Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/704C2370BC4511EDB7E861E9F1222468.roa
File: 704C2370BC4511EDB7E861E9F1222468.roa (raw, json)
Hash identifier: 5oik6i7qBKPI5gBnQynfn6/DvFaSBnilZkpA0ff0rHA=
Subject key identifier: FD:CB:CB:21:4F:87:02:30:63:88:DD:12:A9:9D:D0:8C:1A:4B:90:2B
Certificate issuer: /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial: 0A
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/704C2370BC4511EDB7E861E9F1222468.roa
Signing time: Mon 06 Mar 2023 17:36:34 +0000
ROA not before: Mon 06 Mar 2023 17:36:31 +0000
ROA not after: Thu 31 Mar 2033 17:36:31 +0000
asID: 37182
IP address blocks: 2c0f:f2e8::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 14 May 2024 00:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Validity
Not Before: Mar 6 17:36:31 2023 GMT
Not After : Mar 31 17:36:31 2033 GMT
Subject: CN=640624a2-defb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1b:7b:c5:77:b7:ff:b2:b0:ef:19:c4:af:58:
89:ae:32:de:d0:1e:cf:ee:4c:ba:a7:26:99:05:59:
7a:d3:75:1e:ac:2e:dc:64:68:b2:a6:7f:b5:8d:82:
a5:62:9b:d0:0c:16:68:6e:31:0a:3c:11:35:32:dc:
63:29:ec:a2:39:fb:68:63:eb:6a:94:e6:15:fb:66:
14:65:27:1f:70:e1:fa:a1:d6:f5:dc:b7:71:16:c5:
7c:80:a5:30:96:27:f6:38:fb:38:53:33:88:a3:6e:
b0:37:67:c6:a7:a9:05:95:f4:e7:4f:fe:8e:ed:3f:
87:29:fb:3b:d5:d5:8c:83:56:ba:2d:e6:04:99:e2:
e3:b7:a7:d8:e4:91:ff:72:73:7f:3a:1f:48:50:46:
e6:53:a3:7a:65:a1:ff:33:98:94:38:ed:e7:82:38:
7e:71:9a:90:b7:2c:c0:1f:d8:20:5e:b9:0b:69:27:
ac:bb:2e:71:a9:bb:3c:9c:d6:7d:34:1f:2f:b0:8e:
dc:49:3a:1e:35:20:94:0c:d9:53:ad:11:37:00:78:
9a:b6:0a:b5:ea:85:49:cc:16:5d:17:d0:ab:c9:43:
53:6b:a0:31:12:47:93:27:3a:9e:87:27:17:9e:c8:
a8:4a:de:d5:d5:ad:09:00:77:48:90:5d:c6:19:d0:
96:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CB:CB:21:4F:87:02:30:63:88:DD:12:A9:9D:D0:8C:1A:4B:90:2B
X509v3 Authority Key Identifier:
keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/704C2370BC4511EDB7E861E9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f2e8::/32
Signature Algorithm: sha256WithRSAEncryption
b1:ed:df:a7:42:c6:79:8c:f7:b4:23:82:f5:ca:a2:ee:ef:d0:
fc:a3:18:26:ee:44:ff:df:91:91:dc:6b:99:6c:84:f5:d4:5e:
88:5b:79:d2:29:7b:56:a6:b6:68:74:91:af:46:74:82:a8:4c:
e9:15:8d:7f:0e:be:d3:1f:5c:1f:90:07:12:e5:2e:e5:b7:61:
40:1b:7e:b0:78:33:30:fe:32:07:a5:2b:06:62:77:0a:89:9f:
6f:df:22:cd:d9:a9:0a:b8:8f:2c:5c:f4:c7:e7:ac:46:96:e1:
c5:4e:b4:55:d6:0c:4b:db:8c:7e:1f:bc:79:f4:28:cc:d3:9d:
3e:67:c2:07:94:54:3d:9f:49:c2:e9:1b:91:3a:d1:1c:47:a0:
03:41:a2:b5:46:02:3b:5d:ad:fa:64:57:14:92:93:01:a4:7b:
3e:2e:d5:5c:5a:62:26:ec:34:79:a2:bd:e9:a5:1c:32:75:4a:
ff:03:53:0e:a3:d2:82:87:23:5c:bc:72:93:93:d0:f4:af:e6:
bb:3b:58:6a:52:cf:0d:37:1c:92:da:49:4d:38:67:6f:47:f6:
c9:9d:0e:9e:b6:a4:04:ed:2e:91:44:5e:ea:9b:25:d6:89:63:
1f:d2:11:5c:92:5b:3e:3c:c3:95:37:2b:15:29:a8:22:86:41:
21:fd:75:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 03:29:11 2024 by rpki-client on console-ams.rpki-client.org