Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/967DC6E22F0A11EEA467DA754AD9E6FC.roa
File: 967DC6E22F0A11EEA467DA754AD9E6FC.roa (raw, json)
Hash identifier: +o4XNyfBWvqjY7Na2pyTJsEXoHuFTxOSwGkcmHXwtTM=
Subject key identifier: 54:ED:09:80:4C:3F:3B:4C:89:46:55:85:44:21:B2:9A:48:78:3B:62
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 050C
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/967DC6E22F0A11EEA467DA754AD9E6FC.roa
Signing time: Sun 30 Jul 2023 18:55:02 +0000
ROA not before: Sun 30 Jul 2023 18:54:58 +0000
ROA not after: Sat 30 Jul 2033 18:54:58 +0000
asID: 37119
IP address blocks: 2c0f:f888:dfff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1292 (0x50c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Jul 30 18:54:58 2023 GMT
Not After : Jul 30 18:54:58 2033 GMT
Subject: CN=64c6b205-2db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:74:70:65:30:80:d5:bc:93:f8:80:8c:85:bd:
0d:93:cd:82:7d:15:88:1f:f5:85:7c:cd:3d:80:2b:
5f:41:e5:a9:f3:ef:c2:bd:bf:ae:ac:06:ef:6b:d3:
db:29:e7:e5:a9:c4:a2:32:cf:66:41:4d:60:8f:a6:
a2:80:7d:fa:53:8b:6c:40:36:ae:73:bb:f3:83:fa:
14:30:a8:57:34:50:65:2f:f5:81:e5:31:1c:7c:ea:
1f:1e:35:8e:24:d4:41:71:a2:2c:47:d6:4e:df:b7:
dd:6a:8b:a8:f3:46:b3:15:a0:54:43:4c:ef:fb:74:
1b:93:6f:bc:ea:6c:22:3d:cb:40:5d:2e:05:21:5f:
43:ad:e2:0c:bd:80:f7:5b:9e:63:6d:e3:f3:9c:04:
7d:3b:94:38:3e:b4:5e:1c:55:4d:38:0c:27:84:25:
b7:24:0e:33:8e:88:92:a2:2a:f7:0f:0a:e6:e2:ce:
ee:1a:63:ff:27:cc:5e:31:25:85:d2:22:1e:16:62:
68:61:a1:52:0d:e7:d5:50:34:ca:74:ad:1e:93:a6:
49:cc:c6:4a:d7:72:35:91:99:a8:d2:c5:8e:ed:99:
c2:e0:a1:b0:f0:54:9e:6a:73:f8:48:12:76:e4:c2:
dd:d8:16:14:36:b2:4a:a9:59:ec:ad:9c:6a:0b:d8:
eb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:ED:09:80:4C:3F:3B:4C:89:46:55:85:44:21:B2:9A:48:78:3B:62
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/967DC6E22F0A11EEA467DA754AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:dfff::/48
Signature Algorithm: sha256WithRSAEncryption
25:91:e5:61:c1:7d:6f:c3:c3:09:aa:dd:4a:8f:84:70:71:18:
ac:50:fe:8d:c3:36:1b:23:ae:9d:23:5b:58:2e:94:5d:be:7b:
86:7e:23:a7:10:d7:63:34:6f:a9:fa:00:0e:25:f6:14:bb:e3:
c5:05:04:0c:21:02:3a:7f:ac:2d:07:f3:d5:64:b0:bf:a6:3b:
c5:c0:5c:f2:29:f1:84:b2:be:f4:59:c8:1e:d6:f7:d0:9e:55:
9e:6f:66:25:45:e0:38:6a:4a:70:f7:64:7c:78:8e:51:b9:c3:
df:d7:5c:b8:ea:a3:19:39:e2:d0:3b:1b:37:e6:ca:29:e6:60:
13:4d:e1:62:30:05:47:f3:01:e4:78:be:e9:f2:d7:7a:e0:1b:
98:1d:f1:b9:92:53:11:4b:c8:f0:e0:78:84:76:b3:28:a2:11:
9b:f4:e5:37:49:54:a3:58:34:a5:51:f8:9a:5c:2e:ee:a7:b3:
3c:7a:e6:93:7d:36:cf:6e:c4:4b:5d:27:4c:d2:0a:32:25:b4:
5e:5b:d0:98:cf:a4:3e:8d:50:6b:6f:df:62:2a:ba:a7:60:ef:
fa:5f:98:e0:cd:7f:f0:06:01:41:eb:1c:c0:c1:3e:a1:bb:05:
88:57:89:5a:8f:47:d3:74:7e:10:aa:5b:f7:9b:27:32:f2:d7:
54:81:1d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:18 2024 by rpki-client on console-fra.rpki-client.org