Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FD195/EA264EB6E7EB11ECA9161CA6F1222468/2BF48062809511EFBA3DFF63762E951A.roa
File: 2BF48062809511EFBA3DFF63762E951A.roa (raw, json)
Hash identifier: DIejCdSTY0WppTtS1iYIu/XX3//9llWktzdBuNfwANg=
Subject key identifier: D1:FD:2E:D8:5E:C3:1E:E1:33:D9:F4:DA:16:28:6E:81:C4:BE:F8:D1
Certificate issuer: /CN=F36FD195AF/serialNumber=4FD424B1E7C1D26104916A2764CE8ECE4522BD5E
Certificate serial: 036F
Authority key identifier: 4F:D4:24:B1:E7:C1:D2:61:04:91:6A:27:64:CE:8E:CE:45:22:BD:5E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/T9QksefB0mEEkWonZM6OzkUivV4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FD195/EA264EB6E7EB11ECA9161CA6F1222468/2BF48062809511EFBA3DFF63762E951A.roa
Signing time: Wed 02 Oct 2024 08:06:05 +0000
ROA not before: Wed 02 Oct 2024 08:06:00 +0000
ROA not after: Mon 31 Oct 2033 08:06:00 +0000
asID: 329184
IP address blocks: 2c0f:f598:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FD195/EA264EB6E7EB11ECA9161CA6F1222468/T9QksefB0mEEkWonZM6OzkUivV4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FD195/EA264EB6E7EB11ECA9161CA6F1222468/T9QksefB0mEEkWonZM6OzkUivV4.mft
rsync://rpki.afrinic.net/repository/afrinic/T9QksefB0mEEkWonZM6OzkUivV4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 879 (0x36f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FD195AF/serialNumber=4FD424B1E7C1D26104916A2764CE8ECE4522BD5E
Validity
Not Before: Oct 2 08:06:00 2024 GMT
Not After : Oct 31 08:06:00 2033 GMT
Subject: CN=66fcfeed-0ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:98:8b:a6:29:45:3f:2c:d2:25:4d:92:ac:1a:
1c:4d:e5:b1:95:dc:24:03:4b:42:a9:ba:5a:3f:1e:
3f:07:97:f5:c0:ed:2c:80:c0:15:4b:cf:d0:7b:06:
08:17:e5:ea:30:5d:fe:6e:43:b7:07:5c:79:5b:01:
52:14:2e:1a:37:fd:df:c8:a7:7e:e2:ae:8c:ff:6b:
f9:20:33:74:64:54:c4:d4:20:74:cd:0d:90:62:d7:
68:a6:17:f2:0e:e8:42:5a:5e:1e:f6:de:28:ac:3f:
de:45:ea:35:3f:c7:41:87:1b:10:71:70:a5:06:af:
db:45:5a:00:0c:65:5d:f5:ce:e5:9d:9e:76:bc:a5:
fc:c4:96:3c:4d:95:1e:f7:2a:4e:ae:c2:ab:51:af:
37:85:73:de:14:e4:b4:5b:0e:9d:29:e6:5f:3d:7f:
30:b9:cd:9b:7b:64:1c:a3:2c:19:1a:cf:f5:a8:c0:
8b:71:dd:dc:77:9a:d4:7a:ec:10:cf:fc:4e:a0:6e:
19:db:7b:77:ae:28:c2:27:8a:db:03:aa:23:4b:ba:
74:51:90:4f:e6:d7:eb:37:e1:1b:df:19:3c:93:a5:
80:a1:01:9d:1d:90:91:47:f9:c6:2b:d3:67:0d:1b:
05:f0:d5:74:6f:9e:ac:f0:de:47:b1:34:c2:ca:fd:
00:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FD:2E:D8:5E:C3:1E:E1:33:D9:F4:DA:16:28:6E:81:C4:BE:F8:D1
X509v3 Authority Key Identifier:
keyid:4F:D4:24:B1:E7:C1:D2:61:04:91:6A:27:64:CE:8E:CE:45:22:BD:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FD195/EA264EB6E7EB11ECA9161CA6F1222468/T9QksefB0mEEkWonZM6OzkUivV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T9QksefB0mEEkWonZM6OzkUivV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FD195/EA264EB6E7EB11ECA9161CA6F1222468/2BF48062809511EFBA3DFF63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f598:2::/48
Signature Algorithm: sha256WithRSAEncryption
06:93:a5:ba:0d:a0:6c:c0:e9:d4:57:61:2c:66:a9:58:34:07:
d1:06:44:dd:38:94:a4:66:57:b1:6b:1a:4e:0f:d6:67:dd:3f:
80:7f:ae:ca:0f:15:7b:4c:f8:d9:fc:68:39:d5:12:80:3c:6c:
ff:be:2c:18:1d:72:9f:15:47:7c:ce:44:73:14:da:6b:a0:08:
c9:dc:5a:6f:0d:a4:e2:ca:5f:bb:f9:2b:a4:67:73:ff:a2:87:
8c:97:22:01:1b:44:23:7f:61:42:5b:20:70:eb:cd:79:a8:1e:
fe:bd:0d:d0:fa:14:84:d7:93:7b:b1:5d:da:d9:7d:d5:34:51:
55:10:9f:b2:2b:d1:00:36:e5:2f:fb:5a:61:e4:ae:d8:32:f9:
ec:84:bb:af:31:92:d3:7d:c9:0a:2f:cd:6c:39:c7:7d:e9:fb:
9e:94:8f:55:68:1f:16:7c:6a:10:c4:e4:3f:ba:03:9b:32:42:
ae:14:4a:f6:00:fb:b6:7f:75:50:c4:99:64:0d:1b:9a:68:75:
9b:21:43:f4:d3:62:c7:05:dc:c5:7d:24:dc:58:52:f4:7c:a0:
50:1a:ad:b0:a7:71:a3:ed:38:d6:45:6c:05:b5:e0:51:49:db:
1e:a9:20:ad:42:ca:81:13:29:e5:a0:6d:0c:b0:f6:b1:f8:44:
29:2a:8c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:34 2024 by rpki-client on console-ams.rpki-client.org