Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/C3A5115A8C7B11EF84665577762E951A.roa
File: C3A5115A8C7B11EF84665577762E951A.roa (raw, json)
Hash identifier: Jb3lykHcs6yq+k1o2AQjpFULWjfTERKJd4y5uL0S+ts=
Subject key identifier: 53:06:E7:5E:55:6B:48:D5:F8:49:6C:01:DF:25:8B:5D:28:96:23:4B
Certificate issuer: /CN=F36FC6C8AF/serialNumber=2511BAD4078D4672ACF4324299218CE4855D039D
Certificate serial: 2C
Authority key identifier: 25:11:BA:D4:07:8D:46:72:AC:F4:32:42:99:21:8C:E4:85:5D:03:9D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/C3A5115A8C7B11EF84665577762E951A.roa
Signing time: Thu 17 Oct 2024 11:34:26 +0000
ROA not before: Thu 17 Oct 2024 11:34:22 +0000
ROA not after: Tue 17 Oct 2034 11:34:22 +0000
asID: 37680
IP address blocks: 2c0f:f9a8:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.mft
rsync://rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FC6C8AF/serialNumber=2511BAD4078D4672ACF4324299218CE4855D039D
Validity
Not Before: Oct 17 11:34:22 2024 GMT
Not After : Oct 17 11:34:22 2034 GMT
Subject: CN=6710f642-9d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:87:67:8d:b7:9e:48:0d:3b:4b:17:5d:ed:
94:b1:6d:c6:48:3c:6d:62:85:58:30:87:6d:dc:a0:
b3:3f:c6:24:ae:dc:a9:cb:26:84:b6:d6:c1:9a:a3:
91:19:69:0b:0d:73:08:48:39:78:27:40:64:f4:3f:
18:85:03:85:10:a1:3c:1b:ed:56:48:c8:bd:59:db:
f5:62:64:cc:24:ee:2b:5b:4b:c3:ae:84:e6:dc:a8:
b4:38:04:24:9f:cb:a3:25:df:a9:14:b8:70:a6:f6:
97:97:06:d8:44:5c:79:1c:24:db:23:6a:11:9d:cd:
92:28:05:c0:d8:ab:08:aa:39:50:9d:96:c4:12:47:
d3:ee:70:11:74:04:4d:f0:42:73:3e:fc:dd:9e:32:
9b:ca:4b:a9:63:f8:13:fa:3b:d5:52:c6:29:e1:09:
af:09:c3:4b:bf:ef:fb:23:fa:d5:1d:af:ad:08:00:
45:93:01:51:64:5c:75:43:c9:50:ad:ef:55:94:83:
59:c5:4a:19:20:89:80:9d:f7:53:79:2a:47:93:ff:
be:90:68:a4:36:1a:3e:c0:3d:a4:85:e6:fe:99:0a:
5f:b2:bd:01:74:42:60:87:19:fd:5f:d1:2b:38:fe:
f0:91:2a:a6:14:da:fc:42:0d:38:83:5c:93:5f:a7:
72:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:06:E7:5E:55:6B:48:D5:F8:49:6C:01:DF:25:8B:5D:28:96:23:4B
X509v3 Authority Key Identifier:
keyid:25:11:BA:D4:07:8D:46:72:AC:F4:32:42:99:21:8C:E4:85:5D:03:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/C3A5115A8C7B11EF84665577762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f9a8:3000::/36
Signature Algorithm: sha256WithRSAEncryption
03:6e:55:e0:9b:ad:77:98:0a:70:f0:ef:1c:b1:fa:c4:8d:26:
1d:08:0a:66:c0:eb:43:8c:6d:cc:74:39:ed:8a:d8:81:52:f5:
09:54:32:2e:05:77:a0:b5:94:9d:10:8c:ae:50:cf:59:7e:ce:
1b:43:a7:08:af:14:a9:f0:3f:76:23:2f:58:71:30:0c:7a:b4:
37:7f:2e:d5:52:08:0e:a5:e6:32:62:c5:dc:d7:d5:4f:33:96:
2c:07:ee:53:87:4d:b7:69:8d:04:59:42:ed:90:3b:e1:b8:c3:
98:5c:62:a4:84:9e:3e:1a:54:d9:f7:de:4e:29:ca:12:c3:57:
16:38:7c:c0:f7:bc:3f:6a:29:a2:3c:22:4d:75:f6:d8:83:3a:
4f:0f:2e:d3:6f:fa:e7:5b:a5:1e:ce:4b:23:c9:ad:5a:e8:49:
f3:1e:00:9c:2c:0d:f3:d8:dc:e7:ba:a4:30:01:cc:a8:13:fc:
03:83:0e:00:14:23:c4:a1:6a:3d:e1:38:84:f4:cf:86:ab:a0:
0c:47:fa:59:fc:51:2a:f3:d9:a6:26:95:a1:ab:d3:a1:97:c0:
3a:96:7f:45:0e:92:5c:56:29:47:b9:d9:79:d0:a6:cc:0e:2b:
f9:6a:6a:f1:7c:bb:9e:78:c7:4f:a5:3d:cd:bd:53:a4:57:b7:
b6:8b:c6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 06:47:52 2024 by rpki-client on console-fra.rpki-client.org