Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/A72DD2F805E711EE9A55F68A4AD9E6FC.roa
File: A72DD2F805E711EE9A55F68A4AD9E6FC.roa (raw, json)
Hash identifier: 3S55jUBxIqCq2eKEwbNV29GF6yb3kqkE/tKyOMEky0Q=
Subject key identifier: 6B:29:0E:A8:56:19:10:5C:61:8C:D3:68:C3:B6:7E:A7:25:EC:FF:A6
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 06FC
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/A72DD2F805E711EE9A55F68A4AD9E6FC.roa
Signing time: Thu 08 Jun 2023 10:31:40 +0000
ROA not before: Thu 08 Jun 2023 10:31:36 +0000
ROA not after: Wed 08 Jun 2033 10:31:36 +0000
asID: 36916
IP address blocks: 2c0f:fcb0:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1788 (0x6fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jun 8 10:31:36 2023 GMT
Not After : Jun 8 10:31:36 2033 GMT
Subject: CN=6481ae0b-b168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:29:47:24:0b:26:e3:fa:e3:d7:8d:bd:4c:78:
20:f5:ee:24:c5:5a:34:b3:be:2b:0c:d7:56:d7:6f:
e6:ef:90:53:bb:ce:40:59:25:93:0a:bf:a6:21:92:
53:cc:41:be:b4:39:d5:08:73:ef:37:30:d3:9f:af:
04:13:2a:ca:7b:32:e9:5d:38:2e:e4:80:ef:74:b8:
2f:2d:3c:bd:a1:7b:e7:73:9c:52:27:45:2d:8c:30:
a6:4f:f4:0c:18:7d:67:dd:e0:07:ef:28:88:5c:bc:
15:02:6e:03:fe:34:6c:3b:28:9d:57:45:7f:e5:2a:
98:50:09:94:a5:7a:3c:d0:d0:d9:6f:0d:c5:ae:47:
ca:f8:8d:4b:a7:4c:4f:f9:6a:b5:2a:e6:49:20:31:
94:77:28:ea:cf:27:96:7d:0f:35:db:74:bb:93:f9:
8a:7e:93:1b:55:2d:b6:92:a7:6b:27:df:b7:6a:61:
a0:ab:93:02:1a:2e:5d:bf:1a:ee:f1:98:8c:3a:76:
b3:d6:4d:ea:3f:11:9d:ba:03:04:bb:26:56:41:f6:
ab:b4:2a:b4:8d:df:4c:2d:4f:4e:ac:e5:76:3d:da:
b5:47:43:8e:4c:80:c5:21:f5:91:e5:1f:f8:73:78:
33:15:7f:61:c9:e7:e1:56:03:10:16:07:5b:28:13:
61:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:29:0E:A8:56:19:10:5C:61:8C:D3:68:C3:B6:7E:A7:25:EC:FF:A6
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/A72DD2F805E711EE9A55F68A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fcb0:2000::/36
Signature Algorithm: sha256WithRSAEncryption
85:0a:8c:de:c6:80:70:17:1a:87:3b:19:5a:09:2c:10:59:44:
4d:2b:e6:36:a1:b8:e2:87:5c:02:51:16:17:81:aa:f3:54:04:
b7:09:06:fc:98:f5:90:b8:61:8c:80:4b:74:37:93:5d:a5:9a:
33:bc:9a:72:ee:0d:8b:ce:0f:59:83:1b:3f:f7:c1:bf:c1:b8:
9d:10:48:51:63:4c:f4:ec:e8:42:5f:59:e8:94:28:48:90:09:
43:8f:ce:0b:49:c8:c3:02:18:db:4f:92:45:9b:0f:a4:db:b4:
37:8a:cf:fc:9b:c1:7f:36:80:d7:23:cc:4e:1a:6d:fb:14:5f:
65:25:31:9d:a1:05:c6:52:93:78:6b:58:a1:ea:07:2b:b5:94:
42:2b:18:2b:35:e2:2c:ff:c3:e1:6e:07:df:ca:af:a4:e8:64:
ae:3c:8a:52:2d:5b:83:c0:77:1c:ac:8b:b5:da:a1:ee:77:f3:
1b:b8:29:cf:1a:ab:f7:81:73:ec:ea:23:5d:0a:29:61:7d:71:
dd:34:b1:c6:dc:e8:4c:e1:a9:11:57:bb:57:86:02:0e:9e:61:
f1:b5:53:97:e3:84:d1:9b:50:d1:eb:a2:cd:1e:56:7b:2c:1d:
b0:90:e8:82:fc:df:f7:2b:02:99:ad:a2:64:54:73:a5:4c:c5:
85:36:9c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:21 2024 by rpki-client on console-ams.rpki-client.org