Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/84EB4824B6A811EA9608C52FF8AEA228.roa
File: 84EB4824B6A811EA9608C52FF8AEA228.roa (raw, json)
Hash identifier: sbZkg63w3bwQ28mfw2+1rFKNpRezwNvC/sHtAA39z5o=
Subject key identifier: A3:F5:6C:D4:45:85:F0:16:1B:AC:34:2E:3A:5D:EE:4E:22:11:D9:B0
Certificate issuer: /CN=F36A2303AF/serialNumber=5EB88DF4BF9089D7049A1FBE8005E621EAAE862B
Certificate serial: A3
Authority key identifier: 5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/84EB4824B6A811EA9608C52FF8AEA228.roa
Signing time: Thu 25 Jun 2020 05:55:49 +0000
ROA not before: Thu 25 Jun 2020 05:55:46 +0000
ROA not after: Sat 01 Jun 2030 05:55:46 +0000
asID: 328631
IP address blocks: 2c0f:e8a8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft
rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Apr 2024 00:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A2303AF/serialNumber=5EB88DF4BF9089D7049A1FBE8005E621EAAE862B
Validity
Not Before: Jun 25 05:55:46 2020 GMT
Not After : Jun 1 05:55:46 2030 GMT
Subject: CN=5ef43c65-828b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:43:54:b4:d8:00:3b:56:92:22:80:5d:19:
28:e9:05:b6:4b:df:8e:d0:bd:44:6d:85:20:57:af:
aa:e4:5b:9f:5c:4c:aa:30:8b:5d:ba:3a:68:12:04:
c1:a5:e5:9d:82:24:dc:3b:da:73:1c:b6:b9:25:7d:
b9:83:bb:c8:b6:12:28:db:36:c2:6e:75:67:67:61:
8d:90:5b:e7:80:40:5c:f4:34:1f:79:a0:c8:0c:f7:
85:9e:ae:9b:5e:e6:ce:77:28:e4:d8:b9:5c:26:dc:
9d:fc:01:6d:bc:3d:38:c6:35:9a:10:a2:e4:85:97:
c8:22:35:d0:2a:cb:d3:bb:a3:97:61:d3:18:91:a7:
11:68:aa:15:fd:ab:c1:1c:29:3a:76:fe:bc:e8:54:
fb:46:70:7e:f5:1c:8a:36:38:4c:15:1b:01:9e:b5:
0c:b8:4a:9d:69:c2:ef:74:4c:8c:73:3b:d3:8c:c4:
5b:c8:40:7a:0f:94:06:e0:f0:78:3b:6d:44:10:2a:
7e:ee:05:6c:46:0d:2a:5a:f3:75:c3:9a:ae:79:eb:
78:7c:8e:31:52:c8:bb:16:70:9a:fd:40:54:19:06:
e6:d2:14:6f:da:c9:66:7f:f7:dd:cf:ec:13:10:1e:
b8:b2:2c:9e:bc:dd:5f:13:df:28:52:15:25:ee:81:
24:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F5:6C:D4:45:85:F0:16:1B:AC:34:2E:3A:5D:EE:4E:22:11:D9:B0
X509v3 Authority Key Identifier:
keyid:5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/84EB4824B6A811EA9608C52FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:e8a8::/32
Signature Algorithm: sha256WithRSAEncryption
36:42:75:54:9f:92:d3:31:47:43:12:06:90:5e:3a:a7:3c:5a:
4a:8b:8a:5b:31:c5:aa:83:ee:0c:a1:f8:bc:11:7b:e4:f8:a7:
d5:c6:15:26:a8:d2:99:ce:ac:90:8e:1c:55:36:e5:b9:0e:cc:
3e:cf:fa:51:a5:5f:cd:d2:66:be:6d:07:af:ae:71:71:82:23:
ed:45:a0:d8:62:4b:b3:d8:4c:89:9f:14:42:86:60:1d:b9:b5:
ee:01:25:d6:23:eb:fb:d2:c8:ac:b5:76:d0:2e:e3:97:1b:e5:
92:e5:60:ea:e4:65:2b:00:86:72:5b:9a:79:59:37:0e:f9:02:
82:9c:98:5f:c8:55:78:91:43:e5:08:11:14:f4:bf:5f:47:05:
7b:d9:eb:de:11:f6:85:e3:24:5f:98:f8:fb:b3:67:c0:64:6c:
4d:39:c6:a8:fa:3a:c3:8c:c6:ed:21:58:54:76:28:54:c0:5e:
15:82:25:05:c3:f3:4c:d8:23:2d:56:e4:0a:5c:28:28:82:48:
21:1d:aa:c6:62:c7:e0:6f:6a:3f:46:fc:c1:37:a2:f7:c6:e4:
13:4e:39:b8:d7:a7:97:f9:af:f1:b1:f5:6e:70:5f:a9:ad:dc:
4a:4e:21:bd:91:41:16:ee:8f:c0:d1:39:4c:4c:08:f6:59:1e:
43:95:79:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:48:53 2024 by rpki-client on console-fra.rpki-client.org