Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/C64BDF325B8611EE8F5917154AD9E6FC.roa
File: C64BDF325B8611EE8F5917154AD9E6FC.roa (raw, json)
Hash identifier: lOfMw6yYmupoBGzZG06JxE7nkGYN0SjR1YBL+6yU110=
Subject key identifier: 44:47:83:77:2B:4A:20:76:C7:01:23:50:37:9B:C9:DA:2B:48:B2:EB
Certificate issuer: /CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B
Certificate serial: 4D
Authority key identifier: A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/C64BDF325B8611EE8F5917154AD9E6FC.roa
Signing time: Mon 25 Sep 2023 09:34:51 +0000
ROA not before: Mon 25 Sep 2023 09:34:47 +0000
ROA not after: Sat 31 Dec 2033 09:34:47 +0000
asID: 328962
IP address blocks: 2c0f:eb00:a00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B
Validity
Not Before: Sep 25 09:34:47 2023 GMT
Not After : Dec 31 09:34:47 2033 GMT
Subject: CN=6511543a-dbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:f9:67:1a:22:7c:9f:81:97:ca:85:00:d8:
cd:3f:08:d5:e5:ef:ac:bb:b6:13:94:5b:a2:07:d9:
11:50:b3:58:c3:10:28:7d:eb:d2:7d:3c:f0:6f:01:
28:15:bb:36:47:82:99:6a:04:d1:67:27:90:10:53:
d1:70:f8:0a:4e:01:e0:02:67:2a:aa:e3:42:73:82:
c9:7c:fe:05:1a:66:fa:02:59:cb:3e:41:07:e7:03:
98:27:8b:98:20:48:ef:54:61:71:81:fe:f9:8a:d4:
c7:d7:bd:a5:ca:41:ba:eb:20:c1:49:66:f4:77:19:
ac:64:ea:93:d4:f9:c0:c6:46:76:ab:3e:64:a0:e6:
73:3e:b9:80:aa:92:38:2b:f1:44:5a:63:56:84:58:
f8:ec:2a:46:38:58:5d:49:21:75:cd:2d:11:66:49:
33:7d:1d:13:2d:7c:85:66:d1:64:29:ba:61:77:7b:
b0:5a:32:68:d1:37:7b:7a:ee:b4:71:e0:39:30:b2:
93:89:19:c5:d3:02:03:61:b3:57:ea:bf:d9:ee:c6:
6b:31:54:3c:31:0b:77:36:c2:31:47:24:30:63:e3:
21:eb:45:fa:39:73:e7:43:48:e2:4b:59:64:94:05:
b3:a3:d9:c3:75:89:c5:f6:33:a9:bf:f0:20:6e:f2:
4d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:47:83:77:2B:4A:20:76:C7:01:23:50:37:9B:C9:DA:2B:48:B2:EB
X509v3 Authority Key Identifier:
keyid:A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/C64BDF325B8611EE8F5917154AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:eb00:a00::/40
Signature Algorithm: sha256WithRSAEncryption
4e:6e:72:74:6d:6a:27:c2:17:4c:b8:de:9e:08:9b:e6:6c:45:
99:78:12:ba:b8:ba:52:f2:2a:75:cb:e6:89:b2:cb:12:65:85:
bf:09:fc:f8:b1:f2:8f:67:09:f4:a3:05:ce:ca:10:f0:7a:fe:
01:10:34:4b:d2:97:b7:63:a6:24:37:b4:93:14:57:7f:cb:aa:
6e:61:c8:0b:52:e6:a0:91:d0:08:4d:6a:f7:06:e4:1b:19:68:
92:70:50:69:83:7d:6c:f4:b5:cf:9f:5d:d4:90:b5:6e:3f:c9:
94:dd:fb:52:ff:ae:a2:13:48:45:ca:ea:5f:79:31:2d:c2:5e:
86:23:d2:cb:22:fb:ec:21:a6:e8:6a:40:fd:3a:d4:88:89:3d:
38:cc:c6:61:ca:e7:60:80:66:e5:1e:bf:27:70:bc:85:05:00:
21:9a:0a:01:46:7d:33:aa:e5:87:aa:05:b8:6a:c0:54:a0:aa:
58:59:b7:26:8a:d2:f8:b3:c8:98:2c:97:06:cf:99:ef:fb:b0:
b6:0e:7d:11:1e:d6:dd:af:d8:12:cb:73:ad:25:9e:0f:5c:9b:
10:65:c5:77:df:a5:5b:af:21:f5:cb:13:c8:80:3a:b7:6c:3b:
ff:53:b4:70:01:14:94:5f:3b:a8:c3:6c:c1:d4:3a:ba:bd:1e:
3b:bd:9b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:55 2024 by rpki-client on console-fra.rpki-client.org