Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/E3F26E4E7BBF11E9B36D184EF8AEA228.roa
File: E3F26E4E7BBF11E9B36D184EF8AEA228.roa (raw, json)
Hash identifier: JAXf1fbTr7wAte4prVrVbOaUIZfcTEfkF1YWmTv5vl8=
Subject key identifier: F7:6F:35:3E:1A:82:1B:97:55:99:70:75:9D:7F:3C:52:94:9D:10:9B
Certificate issuer: /CN=F369671EAF/serialNumber=23BF045F8B8E9BE838E79DD312CC95ECB8CC610B
Certificate serial: 08
Authority key identifier: 23:BF:04:5F:8B:8E:9B:E8:38:E7:9D:D3:12:CC:95:EC:B8:CC:61:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/I78EX4uOm-g4553TEsyV7LjMYQs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/E3F26E4E7BBF11E9B36D184EF8AEA228.roa
Signing time: Tue 21 May 2019 11:59:31 +0000
ROA not before: Tue 21 May 2019 11:59:26 +0000
ROA not after: Tue 01 May 2029 11:59:26 +0000
asID: 37172
IP address blocks: 2c0f:ee28::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.crl
rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.mft
rsync://rpki.afrinic.net/repository/afrinic/I78EX4uOm-g4553TEsyV7LjMYQs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369671EAF/serialNumber=23BF045F8B8E9BE838E79DD312CC95ECB8CC610B
Validity
Not Before: May 21 11:59:26 2019 GMT
Not After : May 1 11:59:26 2029 GMT
Subject: CN=5ce3e823-f69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e4:a6:1b:0f:97:1e:48:bc:4f:17:6b:62:cc:
cc:23:7f:1c:e8:70:f3:00:00:34:3a:1f:6d:c8:2f:
f9:21:fe:05:6f:f2:c4:77:80:a7:e9:80:2c:e5:45:
4a:7f:bc:57:e3:68:54:06:f3:16:a6:6a:9a:23:4a:
3e:8b:e1:e3:63:bd:7f:ca:b2:90:af:d2:ec:15:e1:
05:a1:2f:b7:35:5b:91:05:a7:c4:79:b5:54:9b:65:
89:f4:c0:4b:a5:e3:34:4d:6d:0b:13:88:01:ab:37:
ae:61:af:8e:46:29:f8:6a:12:1f:c8:6d:c1:7c:ea:
59:ff:45:9a:11:47:98:f7:07:46:22:5e:47:0e:17:
28:2f:1c:52:06:51:8c:83:70:93:0c:03:11:52:5e:
ec:33:25:c5:9c:ad:8e:a4:43:44:f8:76:7a:a8:d4:
e0:ac:6d:d4:da:eb:75:2a:76:d5:d3:fc:27:fd:1d:
0a:2d:bb:11:f8:91:b6:ba:bf:42:fb:50:bc:4b:24:
5c:ba:ef:ac:79:91:81:2e:af:4f:7e:b1:5e:57:c0:
df:74:2d:1d:ce:04:5a:e1:0f:07:1b:b1:ab:05:53:
f0:9e:a2:43:6f:1e:2d:ff:e9:8e:55:b8:33:33:8f:
a7:1d:89:ef:f5:94:17:af:21:19:c7:94:09:19:12:
02:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6F:35:3E:1A:82:1B:97:55:99:70:75:9D:7F:3C:52:94:9D:10:9B
X509v3 Authority Key Identifier:
keyid:23:BF:04:5F:8B:8E:9B:E8:38:E7:9D:D3:12:CC:95:EC:B8:CC:61:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/I78EX4uOm-g4553TEsyV7LjMYQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/E3F26E4E7BBF11E9B36D184EF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv6:
2c0f:ee28::/32
Signature Algorithm: sha256WithRSAEncryption
b5:05:a6:d0:1a:0c:38:72:71:cf:ad:3d:cc:c4:89:9d:49:3c:
7b:68:43:73:76:3f:17:56:fb:96:cb:82:3d:ff:e9:29:ca:9d:
11:b9:b7:bc:a7:e6:c5:9f:64:30:4a:56:75:89:00:b6:34:5e:
23:f6:ad:ce:bb:ff:29:4c:c2:b5:06:1e:31:04:4d:20:b0:c7:
2f:d8:6a:59:81:cf:e1:e5:14:0b:43:c6:7f:09:b5:6f:ac:52:
f8:52:40:12:f2:c5:21:40:14:08:de:b1:2c:06:53:9d:23:6d:
0e:53:f8:fd:b0:d2:da:55:d7:a7:d2:7f:1c:01:ff:8c:60:8f:
91:fb:f8:49:11:c8:ce:c9:67:cf:54:1c:5c:3e:74:4f:9c:b6:
e3:2a:ef:91:f6:7a:ac:8f:17:57:a8:cf:0a:49:4d:87:21:88:
03:54:69:57:25:af:12:a1:44:13:4c:8a:b5:f2:a6:3c:af:28:
f2:29:b0:68:99:17:fa:49:33:a0:b1:26:55:fd:0f:c5:61:ad:
f0:ef:52:f3:c0:2e:54:63:de:44:3b:2a:8a:66:af:03:44:cf:
33:b3:45:ed:7f:cc:82:e9:38:18:ee:3a:ed:9b:68:4d:23:9c:
ad:50:59:a4:fa:3b:aa:fb:66:a9:ee:f1:a2:71:f6:aa:8e:2f:
ef:bb:02:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:47:14 2024 by rpki-client on console-fra.rpki-client.org