Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/EFB2EA005B8611EEB1C27E154AD9E6FC.roa
File: EFB2EA005B8611EEB1C27E154AD9E6FC.roa (raw, json)
Hash identifier: ArKkYMPjrZ4ijgIQyF9Kcy4ua9ozHX8IBDIWFIk7DdU=
Subject key identifier: D0:26:57:E9:D6:69:29:A3:90:EA:91:22:09:24:E6:78:8F:0A:82:94
Certificate issuer: /CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B
Certificate serial: 4F
Authority key identifier: A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/EFB2EA005B8611EEB1C27E154AD9E6FC.roa
Signing time: Mon 25 Sep 2023 09:36:00 +0000
ROA not before: Mon 25 Sep 2023 09:35:57 +0000
ROA not after: Sat 31 Dec 2033 09:35:57 +0000
asID: 328962
IP address blocks: 2c0f:eb00:400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B
Validity
Not Before: Sep 25 09:35:57 2023 GMT
Not After : Dec 31 09:35:57 2033 GMT
Subject: CN=65115480-fffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:bf:05:0f:01:98:76:c5:ec:96:e0:b5:dd:
97:c1:52:5b:f5:00:a3:d5:86:55:45:a9:ab:73:2d:
3b:80:2c:b8:09:7f:e8:52:bd:5f:fe:a2:1f:1d:99:
c8:aa:f9:a9:3c:de:9d:6a:ed:a0:be:d2:a5:2e:10:
c5:26:9a:ff:8c:98:fd:63:1c:27:b6:ec:60:5e:1d:
5d:12:90:ca:7e:e9:75:d4:d5:89:7a:c3:6a:98:03:
09:46:06:99:72:1b:36:90:4f:c5:d7:e4:36:e5:5d:
c6:3c:42:8a:c0:6f:c1:dd:23:3f:6f:90:bc:d9:4c:
d7:23:0b:fc:2f:b4:2d:72:4f:78:96:5d:73:52:45:
85:76:fc:e6:5c:7a:8d:9f:9a:2a:02:06:42:b2:3b:
0c:7e:a0:ae:42:f0:b7:f7:9e:29:0e:ac:15:3f:ce:
09:36:6e:bd:1b:29:a7:61:58:b2:24:86:56:4c:a3:
9a:41:ef:5a:85:73:4e:b1:31:1e:42:be:25:5c:f5:
26:e3:70:ab:6b:32:72:ee:3b:f0:3f:d8:27:71:63:
0f:78:60:50:6c:c8:5f:b4:28:9d:d6:a1:91:8f:bc:
4d:63:2d:35:96:80:e8:57:14:0e:16:0a:c5:76:ad:
eb:14:f9:40:1f:22:5a:05:db:a1:5b:13:8a:28:e0:
a8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:26:57:E9:D6:69:29:A3:90:EA:91:22:09:24:E6:78:8F:0A:82:94
X509v3 Authority Key Identifier:
keyid:A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/EFB2EA005B8611EEB1C27E154AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:eb00:400::/40
Signature Algorithm: sha256WithRSAEncryption
20:a2:ec:19:ed:ab:71:76:28:07:c6:ed:25:3b:84:2c:f3:fa:
45:42:ee:49:d9:fb:0c:c8:14:2b:e4:a7:44:20:62:ad:d6:2c:
d6:9c:ed:b4:f1:4e:7d:e3:c3:5b:97:93:34:50:fc:97:fb:2a:
6e:f0:9b:ac:fc:2a:62:c3:b4:c9:46:b6:75:7d:53:3b:e6:06:
b6:2b:08:b5:7a:7f:52:20:ba:7c:8e:90:e6:e9:7f:5e:08:b9:
24:35:ff:c2:f6:06:1a:cf:cc:de:a4:12:8f:3c:25:5a:44:1f:
88:b3:fd:a0:25:45:ee:74:91:bf:44:8b:12:58:1c:64:2e:9b:
86:e6:96:ff:32:36:1b:a3:c9:8c:2a:b8:1c:4c:73:93:1d:5e:
8c:ef:2a:cd:d0:16:80:ec:19:df:ba:69:df:45:8b:6d:5f:e2:
d1:05:f6:1c:ef:32:5f:3c:84:5f:c7:a9:e7:9d:08:e7:ca:4e:
35:63:08:fe:2b:99:cd:3c:6b:c7:16:dd:ae:35:53:2f:8e:03:
94:a5:66:be:f8:a0:87:22:e5:af:59:a6:4f:f9:f8:67:f2:9a:
de:bd:10:67:1d:e6:a8:5f:24:95:77:8e:8f:3b:3c:ed:28:30:
42:63:59:79:33:32:7b:41:51:b8:36:d7:ff:80:32:4d:e3:af:
8f:5f:24:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:35:34 2024 by rpki-client on console-fra.rpki-client.org