Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/03541FA67E1F11EE99591D6B4AD9E6FC.roa
File: 03541FA67E1F11EE99591D6B4AD9E6FC.roa (raw, json)
Hash identifier: tMNuryIys8bdcGqr2btn+01OsiqNMJcIT+oXA5sB548=
Subject key identifier: FA:6F:08:FE:34:54:2C:31:D0:1C:7E:B0:96:0F:A6:D2:F0:D7:D4:83
Certificate issuer: /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial: 01D1
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/03541FA67E1F11EE99591D6B4AD9E6FC.roa
Signing time: Wed 08 Nov 2023 10:10:16 +0000
ROA not before: Wed 08 Nov 2023 10:10:13 +0000
ROA not after: Thu 18 Nov 2027 10:10:13 +0000
asID: 4809
IP address blocks: 2c0f:f7a8:9010::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Validity
Not Before: Nov 8 10:10:13 2023 GMT
Not After : Nov 18 10:10:13 2027 GMT
Subject: CN=654b5e88-22c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3b:9e:55:e8:98:cf:c9:a9:d6:26:68:1e:70:
0a:3d:fb:9d:aa:b8:58:42:6a:ac:44:67:63:db:8d:
bd:9e:f8:da:7c:7f:5e:73:5e:9a:a1:35:bf:4f:82:
50:b2:59:5e:da:31:b0:2d:3e:82:a4:04:a0:ac:b9:
f4:83:db:66:d3:a5:c2:c4:31:3c:6e:3c:41:98:d4:
fd:d5:f5:e0:fd:b9:68:b2:3d:c9:5e:10:a0:53:dc:
59:85:c3:26:67:14:c6:af:a7:b6:65:45:89:11:d0:
06:b1:0d:fd:b1:f2:91:7a:29:99:b9:4b:f3:9e:e5:
b8:cc:d9:8f:fa:45:fb:8d:08:ef:8f:f0:e1:d2:d9:
7f:a5:6d:6f:76:57:56:d7:7c:27:9a:68:4a:32:94:
39:11:42:d2:ea:aa:3e:a0:c9:3c:16:2f:3d:4f:66:
5e:89:bf:ca:dc:3c:65:b0:15:25:de:d8:dc:54:d1:
9a:12:3b:d1:a6:8c:8d:58:b9:5d:30:6c:c7:e3:9b:
2b:0a:82:85:af:bb:98:76:af:b9:f8:5a:87:39:df:
6d:3b:0e:61:39:47:92:5a:e0:f1:b4:67:2a:32:6e:
0d:3c:72:5c:0f:be:81:39:1c:58:20:98:87:6a:ae:
aa:7b:76:da:ad:54:98:89:e9:3a:d7:17:d1:25:13:
cd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6F:08:FE:34:54:2C:31:D0:1C:7E:B0:96:0F:A6:D2:F0:D7:D4:83
X509v3 Authority Key Identifier:
keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/03541FA67E1F11EE99591D6B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f7a8:9010::/48
Signature Algorithm: sha256WithRSAEncryption
4a:8c:69:89:da:2f:68:22:ce:02:d8:58:28:db:b9:64:16:75:
7d:53:f9:8f:a6:88:76:21:43:6a:20:d6:8a:83:55:d4:32:ea:
5f:52:f4:85:7a:85:d5:7d:be:36:4d:22:8a:1d:f2:4c:70:b7:
66:85:5a:26:d2:b2:3e:24:12:ba:d3:3b:62:c1:88:72:fd:b3:
c9:d3:77:83:89:39:da:e5:b5:74:53:d8:6a:42:74:b5:9e:44:
37:b2:ea:9f:6c:76:33:c3:c2:80:b0:68:68:68:ae:65:b4:9d:
fc:e3:5d:10:dd:91:2d:9c:ba:3f:9d:76:60:fa:d9:f9:a0:a0:
9a:62:e8:f7:48:7f:7d:09:43:4f:01:0e:99:14:da:6b:d1:f3:
20:59:9d:d2:f4:62:90:37:e1:b9:c4:a1:ad:85:68:ec:a3:1a:
30:e4:09:4f:f1:7f:9b:53:84:76:22:d9:0e:02:7d:ec:13:8f:
71:95:32:d0:a1:32:88:01:c8:ad:6a:13:2a:b7:5e:92:3f:39:
fc:84:1c:bc:f7:5c:9e:a8:d4:19:8c:fb:75:b2:76:41:e6:90:
fd:6d:a5:4c:04:a2:87:a9:50:55:fd:a0:c6:fd:8e:d9:b0:17:
23:4c:43:6d:2a:cd:3d:11:62:29:c6:96:6d:c2:38:e1:2f:a4:
e8:6b:49:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:38:00 2024 by rpki-client on console-fra.rpki-client.org