Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/E5339BB6FE4B11EEBF03D6FE007001B1.roa
File: E5339BB6FE4B11EEBF03D6FE007001B1.roa (raw, json)
Hash identifier: clO1hTVCUiFR0kzwPDKqsSqfTZGuR9lBaBQYCVXfpFM=
Subject key identifier: 94:24:B9:79:3E:52:6A:16:6E:01:2E:7C:E4:3F:E8:D7:46:2A:B1:0B
Certificate issuer: /CN=F36251E0AF/serialNumber=EFB7AA8EF96C13AAADC8476FBDDE9F3277FCD56D
Certificate serial: 2A
Authority key identifier: EF:B7:AA:8E:F9:6C:13:AA:AD:C8:47:6F:BD:DE:9F:32:77:FC:D5:6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/77eqjvlsE6qtyEdvvd6fMnf81W0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/E5339BB6FE4B11EEBF03D6FE007001B1.roa
Signing time: Fri 19 Apr 2024 12:54:02 +0000
ROA not before: Fri 19 Apr 2024 12:53:58 +0000
ROA not after: Sun 31 Dec 2034 12:53:58 +0000
asID: 329411
IP address blocks: 2c0f:3040::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/77eqjvlsE6qtyEdvvd6fMnf81W0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/77eqjvlsE6qtyEdvvd6fMnf81W0.mft
rsync://rpki.afrinic.net/repository/afrinic/77eqjvlsE6qtyEdvvd6fMnf81W0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 02:57:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36251E0AF
Validity
Not Before: Apr 19 12:53:58 2024 GMT
Not After : Dec 31 12:53:58 2034 GMT
Subject: CN=6622696a-2ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:0d:e3:20:8d:2e:2f:ff:ba:37:3b:e5:02:
e0:7d:de:91:32:84:f6:c4:d5:ea:77:ba:8d:37:85:
8f:18:f8:7f:4f:1b:17:96:14:c1:3c:1d:db:92:81:
d3:72:b0:c1:08:40:a6:b5:a9:ca:2f:2e:d6:22:5e:
fa:dc:f4:52:79:4b:05:9f:5a:84:d9:ca:73:e2:2e:
01:f6:e0:e4:04:fc:12:c7:d0:1e:6d:c4:7c:62:39:
97:c6:6e:4d:2b:42:d8:50:c5:e9:a1:4a:01:85:fa:
47:d8:b3:41:9a:5d:87:34:8f:45:1e:ea:43:05:4b:
3e:c6:80:64:12:06:46:56:dd:08:5f:d4:3e:e1:49:
46:17:a6:86:35:ec:bb:b1:bc:26:98:1f:ee:d4:fe:
40:59:42:f4:e7:d2:ef:0f:ea:d3:6f:d1:a5:60:1d:
af:c9:a8:1e:6f:13:75:74:55:b8:cf:6b:6c:f4:ae:
9c:92:83:05:2d:4d:ab:d2:a9:92:72:52:aa:b2:14:
9b:0e:de:62:d6:8a:d7:31:be:13:2c:fc:3e:b9:9c:
54:f0:c3:44:bc:7c:65:df:52:e3:26:0e:10:54:32:
4e:9b:a9:68:d3:df:30:b6:2c:51:1b:ee:92:ed:f6:
bc:ba:5a:63:23:c0:1f:55:24:84:c3:ba:62:9b:6b:
01:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:24:B9:79:3E:52:6A:16:6E:01:2E:7C:E4:3F:E8:D7:46:2A:B1:0B
X509v3 Authority Key Identifier:
keyid:EF:B7:AA:8E:F9:6C:13:AA:AD:C8:47:6F:BD:DE:9F:32:77:FC:D5:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/77eqjvlsE6qtyEdvvd6fMnf81W0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/77eqjvlsE6qtyEdvvd6fMnf81W0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/E5339BB6FE4B11EEBF03D6FE007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:3040::/32
Signature Algorithm: sha256WithRSAEncryption
b9:39:0c:39:1b:41:c4:5e:2a:04:e2:1a:84:68:75:e0:6b:8b:
a4:82:fb:3c:77:8e:e7:07:fb:54:80:ae:85:bc:43:50:aa:71:
5b:be:62:cc:b5:ff:37:bb:d5:7f:ac:f6:24:0c:f2:21:4d:80:
66:19:b4:d3:15:fa:fe:96:f4:43:e2:2a:0e:00:f1:a8:15:f9:
25:ee:27:b8:4e:8b:a4:64:a2:1b:02:48:24:18:30:93:f6:ed:
e9:09:52:ad:85:98:47:e9:1b:48:48:08:cb:f7:ba:56:46:e7:
b1:f0:12:59:29:a6:76:07:52:98:87:49:50:f7:fd:95:c7:47:
7f:72:0a:0f:ec:c4:f7:29:4c:3b:a8:fd:ab:e3:ef:5b:24:38:
0d:32:65:72:83:0a:54:95:26:be:55:56:03:47:87:32:67:87:
38:8c:4c:63:61:d0:27:2c:c9:a0:95:2d:d2:25:57:f8:05:79:
0b:0b:14:08:79:c0:c5:bb:ef:6a:a6:db:69:c0:fc:22:3e:55:
e2:a9:e3:a9:f7:7d:e5:09:d5:c0:ac:9d:49:72:b1:53:36:06:
8c:32:ce:0f:f7:a0:7f:d9:85:22:bc:d1:31:3b:7d:8d:f9:55:
5d:69:a9:bd:2b:00:29:cb:ac:8f:4e:fa:26:11:33:69:38:7b:
6a:57:b6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:16 2025 by rpki-client