Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/A8121FD29CFC11EF91E12A85762E951A.roa
File: A8121FD29CFC11EF91E12A85762E951A.roa (raw, json)
Hash identifier: 40tq9RUAvjkX3eq2QoBMj2ZOuP4wwcDT4oeJUrXPD54=
Subject key identifier: C8:86:DF:77:BC:92:01:6F:86:85:3E:C4:CF:DC:9D:D8:BE:18:37:A7
Certificate issuer: /CN=F36E4B69AF/serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
Certificate serial: 018E
Authority key identifier: CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/A8121FD29CFC11EF91E12A85762E951A.roa
Signing time: Thu 07 Nov 2024 11:37:24 +0000
ROA not before: Thu 07 Nov 2024 11:37:20 +0000
ROA not after: Thu 31 Dec 2026 11:37:20 +0000
asID: 36912
IP address blocks: 2c0f:f070:6010:1003::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E4B69AF/serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
Validity
Not Before: Nov 7 11:37:20 2024 GMT
Not After : Dec 31 11:37:20 2026 GMT
Subject: CN=672ca674-6688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:71:6d:b1:7a:b7:88:f3:34:30:f4:0e:0e:
62:9c:d6:61:0e:3a:cd:3d:65:d4:6e:27:eb:5d:cf:
f5:11:2d:35:ea:31:9f:51:4c:9d:8b:88:c3:2f:a4:
89:94:cd:1e:45:8b:63:22:f5:a3:30:92:a0:d3:f7:
95:73:3e:db:36:83:cd:39:6c:fd:f6:36:71:52:2c:
8a:43:64:80:73:76:a2:16:74:e1:50:d9:0d:45:7a:
89:f5:1d:ce:b8:59:8a:03:e3:3f:3a:ac:d8:bb:e3:
09:13:32:03:3b:73:7d:0c:55:e2:eb:b3:3b:10:db:
9b:6f:7b:c2:70:a2:59:06:b4:fb:7f:92:11:a9:68:
1b:15:1d:f3:50:1c:42:dc:e3:a2:4d:2a:a2:75:10:
8f:f2:26:2c:7c:53:01:ca:af:cf:e0:cf:53:4c:9e:
66:eb:24:c4:8c:dd:cc:4a:ca:c7:aa:f1:49:17:e0:
05:b6:da:29:03:d4:54:80:50:0b:48:7f:b1:a2:5d:
23:5c:95:a7:a9:37:a2:51:98:6e:84:82:a4:69:c0:
89:f7:17:4e:95:25:27:0f:7e:34:87:4a:c3:9e:5a:
6e:a5:b7:19:33:1b:15:0d:61:3d:ec:b1:7a:d6:5d:
24:2a:24:9e:58:65:a8:0b:3e:62:f2:92:c2:df:79:
d9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:86:DF:77:BC:92:01:6F:86:85:3E:C4:CF:DC:9D:D8:BE:18:37:A7
X509v3 Authority Key Identifier:
keyid:CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/A8121FD29CFC11EF91E12A85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f070:6010:1003::/64
Signature Algorithm: sha256WithRSAEncryption
1e:5c:41:9c:d0:1b:3d:f1:3f:80:84:e2:44:b2:e8:67:ab:0e:
e5:cd:9c:b3:db:7c:31:a6:33:a2:a5:27:e9:dc:aa:56:03:f4:
2b:56:a7:6a:55:d7:91:14:54:d6:f6:7a:17:58:e1:8b:a3:7e:
fe:c1:ef:75:3e:c6:c0:94:7d:a4:65:8c:32:56:1c:3d:64:83:
e4:3f:29:aa:26:81:10:9c:94:42:4c:f3:de:c8:06:e9:27:f9:
6a:27:a6:63:a5:f6:dd:34:5c:d1:df:41:0d:19:1a:13:d1:32:
e7:5f:53:cf:7c:17:18:c4:0d:02:5b:3a:83:86:85:ea:5a:72:
f4:27:d0:dc:ae:ca:a2:cd:2c:ef:95:4f:83:86:b6:78:55:ec:
c5:eb:a8:e9:6f:26:4f:e2:c2:d0:13:45:c1:53:86:c1:3b:9f:
cf:e9:61:ae:e6:e3:6b:05:18:bf:a0:e9:7f:04:01:43:e9:6b:
5e:f1:60:2a:aa:09:24:8f:d5:97:37:6a:0c:90:20:0b:d7:d8:
c7:06:ca:86:ea:a8:c2:d2:56:2c:4c:4d:6c:53:14:12:a3:78:
97:4f:52:53:22:d0:24:cc:f3:cd:1b:22:77:2e:dd:8f:8f:49:
af:ff:bc:ba:00:5b:20:cd:b5:3d:94:ba:41:24:ee:94:c0:d3:
4f:1e:2e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:19:44 2024 by rpki-client on console-ams.rpki-client.org