Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/EB320A3E864511EF82F333B8762E951A.roa
File: EB320A3E864511EF82F333B8762E951A.roa (raw, json)
Hash identifier: AOcstZS+3TqPjLs5Onnwkaac6jTexzGQCvTnjKOL0G4=
Subject key identifier: 8C:27:12:E0:F8:C7:2D:9C:8B:6C:F6:EE:CD:3B:09:E4:9B:7F:3B:3C
Certificate issuer: /CN=F36B52A6AF/serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
Certificate serial: 07F9
Authority key identifier: 19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/EB320A3E864511EF82F333B8762E951A.roa
Signing time: Wed 09 Oct 2024 13:53:53 +0000
ROA not before: Wed 09 Oct 2024 13:53:48 +0000
ROA not after: Mon 30 Oct 2034 13:53:48 +0000
asID: 8346
IP address blocks: 2001:4278::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2041 (0x7f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B52A6AF/serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
Validity
Not Before: Oct 9 13:53:48 2024 GMT
Not After : Oct 30 13:53:48 2034 GMT
Subject: CN=67068af1-2fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8e:a7:55:04:a0:51:69:58:64:5e:2d:2e:97:
a4:fd:ca:cb:48:18:c1:13:13:c4:13:1b:c1:b1:ae:
dd:a1:3f:27:00:69:8d:67:25:8a:5e:e2:d7:6f:03:
2f:1d:bd:ed:a2:5f:99:c6:3c:e1:a9:68:e1:ef:a5:
94:30:90:eb:db:5c:4a:bc:75:46:4a:ef:19:db:2e:
53:bc:b2:88:9f:9d:58:7d:1d:21:b2:cf:c3:93:d9:
4a:cc:80:6f:a0:75:87:d6:b7:8b:92:82:2d:d1:b6:
27:15:99:88:89:b7:56:d2:a5:12:02:0d:41:a3:8e:
64:10:e7:e7:0c:6b:26:00:6b:75:43:de:ae:15:83:
e0:5c:2a:d1:5d:f9:77:4c:94:ee:d3:68:dc:d5:8f:
5d:7d:34:43:5e:9d:54:4b:f5:50:97:31:b5:ab:f6:
5a:5e:49:07:bb:f8:65:3a:33:42:d4:70:69:d0:96:
49:8e:ca:ec:ec:0e:2e:c8:c6:79:f4:d6:cd:b6:37:
a9:83:e4:b6:55:7b:9c:36:a7:74:19:a4:61:7b:6a:
e6:84:30:c5:2e:b9:b0:92:eb:75:1d:1d:9b:5b:22:
80:68:6f:4a:93:c4:f1:ff:77:70:de:8a:04:1c:7e:
b1:72:0c:db:2b:27:d4:ff:93:08:56:78:5f:cc:76:
e5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:27:12:E0:F8:C7:2D:9C:8B:6C:F6:EE:CD:3B:09:E4:9B:7F:3B:3C
X509v3 Authority Key Identifier:
keyid:19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/EB320A3E864511EF82F333B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:4278::/32
Signature Algorithm: sha256WithRSAEncryption
0c:0f:bb:d5:9c:18:f2:f5:63:55:1e:e7:5d:98:b3:c0:4a:d9:
cc:ac:d1:34:3b:8a:7e:fd:1d:86:0b:ec:d2:86:79:08:b2:d1:
a3:fd:61:56:3e:88:17:ac:ab:5a:65:8c:2d:b2:ba:35:17:a7:
d5:82:79:e7:a8:70:3e:61:a6:af:36:88:a8:07:f4:d7:36:fe:
0d:49:d7:43:ce:9e:36:0c:54:61:cc:d6:df:c6:20:f6:d9:2b:
b4:d1:65:63:bb:a1:2d:0d:6a:39:09:56:7f:ca:3f:52:c0:c8:
22:dd:f8:03:45:7b:2f:84:d2:53:a0:12:a6:0d:5c:6e:1f:07:
3e:b8:4c:81:84:ed:36:6f:3c:c9:b2:4a:c5:89:05:b3:9e:2c:
96:2d:0f:e1:07:cf:4c:77:85:14:2b:10:22:5d:24:ad:70:a1:
ff:28:ef:f6:b8:f9:35:8a:fb:b1:3f:7f:d2:ce:f0:d0:83:24:
41:25:69:bc:60:9d:26:da:62:85:01:78:63:9f:dc:67:3d:ec:
0c:6b:99:ad:cc:06:f2:c5:73:fd:4a:96:60:f7:b6:fd:cd:ef:
7a:ee:52:1c:e5:f5:a8:11:8d:b7:60:a5:2d:5e:8e:fe:54:c4:
db:24:01:c3:c2:60:79:59:49:6d:62:cc:53:74:6a:2a:4c:32:
a8:b1:81:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:14 2024 by rpki-client on console-fra.rpki-client.org