Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/9EECB24E1C2611EEA7AD515D4AD9E6FC.roa
File: 9EECB24E1C2611EEA7AD515D4AD9E6FC.roa (raw, json)
Hash identifier: 9W8fC1Pv3M9CQpx7wz4y4cmIGIFTbWUALksyFRhYDgE=
Subject key identifier: 97:CB:BD:2B:55:34:5E:24:5F:E5:C2:96:DE:63:8C:7F:D3:12:00:4E
Certificate issuer: /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial: 41
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/9EECB24E1C2611EEA7AD515D4AD9E6FC.roa
Signing time: Thu 06 Jul 2023 17:57:50 +0000
ROA not before: Thu 06 Jul 2023 17:57:46 +0000
ROA not after: Wed 06 Jul 2033 17:57:46 +0000
asID: 37105
IP address blocks: 2001:43e8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Validity
Not Before: Jul 6 17:57:46 2023 GMT
Not After : Jul 6 17:57:46 2033 GMT
Subject: CN=64a7009d-9ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:8d:17:9c:3f:3a:a2:0d:67:49:11:f9:65:
35:80:79:a9:be:ac:03:fa:11:76:d4:11:d3:41:3a:
c5:19:25:ac:1a:a7:c4:2f:68:ff:d7:c4:bf:bb:b2:
22:cf:3b:82:ea:d9:47:ae:60:af:ce:6c:7c:63:87:
f3:ae:4a:64:a3:3e:51:20:27:7d:c0:a7:d2:f4:ac:
f3:d2:af:25:20:37:aa:bd:0b:15:02:ac:bc:0d:42:
fd:7e:f4:b8:5f:3b:fa:1d:46:2b:a0:2f:3c:1e:05:
c7:d3:57:44:ae:15:f6:9e:ba:23:cd:3a:19:1d:64:
b5:29:e2:9a:57:2e:7e:fc:a7:2c:d9:9b:7c:3b:ba:
48:e9:02:48:c5:a6:c2:9a:0a:05:1d:e3:d9:6f:95:
df:e8:cd:bf:dc:4e:a6:c1:c9:0e:34:40:1e:ba:62:
c0:2a:f0:34:3a:0d:b3:c6:67:9f:e7:36:12:75:73:
ef:13:a4:b6:4a:7e:8c:1f:18:4d:1a:af:56:10:cc:
30:e7:ef:80:a9:ae:b2:d7:f8:f5:b5:95:0d:98:00:
58:72:38:8c:73:79:7e:5b:c0:ec:4a:29:0a:51:f1:
aa:f8:9e:2e:26:a7:a3:4b:31:37:3c:44:64:6a:e0:
d1:f4:2d:7f:e1:e0:dc:6c:96:58:31:ab:f6:af:6a:
dd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CB:BD:2B:55:34:5E:24:5F:E5:C2:96:DE:63:8C:7F:D3:12:00:4E
X509v3 Authority Key Identifier:
keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/9EECB24E1C2611EEA7AD515D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43e8::/32
Signature Algorithm: sha256WithRSAEncryption
2b:b7:5f:59:fc:7f:be:36:d2:16:3a:18:b2:bb:88:d0:39:b7:
53:88:19:d1:ae:c1:ae:9a:6a:0a:7f:2f:0e:81:4d:48:48:c9:
e1:b7:21:b1:99:24:f7:fe:65:df:b6:fd:65:a8:b9:b8:0b:42:
fd:7e:b7:4b:e7:25:b8:01:7b:54:53:67:db:0f:fb:04:e0:2f:
96:e7:d2:45:05:13:42:a1:17:ff:20:72:e2:78:ab:f8:75:0b:
9f:ea:4a:8f:40:67:3c:34:41:6f:ba:3a:69:ac:87:73:80:49:
24:20:0c:3e:42:a6:24:d0:7f:a1:69:f4:1b:54:fb:53:2c:91:
3e:38:28:05:a8:77:d4:64:04:60:91:a1:5c:f1:4d:a3:83:40:
97:10:8d:6d:1c:31:24:97:e5:b1:88:28:26:72:1f:73:ac:cc:
e4:b1:7e:f1:13:20:8d:56:4f:7b:1c:fb:63:b3:41:cd:3e:4c:
99:c7:88:54:5b:72:27:e8:ef:3b:82:38:f7:1a:23:6b:e2:05:
e5:3a:61:b2:24:57:92:4b:6a:7b:ef:c0:68:b4:d1:1d:dd:20:
5f:8d:4a:0d:06:f1:c9:ce:a2:ba:21:c8:dc:76:58:3d:2d:2a:
0f:58:f1:96:a5:ee:6b:1b:1f:28:4c:c5:76:2c:68:58:88:fa:
85:06:df:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:58 2024 by rpki-client on console-fra.rpki-client.org