Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/1FFC4050D4D211EB8428B634F8AEA228.roa
File: 1FFC4050D4D211EB8428B634F8AEA228.roa (raw, json)
Hash identifier: YxepH7+hLot/dgNBooYvnog3uH8tz5wlH0qu4u8Qo6E=
Subject key identifier: BF:06:92:88:D2:9D:53:74:3D:55:A2:F2:7B:E2:C8:10:D3:8A:BF:17
Certificate issuer: /CN=F36AA6EDAF/serialNumber=27031675A295AFE3935D9F62261BD4868D144C4E
Certificate serial: 26
Authority key identifier: 27:03:16:75:A2:95:AF:E3:93:5D:9F:62:26:1B:D4:86:8D:14:4C:4E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JwMWdaKVr-OTXZ9iJhvUho0UTE4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/1FFC4050D4D211EB8428B634F8AEA228.roa
Signing time: Thu 24 Jun 2021 09:54:11 +0000
ROA not before: Thu 24 Jun 2021 09:54:06 +0000
ROA not after: Wed 30 Apr 2031 09:54:06 +0000
asID: 327750
IP address blocks: 2c0f:e970::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/JwMWdaKVr-OTXZ9iJhvUho0UTE4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/JwMWdaKVr-OTXZ9iJhvUho0UTE4.mft
rsync://rpki.afrinic.net/repository/afrinic/JwMWdaKVr-OTXZ9iJhvUho0UTE4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 01:46:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AA6EDAF
Validity
Not Before: Jun 24 09:54:06 2021 GMT
Not After : Apr 30 09:54:06 2031 GMT
Subject: CN=60d45643-ecd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ee:49:8f:52:9c:c4:58:2a:66:91:a4:f3:3f:
73:db:be:54:87:43:ee:7a:d5:eb:67:82:2a:c6:17:
44:8f:43:2c:3d:38:90:7d:36:bd:89:4e:8c:78:69:
50:99:7c:44:8a:e8:84:f5:4d:06:8f:a4:0f:6b:22:
6a:8e:63:4f:eb:b9:63:09:98:85:30:3b:9c:20:4a:
be:d4:2f:e0:50:92:9e:30:07:35:d5:ff:9d:7f:d9:
25:ed:5f:61:1c:d7:0b:bf:0d:25:35:6e:06:80:69:
bd:49:e1:5e:ea:91:12:d2:8f:e3:57:c0:a8:64:ef:
28:78:21:36:47:89:c1:65:5d:7a:1e:40:37:c9:4a:
77:90:e6:60:75:2b:3d:42:75:d4:4c:fc:a0:70:95:
2a:e7:08:c1:c6:82:87:bc:ab:a2:99:81:d4:7c:93:
2b:cd:00:ff:ca:fd:34:93:43:e1:10:0b:04:18:79:
d3:40:6d:a0:87:17:ab:57:71:74:f6:e3:70:ae:10:
74:de:8e:26:df:8a:13:40:2f:75:97:c3:6b:cc:c7:
11:fe:2f:c5:38:5a:b2:70:40:79:35:8d:77:0f:67:
39:a5:d0:34:96:ef:49:08:b5:a6:5d:d1:3e:53:a4:
d0:1b:26:58:3d:77:43:d2:85:fa:b5:22:69:1b:ac:
d9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:06:92:88:D2:9D:53:74:3D:55:A2:F2:7B:E2:C8:10:D3:8A:BF:17
X509v3 Authority Key Identifier:
keyid:27:03:16:75:A2:95:AF:E3:93:5D:9F:62:26:1B:D4:86:8D:14:4C:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/JwMWdaKVr-OTXZ9iJhvUho0UTE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JwMWdaKVr-OTXZ9iJhvUho0UTE4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/1FFC4050D4D211EB8428B634F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:e970::/32
Signature Algorithm: sha256WithRSAEncryption
50:02:93:34:ba:5d:4d:73:8a:0a:9c:e9:35:26:55:fa:d5:b4:
bd:ec:19:79:5e:fd:98:57:ba:4d:7b:dd:fb:54:c8:9b:04:21:
96:2b:0d:c9:a9:60:5d:93:b2:07:d5:c1:19:2b:52:b4:4d:f9:
12:28:2c:2f:c4:a6:9b:f7:b6:00:23:ff:ca:64:2e:be:3c:8a:
5f:d9:8b:3a:a6:7d:5c:9b:4e:77:4d:a8:c4:6d:c4:a9:60:f5:
c4:29:b9:9e:90:fa:15:07:bb:17:29:03:5b:55:04:c7:2a:40:
b9:2f:12:fd:cf:ba:59:e8:e0:d2:92:9c:7a:4d:d4:29:0f:fc:
16:61:0b:3d:d6:a3:cf:f7:95:ae:97:d8:9b:04:ce:de:6d:25:
77:f7:9d:0c:46:cf:7d:44:da:d3:16:6a:f2:37:c1:a4:f3:b6:
cf:80:8d:08:e9:d0:63:7a:5a:fa:5a:87:70:67:02:3c:92:74:
90:57:55:98:eb:7a:16:6b:28:07:2e:2a:41:e6:84:4f:44:8f:
fd:e4:ae:b2:bc:5f:a8:2a:ba:b6:91:69:02:14:85:c1:b0:ec:
1b:30:4f:c0:26:7d:c8:b5:73:39:fa:14:ba:4e:81:5f:70:be:
65:05:3b:d7:c2:e8:8d:fd:01:72:46:39:ab:58:bb:75:b8:7d:
61:f1:40:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:38:24 2025 by rpki-client