Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/5C2091561C3911EFB205FD487DDC24C2.roa
File: 5C2091561C3911EFB205FD487DDC24C2.roa (raw, json)
Hash identifier: NKlDY276l6JOcXLF8QFggQf5j2sPub212V854yhc+iU=
Subject key identifier: 06:F0:B1:A3:F9:7A:47:E1:D7:C9:B0:13:A0:6E:68:D5:DC:90:1E:38
Certificate issuer: /CN=F363212DAF/serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE
Certificate serial: 03B7
Authority key identifier: EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/5C2091561C3911EFB205FD487DDC24C2.roa
Signing time: Mon 27 May 2024 14:56:56 +0000
ROA not before: Mon 27 May 2024 14:56:52 +0000
ROA not after: Sat 27 May 2045 14:56:52 +0000
asID: 327979
IP address blocks: 2c0f:f850:3::/48 maxlen: 48
2c0f:f850:32::/48 maxlen: 48
2c0f:f850:34::/48 maxlen: 48
2c0f:f850:216::/48 maxlen: 48
2c0f:f850:217::/48 maxlen: 48
2c0f:f850:218::/48 maxlen: 48
2c0f:f850:219::/48 maxlen: 48
2c0f:f850:dc21::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.crl
rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 951 (0x3b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363212DAF/serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE
Validity
Not Before: May 27 14:56:52 2024 GMT
Not After : May 27 14:56:52 2045 GMT
Subject: CN=66549f38-2419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:58:45:fa:a2:82:52:98:6b:7b:c1:dd:bd:
8b:6a:6d:46:8e:1d:5f:d9:77:ac:fd:d5:e8:43:d0:
c4:85:5e:ad:62:3a:04:a4:46:a0:4c:ee:5b:6a:b6:
d5:63:b4:03:9c:06:ec:92:70:64:e7:af:8d:7f:e6:
21:e3:be:1b:2e:a8:75:52:7f:ff:f2:7a:34:ff:6e:
e4:11:09:d7:06:73:a7:7c:f3:44:62:bc:3e:ac:1a:
70:c6:10:51:e0:a2:4e:79:29:31:8c:b2:4b:81:67:
b9:ea:fc:0d:f3:0b:9d:5e:4b:aa:31:22:c4:30:16:
9d:ad:24:a1:d5:c7:64:4d:81:85:7d:53:35:c2:66:
4b:8b:1c:a5:59:96:d0:ee:7f:72:a9:b0:f4:4b:ce:
62:30:72:65:a7:81:e9:1b:f8:9d:d2:0e:d9:3c:3c:
5f:1a:18:26:6a:43:80:c8:20:5d:fd:a1:ff:09:64:
d5:54:31:48:52:ce:ad:fe:e7:e2:12:71:81:a5:47:
2b:ca:b4:e6:a3:1b:f4:4a:7e:07:b6:3c:c1:00:c6:
02:b9:0e:11:f7:66:e4:7e:3b:81:47:60:1d:ff:5c:
aa:6e:62:10:06:a5:75:40:e3:89:de:6f:ec:c4:27:
59:1d:42:f4:25:06:41:8f:2f:d9:d0:7c:aa:b1:d3:
3d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F0:B1:A3:F9:7A:47:E1:D7:C9:B0:13:A0:6E:68:D5:DC:90:1E:38
X509v3 Authority Key Identifier:
keyid:EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/5C2091561C3911EFB205FD487DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f850:3::/48
2c0f:f850:32::/48
2c0f:f850:34::/48
2c0f:f850:216::-2c0f:f850:219:ffff:ffff:ffff:ffff:ffff
2c0f:f850:dc21::/48
Signature Algorithm: sha256WithRSAEncryption
91:f1:ba:29:5d:97:cf:73:fb:d6:fb:ca:a3:93:c7:dc:e0:af:
d1:c0:3b:40:42:6d:77:2f:e7:eb:96:94:20:58:d4:25:d0:94:
83:db:63:a2:96:c2:92:b3:7b:41:00:7c:0d:9a:11:5a:46:d2:
58:c7:62:17:5c:b0:1e:db:b4:e4:b9:00:66:7e:82:c7:35:e4:
61:03:b3:83:8b:1a:ed:81:36:36:4d:fb:7d:77:94:32:a9:7f:
5c:be:11:b5:05:bd:f4:f6:91:5b:d8:c6:95:86:34:a5:78:0c:
97:e8:2b:b4:95:a0:d5:9a:6a:fe:d9:78:a7:5b:c2:b4:84:c9:
e7:15:0b:f5:b8:b8:26:40:7d:de:84:b7:39:e0:65:42:15:d0:
f1:06:92:73:be:af:87:06:94:fe:5a:ea:6b:dd:d1:4e:1a:a7:
c1:ce:36:2f:7e:bf:88:3d:7d:39:e7:9e:af:23:4c:9e:6d:d7:
1d:20:32:76:19:02:3a:5e:b6:f9:00:ec:52:34:cc:02:b7:51:
8c:a0:68:cd:5e:e4:a0:cd:c5:71:e7:1f:31:ff:d2:8c:2d:a7:
17:45:ce:02:81:d0:a7:8f:ed:e5:e2:8a:86:6b:91:af:33:9c:
e0:5b:40:7a:72:ac:10:9b:5a:1b:21:4e:3a:9e:18:db:3b:2f:
77:87:a8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:53 2024 by rpki-client on console-fra.rpki-client.org