Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/840BAFE4D5CE11EF9F26DD77762E951A.roa
File: 840BAFE4D5CE11EF9F26DD77762E951A.roa (raw, json)
Hash identifier: sKdcVkYo4xUul2xhcopwWLTEZ0Coub2IAaU4zBm9Qoc=
Subject key identifier: 6C:26:92:13:B9:69:9E:28:82:15:04:7D:78:83:75:C2:75:B2:97:26
Certificate issuer: /CN=F36877BBAF/serialNumber=0DC6A4C82109FF2CB39C1D1A58C38E3033C5A0FE
Certificate serial: 0137
Authority key identifier: 0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/840BAFE4D5CE11EF9F26DD77762E951A.roa
Signing time: Sat 18 Jan 2025 19:00:43 +0000
ROA not before: Sat 18 Jan 2025 19:00:39 +0000
ROA not after: Tue 18 Jan 2028 19:00:39 +0000
asID: 328721
IP address blocks: 2c0f:7840::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft
rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311 (0x137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36877BBAF
Validity
Not Before: Jan 18 19:00:39 2025 GMT
Not After : Jan 18 19:00:39 2028 GMT
Subject: CN=678bfa5b-ac17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:a8:b2:e1:dd:94:a2:62:b2:55:8c:43:2f:
8e:2a:64:90:66:0c:35:ad:9e:8a:9e:90:5a:bb:0c:
97:db:31:6f:10:38:f2:3a:d4:f2:da:a5:79:ca:a5:
72:30:0b:43:03:ed:83:87:88:f3:57:93:ee:83:33:
cc:ec:ff:1d:a1:26:e7:42:68:1d:bd:59:f0:10:95:
cb:24:d7:6b:5d:1e:1a:a9:a7:c8:1c:b3:19:c7:b6:
56:f1:8e:9b:2e:7e:a9:cf:5a:6c:ac:dc:65:dc:1e:
80:b9:44:5c:23:78:81:4b:bc:c9:b3:3a:89:6e:f2:
5f:e6:41:94:73:7d:52:20:a4:5d:dd:a8:c8:f8:56:
d1:93:3d:a6:fa:0f:17:2b:56:0f:8b:b6:4f:7f:22:
90:39:cc:b9:bc:a2:f8:7a:dd:43:61:a5:77:d9:a3:
3d:bb:40:82:cf:7f:e2:68:5b:5a:7d:c5:0b:89:1b:
e2:e4:98:06:ac:91:29:15:1e:1e:21:ae:c2:85:0f:
4c:19:1a:0a:ec:67:8a:7d:d4:7e:cf:a1:8b:76:e6:
fc:eb:8c:95:77:85:76:83:fe:ce:ae:93:bf:03:64:
60:9c:1f:b8:15:5f:5d:e0:d6:72:f8:b2:92:c9:be:
90:6b:0d:58:ae:1f:dc:b5:90:f4:ef:ef:73:ef:bd:
a7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:26:92:13:B9:69:9E:28:82:15:04:7D:78:83:75:C2:75:B2:97:26
X509v3 Authority Key Identifier:
keyid:0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/840BAFE4D5CE11EF9F26DD77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:7840::/32
Signature Algorithm: sha256WithRSAEncryption
46:cc:41:d3:e5:97:c6:81:23:7e:55:87:ba:18:af:1d:e6:e7:
e2:dd:6e:b5:76:97:91:d0:ec:12:3e:c6:a1:3e:fd:ec:7c:58:
d2:d6:18:8f:53:bb:15:a5:30:be:af:7c:28:14:7c:72:01:b5:
38:85:33:e7:7b:aa:30:a5:33:42:77:bf:da:59:56:87:f3:d0:
fa:14:f6:45:6e:6b:1e:59:13:4b:99:08:06:56:93:1c:d0:28:
d8:c1:7d:78:c0:ce:ef:bc:1b:7c:80:4c:06:ca:4d:f2:e8:60:
48:1e:5f:32:5d:ae:94:e2:7a:f0:c2:68:ea:c5:c9:bb:f9:d5:
51:d8:d7:6a:7b:38:bb:8e:da:6f:88:ab:4a:6e:9a:f3:60:42:
67:5b:a1:b9:ad:88:36:49:52:5e:fd:2d:f8:6c:27:f1:de:b3:
67:a6:04:c5:10:02:38:54:ed:bd:08:f1:31:b7:e5:88:e6:45:
eb:5b:ae:bc:60:7f:9c:df:a7:fc:ea:46:22:d8:81:04:b2:aa:
59:59:d2:55:79:5e:1b:0b:b6:80:65:0d:b4:1d:b7:33:87:62:
12:e0:6d:36:74:ae:b3:b6:a4:06:95:95:ea:60:e9:d7:fa:c4:
0a:7d:f8:31:04:28:91:c8:45:41:c3:4a:5a:f2:a4:32:c1:77:
ce:c7:00:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:33:21 2025 by rpki-client