Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/CFCAFA5C8C6711EB8099F453F8AEA228.roa
File: CFCAFA5C8C6711EB8099F453F8AEA228.roa (raw, json)
Hash identifier: UQS1ddikqUvsFagfkywo/wzbi5HkqTE53903ZQ5pKaI=
Subject key identifier: 8C:DA:FB:9D:6A:95:A3:49:17:CE:8F:E8:DC:02:F5:19:07:F4:FE:F9
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 74
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/CFCAFA5C8C6711EB8099F453F8AEA228.roa
Signing time: Wed 24 Mar 2021 06:11:46 +0000
ROA not before: Wed 24 Mar 2021 06:11:40 +0000
ROA not after: Mon 24 Mar 2031 06:11:40 +0000
asID: 10474
IP address blocks: 2c0f:ff40::/26 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Mar 24 06:11:40 2021 GMT
Not After : Mar 24 06:11:40 2031 GMT
Subject: CN=605ad822-88ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:3b:bf:c1:8b:95:f2:a9:ea:53:50:91:06:
90:69:dd:97:30:f8:30:99:d1:9f:05:89:52:ce:7e:
3a:25:02:09:b1:f7:f6:d8:9e:b4:ef:b1:66:ae:8d:
e6:d4:b7:a5:22:1f:f0:7d:cd:2c:21:fb:ab:76:86:
70:12:f4:f5:3b:11:64:95:b5:f4:b9:e5:38:2c:b7:
50:78:89:b8:e4:62:97:0e:b2:ce:6c:68:9e:4b:54:
40:ca:a7:d6:b5:ad:b3:60:ca:c6:f0:09:5f:2b:4d:
7f:96:08:76:3f:7d:8c:5e:d2:8f:ef:cf:e0:8e:92:
d5:a5:7b:0e:ea:9f:c1:4b:1e:05:af:c7:80:36:5b:
ea:fe:a9:d0:41:5d:4a:5c:24:0c:27:a2:5f:0b:b8:
d7:84:ee:73:7a:6d:b2:02:cb:30:ff:ca:e7:c5:72:
21:f9:1d:b5:aa:28:2f:a2:a1:87:47:c0:f6:e7:23:
a1:c0:3f:c7:1d:8f:52:74:a9:00:f2:85:fc:10:bb:
52:c2:05:b4:29:d0:5c:33:25:2e:73:b6:b4:12:c9:
ef:15:e3:e6:33:21:d8:26:66:41:25:3c:d2:04:56:
1e:9e:07:f8:9a:c6:7e:d4:71:b2:ac:ba:42:c7:fb:
41:24:10:4b:2b:bf:51:ce:69:98:cf:92:d3:ee:73:
b1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DA:FB:9D:6A:95:A3:49:17:CE:8F:E8:DC:02:F5:19:07:F4:FE:F9
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/CFCAFA5C8C6711EB8099F453F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:ff40::/26
Signature Algorithm: sha256WithRSAEncryption
69:ef:98:16:43:bf:d1:d8:ce:a1:b4:91:53:96:18:70:11:3e:
f0:6f:61:b8:89:6b:ea:f7:90:69:21:03:aa:5c:62:eb:9a:83:
8a:c9:d4:1e:f5:de:ef:8e:f5:8a:89:80:86:45:8b:54:bb:6e:
9b:18:f9:74:21:6f:98:03:ef:ab:93:89:51:de:bb:ef:8c:16:
6c:e5:d3:5e:07:32:4c:57:0b:20:8d:7e:54:d6:b4:d8:be:ff:
30:0a:29:b7:9c:8b:39:52:56:24:ad:11:59:8f:58:fe:91:42:
3d:c7:a8:d4:49:09:5c:74:8a:ff:91:50:a6:97:71:43:19:6d:
1f:25:a7:d9:14:ec:37:18:03:14:19:39:ac:ef:e7:a8:f4:41:
80:21:5d:34:5e:a0:98:3d:0b:f3:37:b8:98:cb:b9:b0:ba:e1:
b8:7c:c4:2f:c0:d6:2b:62:53:41:d9:2f:a8:81:1d:ab:93:a1:
70:61:71:65:09:1c:87:c4:99:0b:00:14:9e:a3:08:19:b0:5b:
a9:c1:f2:94:98:3c:07:bc:60:1c:37:16:4c:e9:b7:d0:a7:73:
80:a9:9b:a2:51:e5:df:78:e5:69:f6:03:31:01:eb:ff:b2:d3:
a8:03:55:04:27:e7:8d:03:29:6b:d9:1a:0a:0e:57:0b:fd:30:
aa:5e:e0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:54 2024 by rpki-client on console-fra.rpki-client.org