Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/AEEE236EC67911EEAD12F8AE775412E6.roa
File: AEEE236EC67911EEAD12F8AE775412E6.roa (raw, json)
Hash identifier: T0oca2AEcgFcrK1PsYZJPTBdlzaX1LQylDi6J2hgcIM=
Subject key identifier: 40:5B:A2:E6:FA:32:25:9C:65:18:96:08:5B:1A:33:6F:E6:2B:4E:55
Certificate issuer: /CN=F3690793AF/serialNumber=5FE33172A6082C54ABC911F19F579D49FD809814
Certificate serial: 0426
Authority key identifier: 5F:E3:31:72:A6:08:2C:54:AB:C9:11:F1:9F:57:9D:49:FD:80:98:14
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/AEEE236EC67911EEAD12F8AE775412E6.roa
Signing time: Thu 08 Feb 2024 12:00:42 +0000
ROA not before: Thu 08 Feb 2024 12:00:39 +0000
ROA not after: Tue 31 Jan 2034 12:00:39 +0000
asID: 328839
IP address blocks: 2c0f:4600::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
rsync://rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1062 (0x426)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3690793AF/serialNumber=5FE33172A6082C54ABC911F19F579D49FD809814
Validity
Not Before: Feb 8 12:00:39 2024 GMT
Not After : Jan 31 12:00:39 2034 GMT
Subject: CN=65c4c26a-fa0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:49:59:80:a7:2c:77:ab:68:2f:2c:48:25:53:
f3:a0:2e:7c:ad:8a:15:3f:97:aa:42:fb:e7:be:e2:
f8:a3:50:5a:b7:01:78:25:aa:95:a4:8a:b5:6a:53:
a0:fc:a5:85:57:11:71:e4:51:a4:99:dd:a1:99:a7:
d1:7a:99:ab:7f:ab:34:fb:5f:fa:0d:a5:7a:cc:91:
51:f0:16:b9:40:53:32:9f:63:48:a9:43:ef:73:62:
72:9f:c2:14:7f:e2:44:34:9a:e8:5c:e2:7e:9c:12:
f1:18:76:cf:ad:ab:fd:51:2a:5a:7c:34:17:b4:07:
32:c1:8b:ee:d5:8e:c4:c4:b0:11:64:fb:20:19:73:
74:47:53:3f:aa:44:d9:ac:67:33:a0:a0:9c:6c:d0:
ba:7e:ef:79:81:3a:46:a9:f4:18:da:32:ee:0d:e8:
06:27:26:73:56:72:77:89:68:b1:23:0b:f6:64:96:
fb:3f:3c:ab:36:ee:62:8e:93:de:73:19:cd:fb:5f:
07:57:2b:21:33:22:51:79:2d:a9:5c:59:27:52:87:
b3:58:53:3f:a8:2f:b1:a6:3a:44:88:01:0d:e5:16:
02:29:9f:10:9a:af:4c:fb:1f:0e:65:28:4e:3b:10:
bb:61:af:c2:12:12:d5:3d:dd:c9:fe:f4:43:71:e3:
e8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5B:A2:E6:FA:32:25:9C:65:18:96:08:5B:1A:33:6F:E6:2B:4E:55
X509v3 Authority Key Identifier:
keyid:5F:E3:31:72:A6:08:2C:54:AB:C9:11:F1:9F:57:9D:49:FD:80:98:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/AEEE236EC67911EEAD12F8AE775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:4600::/32
Signature Algorithm: sha256WithRSAEncryption
4b:cc:6f:2f:51:91:92:9e:d9:1b:f6:d8:cc:1f:30:8e:1a:54:
35:f6:8c:cc:e9:b0:1b:00:06:b7:df:5b:ca:32:b6:f8:5f:e1:
df:69:0c:43:29:e2:7d:5d:3c:4f:73:ec:0a:b0:1b:a4:ff:5d:
34:ce:be:9b:32:b4:ef:03:63:2a:bc:28:2f:3a:6b:6a:38:d4:
a3:f0:37:4b:09:94:2d:f2:bc:cd:60:95:1f:68:2b:04:4d:ac:
6f:82:1a:13:c6:f9:e1:96:c1:61:38:f3:5f:48:ab:86:4f:82:
96:4f:05:de:13:c6:8e:06:bf:71:47:56:0f:b5:52:c1:0c:45:
73:48:d7:76:c6:e7:e9:ce:92:ed:e4:74:8f:67:d0:e2:d6:63:
f9:1b:62:5e:a7:ed:ea:a0:09:57:39:4b:92:4d:34:bc:81:5a:
a5:f4:a9:33:57:1e:da:7c:46:aa:d8:46:a5:44:f4:f9:f9:08:
67:28:3c:b8:f2:21:e7:d6:a5:c0:31:d9:3d:f7:cc:c1:ab:26:
59:09:1f:1b:bc:5c:34:70:b9:d0:d5:30:03:d2:56:c4:9a:e2:
11:72:e1:55:c1:11:74:d4:b9:e9:f0:bb:30:b1:f1:05:2b:8e:
8f:15:e7:d1:89:c6:3a:a1:87:bb:29:f4:8b:05:72:4e:0c:4c:
51:9f:45:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:04:22 2024 by rpki-client on console-fra.rpki-client.org