Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/0DDE14645B8711EEBE2DF3154AD9E6FC.roa
File: 0DDE14645B8711EEBE2DF3154AD9E6FC.roa (raw, json)
Hash identifier: OVYm5oOpe8XlJOHUYg0R0oIytfPmlhVRgGeohPVoeGg=
Subject key identifier: 60:48:F1:A8:84:6C:AB:36:CC:70:02:85:3A:96:61:A5:86:EE:B1:57
Certificate issuer: /CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B
Certificate serial: 51
Authority key identifier: A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/0DDE14645B8711EEBE2DF3154AD9E6FC.roa
Signing time: Mon 25 Sep 2023 09:36:51 +0000
ROA not before: Mon 25 Sep 2023 09:36:47 +0000
ROA not after: Sat 31 Dec 2033 09:36:47 +0000
asID: 328962
IP address blocks: 2c0f:eb00:f00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B
Validity
Not Before: Sep 25 09:36:47 2023 GMT
Not After : Dec 31 09:36:47 2033 GMT
Subject: CN=651154b3-c9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ad:1f:91:1e:76:f6:0b:6c:f1:ea:32:f0:50:
db:ba:dc:e9:74:f7:e2:a5:16:11:bf:6f:3a:44:42:
74:46:07:5c:ca:67:ea:f7:4d:5c:db:be:f4:aa:11:
97:5b:1c:c0:64:f6:99:75:43:c0:ea:30:d8:f8:7b:
db:80:11:74:0d:a3:f6:13:0f:f1:c4:d5:5d:3b:e0:
14:69:47:50:ba:9d:fe:6d:cf:d9:91:b7:7a:2a:1a:
1d:61:36:c8:83:1a:17:61:bb:78:b9:e4:73:22:b4:
6b:36:0b:e7:7e:70:59:49:d7:47:34:db:80:55:bd:
59:c7:2c:d2:d5:f7:f6:03:a7:0d:ff:2c:d9:60:4b:
73:a2:57:87:03:e1:c9:5c:08:e6:70:be:d8:6e:95:
3b:b5:cf:85:dc:0f:b8:ac:76:6a:43:bf:99:f6:3e:
19:c4:21:77:9f:b3:ba:7e:c2:db:4b:fe:2f:9b:2b:
86:95:f7:30:b6:ee:47:15:09:c0:cf:d3:4e:c1:ee:
76:4f:23:a4:aa:5d:4d:84:55:57:b6:d1:5c:a7:ae:
7c:58:b2:86:a8:f1:8e:6d:60:c9:6f:36:81:69:39:
30:65:6c:94:80:ed:ad:2f:b1:52:fd:8e:9b:18:a6:
05:62:41:b8:b3:ca:de:3f:78:6c:48:e8:09:c1:5b:
80:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:48:F1:A8:84:6C:AB:36:CC:70:02:85:3A:96:61:A5:86:EE:B1:57
X509v3 Authority Key Identifier:
keyid:A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/0DDE14645B8711EEBE2DF3154AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:eb00:f00::/40
Signature Algorithm: sha256WithRSAEncryption
63:19:c6:63:ed:3a:a4:08:09:03:9d:45:b1:39:16:67:9b:ec:
f2:e2:8b:a9:14:07:74:c3:b7:d6:0b:68:2f:89:cf:81:db:5f:
b7:4c:6b:4d:d0:03:23:6f:6d:0f:34:dc:d1:2b:84:9d:f3:f5:
b7:d3:12:db:92:e7:84:e1:85:82:68:85:6b:a8:da:05:64:94:
c0:42:1c:bc:29:72:4e:c0:b1:b9:f3:ec:24:2b:bb:66:a8:ab:
df:11:b1:4a:97:54:c2:fb:d7:46:5f:95:08:9a:9f:e2:c6:1d:
56:15:c8:d9:db:2e:26:61:8e:6b:36:72:67:ab:47:d3:66:8e:
c3:3f:69:d4:22:fc:3a:98:5e:23:3b:6f:22:32:19:bc:eb:1c:
42:f7:bd:70:63:0e:e1:15:e9:a1:03:83:00:54:d0:75:27:b9:
20:f8:e8:3a:48:43:31:14:fb:e7:76:c4:c3:29:53:4e:81:93:
b0:22:b8:61:06:55:95:cb:6c:65:ab:1f:b0:bb:9b:c5:19:45:
f3:b4:30:59:ba:a6:8f:0d:7f:29:32:2f:01:f5:7b:af:7f:2c:
9b:e9:ac:3b:02:41:71:84:4d:da:f2:86:29:ff:30:6f:af:67:
a0:09:28:89:79:36:7e:69:5c:6b:0b:c8:29:77:e6:a2:a6:81:
e7:12:b1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:41 2024 by rpki-client on console-ams.rpki-client.org