Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/D54273E281BA11EFA327CDA0762E951A.roa
File: D54273E281BA11EFA327CDA0762E951A.roa (raw, json)
Hash identifier: 5R8cd2x4uz0VmbtOqIFPktz58DCFoYAlE0EfcBaZH7c=
Subject key identifier: 6B:BC:BE:26:FA:6B:42:09:63:C0:D3:D4:A0:1B:7B:94:1C:A0:9A:13
Certificate issuer: /CN=F36C629BAF/serialNumber=C7D3466682C5160E22B62548E97E210FE4A1E386
Certificate serial: 0150
Authority key identifier: C7:D3:46:66:82:C5:16:0E:22:B6:25:48:E9:7E:21:0F:E4:A1:E3:86
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/D54273E281BA11EFA327CDA0762E951A.roa
Signing time: Thu 03 Oct 2024 19:08:11 +0000
ROA not before: Thu 03 Oct 2024 19:08:08 +0000
ROA not after: Wed 03 Oct 2029 19:08:08 +0000
asID: 329294
IP address blocks: 2c0f:1140::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 336 (0x150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C629BAF/serialNumber=C7D3466682C5160E22B62548E97E210FE4A1E386
Validity
Not Before: Oct 3 19:08:08 2024 GMT
Not After : Oct 3 19:08:08 2029 GMT
Subject: CN=66feeb9b-a9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:67:27:04:7b:d9:72:46:a3:7b:1b:37:24:77:
88:b8:ee:b7:8f:1d:26:46:35:43:3a:fc:fb:4c:b8:
2e:1a:3d:38:23:1a:a9:a8:fa:70:15:95:1b:fe:69:
30:fe:e8:ff:e6:19:43:c9:51:12:d4:3c:88:f4:b6:
b7:e5:ba:9f:a9:21:77:3d:d5:4b:23:95:34:08:17:
cb:2f:a0:bc:16:d4:52:f5:91:25:62:a1:8a:c5:a5:
06:75:9d:88:19:46:82:28:16:f7:16:a2:df:57:12:
04:1c:84:43:f9:e8:b8:07:eb:1a:83:10:0c:46:ee:
16:80:1e:6d:9c:4a:65:65:5f:04:97:16:39:9c:a5:
35:c0:b6:90:69:42:ba:bb:00:67:4f:41:58:9e:73:
9e:46:45:9a:5f:ea:f3:94:bd:38:d0:89:d2:c5:9d:
f7:0b:8b:4c:e9:22:58:54:37:48:d8:da:62:17:fa:
e7:43:a2:e3:b6:c8:c9:ae:0a:96:84:62:55:56:bb:
f7:90:d0:78:a4:1a:2c:e4:39:36:22:65:c0:c6:e2:
63:dc:43:4a:98:10:31:fe:e8:10:68:ca:94:f4:6b:
4f:a9:a3:b8:12:a3:ad:a7:37:27:58:34:e3:a5:06:
12:0a:90:f5:98:07:ac:1e:2d:65:74:dd:5e:d3:3d:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BC:BE:26:FA:6B:42:09:63:C0:D3:D4:A0:1B:7B:94:1C:A0:9A:13
X509v3 Authority Key Identifier:
keyid:C7:D3:46:66:82:C5:16:0E:22:B6:25:48:E9:7E:21:0F:E4:A1:E3:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/D54273E281BA11EFA327CDA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:1140::/40
Signature Algorithm: sha256WithRSAEncryption
57:9e:f7:47:e2:08:fd:4f:c7:c0:f2:67:a5:d9:1c:e2:07:3a:
fe:89:05:a1:76:6a:09:86:31:aa:f4:06:2c:16:47:c2:b0:85:
61:5a:d1:ea:3c:ac:ba:85:d0:91:28:42:73:be:f0:15:fb:8c:
1e:a7:16:77:f0:fd:c6:8e:46:cb:fd:0f:53:fc:82:59:1b:39:
9f:ec:29:bc:0a:74:eb:2a:ee:89:05:59:5f:36:34:bc:a7:ba:
db:81:a3:2e:56:35:02:16:54:14:7e:a6:81:ee:f1:27:0e:09:
1c:56:0e:97:61:d7:81:22:ec:28:4e:41:c6:2e:56:8a:d5:83:
06:93:19:8b:5c:bf:ed:d7:57:1f:01:10:9d:6b:59:ac:66:da:
37:76:c8:ab:05:ed:61:f0:3b:0e:e1:99:fd:37:9c:33:ef:86:
94:44:9b:2c:13:99:7b:fb:1f:98:b3:e2:d2:44:c5:99:17:a4:
62:24:7f:d8:99:57:bb:d3:77:50:0c:5c:95:b2:b3:e6:7e:bb:
31:19:f6:9c:a7:fb:a6:f2:c4:c7:ee:8c:eb:2d:bc:1b:4f:ee:
b7:89:06:2c:c4:a2:e2:48:e0:76:82:b2:82:c2:4d:c4:6e:7b:
87:7c:c3:86:7e:26:f7:9a:11:7f:66:37:65:d9:82:69:0c:57:
2f:c2:c8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:43:47 2024 by rpki-client on console-ams.rpki-client.org