Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/10DC6B4205E811EEB477CD0D4AD9E6FC.roa
File: 10DC6B4205E811EEB477CD0D4AD9E6FC.roa (raw, json)
Hash identifier: qeI2DWMOrziaf4E0nX4xDaGYHTDLg+ep+RQxXYJyo/8=
Subject key identifier: 84:7C:25:94:4A:E2:48:1C:E5:55:8D:B0:C3:E0:FB:7A:3A:5E:D3:7E
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0702
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/10DC6B4205E811EEB477CD0D4AD9E6FC.roa
Signing time: Thu 08 Jun 2023 10:34:37 +0000
ROA not before: Thu 08 Jun 2023 10:34:33 +0000
ROA not after: Wed 08 Jun 2033 10:34:33 +0000
asID: 36916
IP address blocks: 2c0f:fcb0:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1794 (0x702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jun 8 10:34:33 2023 GMT
Not After : Jun 8 10:34:33 2033 GMT
Subject: CN=6481aebd-4c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:eb:c5:fd:40:75:d1:20:d9:d2:04:5d:51:92:
bb:92:20:25:d6:09:2e:e1:1a:5a:f9:d7:75:05:c0:
94:5e:ce:88:e9:51:46:4a:c4:45:c8:8e:54:ae:77:
5c:b9:43:d6:e0:83:e0:c0:6c:63:43:ab:cc:56:4c:
ef:35:4e:1c:e2:f9:58:cd:4d:16:15:fc:13:09:13:
57:a8:74:7c:d6:0d:3f:3f:ff:b2:45:80:79:76:ab:
9e:94:3e:2d:c7:1a:9a:df:2b:49:f5:1f:59:a4:e1:
44:41:64:7b:b9:01:21:e7:70:bf:c5:bc:d7:60:44:
38:45:b3:ce:00:ab:f8:3b:d9:d8:25:85:16:ba:ba:
02:ff:05:db:c5:49:ca:5d:3a:28:4c:b8:99:60:02:
85:ba:3e:83:90:a2:fe:3e:2a:c1:42:89:f6:5b:71:
c8:22:9b:ce:18:0e:71:05:1d:55:a7:82:73:a9:32:
36:d2:76:3f:fd:e3:dc:5a:fa:d0:34:ad:87:28:cb:
f7:01:27:aa:58:eb:04:f8:42:36:a2:b7:39:c8:cf:
e9:a7:14:e1:38:8d:07:bc:1b:f9:f1:97:1d:c9:5f:
fd:a9:6e:78:9f:c3:28:dc:d4:5e:54:1d:8c:ce:5e:
54:46:fc:3f:55:6c:97:f1:cf:26:a0:4f:d2:f3:fe:
55:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7C:25:94:4A:E2:48:1C:E5:55:8D:B0:C3:E0:FB:7A:3A:5E:D3:7E
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/10DC6B4205E811EEB477CD0D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fcb0:6000::/36
Signature Algorithm: sha256WithRSAEncryption
94:94:ae:ff:63:20:3d:e0:45:29:c3:27:fa:0d:6c:36:1a:b1:
4f:72:b2:07:d7:d3:91:15:88:bd:38:37:32:ea:a5:f2:33:6c:
58:61:45:c3:bd:24:3c:10:6c:66:f4:88:d7:c9:25:b1:44:bd:
cb:8c:97:40:28:e5:bb:8a:f9:e8:00:aa:d3:8f:94:4e:0b:58:
99:83:aa:8d:0d:38:3c:34:82:d9:ca:75:fa:31:5a:f7:b9:7c:
d8:23:49:f5:a5:a8:be:a4:23:e2:16:3f:6d:ec:08:3f:33:f6:
79:13:4a:1d:1c:5a:92:8d:76:4e:ec:ba:d6:1a:33:a1:4f:25:
c3:c4:dc:c9:57:16:77:a1:67:cc:c6:ae:e4:97:0a:57:7d:95:
ed:e1:76:fb:01:29:bb:a1:79:59:15:ec:72:0a:4b:33:1f:7b:
52:c3:06:51:fe:1f:da:7a:22:c3:e8:00:80:a3:55:1d:a9:d6:
7e:3b:f7:22:25:3c:c8:b6:3e:e5:ae:71:a3:89:e0:35:e0:67:
57:42:8c:7c:c3:1c:fa:96:1e:ba:79:36:a5:41:b3:b8:c4:38:
ca:c1:56:19:85:3f:b4:06:6d:eb:b9:97:82:fe:24:c0:42:16:
38:7e:f0:53:da:0c:8c:3f:b7:82:cc:ad:54:c5:bd:d6:3b:59:
ea:7b:8a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:16 2024 by rpki-client on console-fra.rpki-client.org