Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/8F85BED4D55F11E9A0A39B43F8AEA228.roa
File: 8F85BED4D55F11E9A0A39B43F8AEA228.roa (raw, json)
Hash identifier: 6Uo+JJP2STlyRtTl2viFHjgVYtIrz3te0pfJXrN3Em4=
Subject key identifier: 27:F5:26:D5:50:B4:53:16:6E:2A:69:E6:B3:FC:08:5C:C0:F7:7C:9A
Certificate issuer: /CN=F3643835AF/serialNumber=428A89318E5067DD9C8ECF67E77E79C5FDA3792B
Certificate serial: 02
Authority key identifier: 42:8A:89:31:8E:50:67:DD:9C:8E:CF:67:E7:7E:79:C5:FD:A3:79:2B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QoqJMY5QZ92cjs9n5355xf2jeSs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/8F85BED4D55F11E9A0A39B43F8AEA228.roa
Signing time: Thu 12 Sep 2019 13:16:42 +0000
ROA not before: Thu 12 Sep 2019 13:16:35 +0000
ROA not after: Sat 29 Sep 2029 13:16:35 +0000
asID: 37712
IP address blocks: 2c0f:fde8::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/QoqJMY5QZ92cjs9n5355xf2jeSs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/QoqJMY5QZ92cjs9n5355xf2jeSs.mft
rsync://rpki.afrinic.net/repository/afrinic/QoqJMY5QZ92cjs9n5355xf2jeSs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 11:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3643835AF/serialNumber=428A89318E5067DD9C8ECF67E77E79C5FDA3792B
Validity
Not Before: Sep 12 13:16:35 2019 GMT
Not After : Sep 29 13:16:35 2029 GMT
Subject: CN=5d7a453a-18be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:33:cd:28:81:d5:e7:19:36:b8:7e:3a:2e:34:
d8:ea:a0:a4:63:bc:0e:7d:47:d1:7c:2b:22:92:34:
aa:08:27:75:b7:bd:68:d3:3a:57:a8:b4:56:7a:87:
af:29:7b:cd:ce:90:82:34:92:ec:e0:62:ff:1d:9f:
bf:c1:03:d2:5d:32:e9:14:93:91:22:8b:7b:75:89:
c6:a8:92:90:a0:47:2c:b3:c8:21:38:12:b0:bb:a1:
3a:0f:a1:25:0f:42:7c:06:b7:66:f2:88:45:a3:da:
06:a3:7d:19:b8:57:3d:6f:77:ce:6c:66:b4:31:ec:
f3:23:17:83:fd:fc:ce:1e:47:a3:12:dc:a3:47:69:
b6:6d:49:21:ad:ca:be:e8:be:12:65:62:e4:b7:ff:
be:6c:17:33:a0:80:e4:59:7c:b0:77:97:4d:d7:85:
ed:43:b7:28:51:05:de:b8:ca:6c:0c:15:e6:49:7d:
6e:88:90:15:fa:d8:96:6f:70:eb:40:a5:1e:9c:2b:
ba:4f:b0:c9:cb:a7:94:ab:fb:84:4a:36:ef:47:a9:
b5:b3:fa:a6:e4:e6:4e:99:7c:98:7a:01:06:18:3b:
f4:27:78:23:f9:7f:a9:73:a7:20:4a:01:43:de:dc:
49:ac:88:b1:dc:fa:2f:a7:81:76:e1:86:7d:2e:ce:
e0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F5:26:D5:50:B4:53:16:6E:2A:69:E6:B3:FC:08:5C:C0:F7:7C:9A
X509v3 Authority Key Identifier:
keyid:42:8A:89:31:8E:50:67:DD:9C:8E:CF:67:E7:7E:79:C5:FD:A3:79:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/QoqJMY5QZ92cjs9n5355xf2jeSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QoqJMY5QZ92cjs9n5355xf2jeSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/8F85BED4D55F11E9A0A39B43F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fde8::/36
Signature Algorithm: sha256WithRSAEncryption
2a:45:c6:34:f6:9d:e0:89:73:17:80:34:a0:63:19:f1:05:08:
42:1b:79:20:59:1a:b0:e0:87:d2:5f:8e:2e:98:b2:68:06:cd:
b2:fd:cc:7a:5d:20:48:62:fd:6d:1c:7f:7d:76:c0:51:72:32:
77:0c:eb:dd:23:54:4c:ec:0c:74:00:ed:70:5d:89:88:d6:17:
ab:8b:c8:71:48:51:dd:88:dc:cc:12:82:ff:a4:28:bb:3d:99:
eb:d5:3b:aa:01:a5:51:20:68:23:03:dc:fe:43:72:d1:1c:fa:
82:7d:90:a7:2a:bf:d7:bf:0e:f9:1a:1e:42:a4:20:5c:3e:1a:
07:2a:e6:af:3f:f3:77:c4:06:b4:b9:32:e7:2b:3d:0b:1f:ab:
e7:c6:26:c2:7e:f3:3d:ba:74:90:63:c1:53:ff:7e:3b:62:a0:
18:61:b0:cd:ad:58:11:e9:65:ef:46:6c:ee:c0:a4:5b:d0:8b:
9f:ef:77:bd:59:0e:ac:8a:6d:ad:23:5d:83:94:f5:20:74:91:
c0:fa:04:07:e9:a4:58:3d:ae:13:78:da:ca:79:b5:2a:ee:48:
25:f5:47:1e:08:f9:80:3b:a3:57:06:15:88:18:21:7a:4c:f9:
99:c7:33:7b:d4:77:5d:42:90:a1:e3:99:1f:f3:85:46:96:7b:
84:af:88:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:17:32 2024 by rpki-client on console-ams.rpki-client.org