:a8:5e:75:
b6:b0:67:d5:fe:a2:0b:cc:80:86:d3:9d:16:49:c1:e1:d6:49:
74:e6:c4:29:67:35:80:de:3b:1f:e6:f5:08:4a:3c:d2:97:07:
09:ec:e2:6b:91:37:ef:1a:2b:05:67:70:59:7f:6d:92:d9:42:
e5:1f:56:b4:09:98:06:65:7a:31:69:5c:b4:de:0d:7d:7c:d9:
5d:d5:c7:5e:66:10:c6:41:8a:df:54:1b:4b:82:be:c4:d7:70:
be:e6:45:12:d9:82:bf:dd:a1:18:16:01:bc:ed:12:85:5e:9b:
95:05:f3:a5:3b:2a:d8:80:4b:f4:4e:42:1f:14:66:d1:3e:27:
70:eb:be:64:40:8f:d4:b0:78:21:50:86:04:99:7b:a1:bd:3b:
0c:e2:e3:8d:94:d6:e1:65:9e:20:4c:b8:0a:5b:63:0a:26:7f:
61:48:58:cb:87:c3:4c:ad:82:c2:b9:3f:cb:2e:6a:39:ec:60:
03:eb:91:74:d3:79:4c:a0:86:30:40:73:15:33:0e:75:65:32:
ef:c3:b2:a7:db:e4:32:c4:6d:21:2c:45:87:69:bc:a8:82:1a:
40:2e:70:38:88:46:0f:98:7e:ed:7f:fa:79:33:e8:62:7d:ea:
c6:94:7b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:35:34 2024 by rpki-client on console-fra.rpki-client.org