Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/26FC764A6FAC11EF8469D197762E951A.roa
File: 26FC764A6FAC11EF8469D197762E951A.roa (raw, json)
Hash identifier: 2TO/cGj7sHRkn2ixg6Y+5Mtfx/C/Oewdnp7crBfamHM=
Subject key identifier: 5F:1E:6C:25:63:4D:5C:AE:89:A4:D1:AA:44:C1:D9:91:80:91:E4:C7
Certificate issuer: /CN=F36EC727AF/serialNumber=31FCD392FE8EBD57E12538DC60A8059FFA39A03A
Certificate serial: 0A
Authority key identifier: 31:FC:D3:92:FE:8E:BD:57:E1:25:38:DC:60:A8:05:9F:FA:39:A0:3A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/MfzTkv6OvVfhJTjcYKgFn_o5oDo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/26FC764A6FAC11EF8469D197762E951A.roa
Signing time: Tue 10 Sep 2024 19:37:45 +0000
ROA not before: Tue 10 Sep 2024 19:37:42 +0000
ROA not after: Fri 10 Sep 2027 19:37:42 +0000
asID: 37317
IP address blocks: 2c0f:f028::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft
rsync://rpki.afrinic.net/repository/afrinic/MfzTkv6OvVfhJTjcYKgFn_o5oDo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EC727AF/serialNumber=31FCD392FE8EBD57E12538DC60A8059FFA39A03A
Validity
Not Before: Sep 10 19:37:42 2024 GMT
Not After : Sep 10 19:37:42 2027 GMT
Subject: CN=66e0a009-f7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:f5:27:32:71:76:48:45:40:b8:04:d3:03:
dc:02:54:db:d0:e7:a1:4e:b0:91:21:3c:4d:83:9f:
5d:b9:8b:e3:72:f7:34:c4:75:8f:91:c4:84:3f:62:
03:3b:56:d1:bf:f1:a2:c2:b8:bf:b9:c6:ed:42:f1:
8b:35:cd:eb:51:c7:be:7b:33:12:d8:ee:78:36:bc:
f3:52:dd:bf:6e:9f:58:5d:70:e5:1b:a4:a1:5c:d7:
97:d6:91:7d:90:dc:90:24:8e:c1:67:3a:9b:ab:18:
bb:40:7e:f7:9e:c1:10:a6:51:a6:33:c0:b7:a8:5f:
bb:b8:70:2d:3d:ea:b4:54:71:4b:d8:e8:6a:59:17:
6f:51:3f:d6:59:40:51:a1:ab:6e:fd:87:20:06:96:
e3:de:5b:11:8e:87:88:ca:bc:17:29:92:68:ec:8c:
86:5d:c8:14:11:30:a7:d2:c5:df:17:14:c4:03:00:
d6:aa:57:ca:7b:a3:a5:8a:0f:19:99:6c:ff:5e:73:
f9:fe:7f:a8:f0:69:38:22:58:44:b3:80:3b:5c:3d:
2d:6c:a4:56:62:80:30:dd:6a:85:8d:fb:79:71:a5:
fe:15:44:83:03:f0:ac:6e:0e:f1:8c:41:e0:93:02:
5a:51:29:7d:8c:3b:f8:6b:dd:8e:19:e8:23:bc:bc:
10:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1E:6C:25:63:4D:5C:AE:89:A4:D1:AA:44:C1:D9:91:80:91:E4:C7
X509v3 Authority Key Identifier:
keyid:31:FC:D3:92:FE:8E:BD:57:E1:25:38:DC:60:A8:05:9F:FA:39:A0:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MfzTkv6OvVfhJTjcYKgFn_o5oDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/26FC764A6FAC11EF8469D197762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f028::/32
Signature Algorithm: sha256WithRSAEncryption
73:5b:6e:9e:8c:6b:91:1e:b1:95:1b:ed:53:8d:42:09:2e:1c:
1c:eb:94:d5:d7:f5:12:34:00:5e:cf:c4:a1:6b:fa:90:c3:1f:
e9:0e:64:0d:1c:26:9a:a3:08:bf:ab:57:63:7b:f6:b4:e0:94:
63:8d:dd:fa:d0:7a:4e:e0:8e:d3:27:74:d0:2c:58:5c:35:7b:
70:97:84:b0:c3:00:e5:8c:51:58:2d:44:1d:01:46:83:40:dd:
5e:f9:80:c8:28:74:a1:a2:6c:fe:71:99:b7:68:6e:c1:52:38:
d6:e1:51:b9:3b:28:14:2a:38:33:0e:a2:48:c5:79:2d:b0:a5:
dc:74:0c:e2:23:cf:54:8d:96:c6:d2:9c:ef:6a:d7:a5:d6:96:
50:6e:dc:40:a6:51:07:e3:b8:c8:01:79:74:03:36:72:a6:c1:
f1:57:5e:db:31:0b:ac:2b:9a:98:57:15:17:3b:1a:91:e2:62:
97:a6:89:f3:7e:3f:32:1e:25:73:35:34:80:8e:29:4d:3c:d7:
83:55:b8:83:13:8e:8d:75:02:b5:43:64:81:a2:fd:26:92:23:
01:86:2c:b3:a0:a7:3a:8b:93:83:0f:43:7f:35:40:00:c9:83:
65:99:ff:a1:db:86:91:33:11:14:a8:d4:ed:5b:dd:10:5c:d4:
0f:98:cd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 06:47:51 2024 by rpki-client on console-fra.rpki-client.org