Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/2AA5A7D285E011E997E8B40DF8AEA228.roa
File: 2AA5A7D285E011E997E8B40DF8AEA228.roa (raw, json)
Hash identifier: VfUn7y+D/eUw5QPrvAz8bUM3+CwQQrtxhfnK7NHDRNU=
Subject key identifier: 24:D2:9A:9F:B9:BE:95:37:D9:89:AA:D1:5F:73:6E:28:42:04:8F:BB
Certificate issuer: /CN=F365C895AF/serialNumber=10C70628F7215FFA2EC3BDFE459686F45CBEE52E
Certificate serial: 04
Authority key identifier: 10:C7:06:28:F7:21:5F:FA:2E:C3:BD:FE:45:96:86:F4:5C:BE:E5:2E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/EMcGKPchX_ouw73-RZaG9Fy-5S4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/2AA5A7D285E011E997E8B40DF8AEA228.roa
Signing time: Mon 03 Jun 2019 09:15:45 +0000
ROA not before: Mon 03 Jun 2019 09:15:40 +0000
ROA not after: Sat 30 Jun 2029 09:15:40 +0000
asID: 328174
IP address blocks: 2001:43f8:1070::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/EMcGKPchX_ouw73-RZaG9Fy-5S4.crl
rsync://rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/EMcGKPchX_ouw73-RZaG9Fy-5S4.mft
rsync://rpki.afrinic.net/repository/afrinic/EMcGKPchX_ouw73-RZaG9Fy-5S4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 May 2024 00:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365C895AF/serialNumber=10C70628F7215FFA2EC3BDFE459686F45CBEE52E
Validity
Not Before: Jun 3 09:15:40 2019 GMT
Not After : Jun 30 09:15:40 2029 GMT
Subject: CN=5cf4e541-2539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:be:e8:f2:6c:8e:48:24:1e:90:9b:66:65:5d:
ec:19:69:a4:b1:cc:b6:b0:f1:15:b2:d5:c4:8e:c4:
58:64:d6:62:05:94:c1:10:77:cd:f9:92:19:e4:be:
eb:9a:92:00:97:82:a3:7e:cc:c9:32:c2:4d:4f:f0:
9b:0d:fe:37:89:f9:d8:2d:3f:1d:5b:d9:a7:5c:12:
6e:00:40:f0:1b:65:48:ea:d1:e2:ba:20:fd:4b:03:
6b:e3:77:9c:ab:3a:10:75:8d:0c:fd:55:06:84:e7:
99:45:0e:14:d4:2f:74:dd:43:52:2f:c6:6d:9d:1c:
a1:5e:78:4e:46:64:92:57:c2:eb:10:23:d4:08:35:
60:57:28:ce:e3:ea:8d:1b:c0:cc:69:3f:d3:61:2e:
9b:8c:2a:79:cc:8c:52:d7:d0:8b:68:42:65:60:be:
c1:04:c1:8e:ba:fd:a5:ae:64:bf:4c:92:a3:3d:9c:
0d:de:4e:ca:27:68:33:96:75:d1:cc:a7:b3:dc:37:
0d:94:07:a6:be:45:c7:c0:b5:3f:02:b8:1c:0e:ca:
33:ef:c2:e1:b1:f8:8e:69:1d:e1:66:98:23:92:58:
4c:38:e0:b4:8d:00:16:0d:4e:15:18:a5:47:bb:ed:
0e:b4:d2:cc:d5:35:b9:10:83:a7:a6:76:3d:1f:d6:
df:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D2:9A:9F:B9:BE:95:37:D9:89:AA:D1:5F:73:6E:28:42:04:8F:BB
X509v3 Authority Key Identifier:
keyid:10:C7:06:28:F7:21:5F:FA:2E:C3:BD:FE:45:96:86:F4:5C:BE:E5:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/EMcGKPchX_ouw73-RZaG9Fy-5S4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EMcGKPchX_ouw73-RZaG9Fy-5S4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/2AA5A7D285E011E997E8B40DF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:1070::/48
Signature Algorithm: sha256WithRSAEncryption
7f:a6:24:b0:38:aa:44:20:6c:f6:56:1b:fa:a2:3b:d9:a7:5f:
2a:b8:0e:5d:1e:5e:c9:8f:f1:72:57:bc:8d:2c:e8:94:a0:f2:
9a:37:90:b8:5b:29:15:7d:1b:19:ec:35:91:10:45:39:55:e7:
23:93:b1:a0:92:3f:a9:14:0e:b2:5b:de:02:fb:53:c6:a0:df:
8f:b7:90:9f:e9:ff:cb:88:20:e6:eb:76:62:f4:da:ea:ec:41:
f4:8c:8c:41:e4:50:46:61:dd:90:12:b7:b8:ad:9f:4e:c7:f1:
cd:e8:92:c0:d7:49:c6:37:da:31:9b:16:62:b9:1a:d9:1a:6f:
10:94:ae:9c:b0:39:ce:8e:22:de:4a:33:36:ac:a3:4f:57:ae:
d6:4f:22:8a:ec:9d:65:6a:89:38:4b:f4:e9:9f:71:8a:44:2c:
42:38:bd:42:72:83:6d:f1:c2:3c:00:b6:ea:75:65:72:aa:33:
0c:cb:dc:48:ae:b5:6e:b3:e3:31:33:b6:8b:a8:68:40:64:b5:
00:77:7e:0e:eb:3f:23:aa:f2:59:f5:96:91:00:f3:80:a2:50:
85:70:ec:be:e3:56:bd:71:7d:c7:0f:df:97:12:cf:1e:fa:44:
25:62:ec:43:39:ea:f8:40:ea:4b:e9:f7:bf:89:96:9c:9e:20:
c6:64:d3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 01:49:49 2024 by rpki-client on console-fra.rpki-client.org