Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/0F846D08216C11EF8074BA1B7DDC24C2.roa
File: 0F846D08216C11EF8074BA1B7DDC24C2.roa (raw, json)
Hash identifier: 2cHpMzYFLIaciTpzwpVBdKjF8btucqV90CHDQfekd3U=
Subject key identifier: 5A:92:E4:B9:66:6F:FB:0C:97:EF:C5:FE:D3:AA:82:8B:04:E8:48:BB
Certificate issuer: /CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
Certificate serial: 01A0
Authority key identifier: 87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/0F846D08216C11EF8074BA1B7DDC24C2.roa
Signing time: Mon 03 Jun 2024 05:42:27 +0000
ROA not before: Mon 03 Jun 2024 05:42:24 +0000
ROA not after: Tue 01 Jan 2030 05:42:24 +0000
asID: 37684
IP address blocks: 2c0f:f408:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.mft
rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416 (0x1a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
Validity
Not Before: Jun 3 05:42:24 2024 GMT
Not After : Jan 1 05:42:24 2030 GMT
Subject: CN=665d57c3-52d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:14:0b:06:a3:9b:fe:4f:0b:d1:bc:22:66:99:
2b:db:3c:7b:97:cd:8c:09:a1:71:5f:5c:88:0f:5e:
88:df:d7:08:ac:c5:15:1f:6b:3f:fc:59:f2:65:f4:
2f:56:ee:e3:40:14:41:23:2e:69:0e:b2:f4:79:48:
15:ac:5b:6e:a7:5b:f0:c7:c6:7c:b7:6e:48:8b:3c:
24:be:b8:21:55:bd:ae:66:c2:94:9a:8d:c4:b0:3a:
83:54:40:a9:a4:c0:3a:c1:5f:0e:72:2a:81:20:ae:
10:bc:d4:8b:14:cb:0c:14:6d:4e:17:05:bf:de:48:
31:b4:f2:5d:d7:ad:66:a6:14:02:0e:d9:a3:2d:68:
e2:6d:69:54:93:67:45:8d:4e:ae:bd:dd:d0:e7:b1:
87:93:8d:41:77:0d:31:62:24:4c:b4:4b:b5:05:6a:
36:82:f2:39:a9:06:ba:c1:ad:2f:63:69:56:db:0e:
43:1c:db:d8:55:8b:80:12:f7:cd:e1:4d:c5:a7:6c:
98:8b:80:4a:6a:a1:ee:cd:b7:32:61:cd:cd:d4:0e:
fd:f5:35:95:7f:f0:86:04:7b:de:67:bd:9c:f1:e1:
48:fc:e1:ac:9f:b6:a6:99:6a:18:03:8c:ac:3f:e1:
ce:43:a1:6d:3a:82:49:25:98:fd:03:42:39:2b:4e:
a5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:92:E4:B9:66:6F:FB:0C:97:EF:C5:FE:D3:AA:82:8B:04:E8:48:BB
X509v3 Authority Key Identifier:
keyid:87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/0F846D08216C11EF8074BA1B7DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f408:2::/48
Signature Algorithm: sha256WithRSAEncryption
14:47:8c:f4:c0:cf:cd:e4:74:b0:fd:d6:d7:8a:48:7e:fe:12:
43:55:28:d8:6c:62:15:14:4d:0b:d7:1b:6e:b9:c5:f4:06:31:
d2:fb:8a:91:8d:a6:f1:9b:40:c9:a2:8b:32:57:4e:ef:82:98:
f7:60:ca:25:5b:ba:2a:ce:b8:c7:0d:81:81:08:f5:26:98:60:
bc:59:c5:ce:2d:3c:59:63:57:12:69:42:c2:74:c4:62:e9:38:
77:91:75:64:1f:30:96:73:07:54:2b:f0:f4:ee:cd:6c:e4:43:
4c:77:4e:b3:7a:57:c4:fc:6a:9b:aa:32:35:c1:3b:7f:ed:63:
a9:0f:67:4c:e2:fd:cc:2e:9d:e9:53:38:74:50:b5:ac:52:5e:
ce:71:71:13:d3:f7:c6:04:ed:e3:87:a5:75:53:95:d6:0c:f2:
84:ca:e1:22:fd:89:61:63:5c:90:5c:34:2c:85:b8:ba:28:e1:
b2:f5:4a:ae:f2:0b:d1:ec:77:1b:25:b5:52:b9:e6:ef:4c:48:
2e:94:8c:e3:c9:03:52:3f:60:17:06:ff:43:e5:54:6a:df:60:
34:ef:ef:10:50:19:84:3f:4e:3c:ee:f2:94:0a:8e:79:c0:d6:
01:37:79:bc:ba:ab:44:be:a3:b1:57:fd:f5:1f:d6:d0:0a:f0:
d2:6f:d9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:59 2024 by rpki-client on console-fra.rpki-client.org