Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/118B5046C23611EB8894801AF8AEA228.roa
File: 118B5046C23611EB8894801AF8AEA228.roa (raw, json)
Hash identifier: EdTXMixOen8QKO9g5Tn4JwTOrXpknviYLC1BSplg1UI=
Subject key identifier: 2E:51:CF:B8:E4:ED:48:9D:F5:FE:1D:E4:C6:A4:1A:B9:54:16:0D:0E
Certificate issuer: /CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
Certificate serial: 01F1
Authority key identifier: AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/118B5046C23611EB8894801AF8AEA228.roa
Signing time: Mon 31 May 2021 17:31:45 +0000
ROA not before: Mon 31 May 2021 17:31:38 +0000
ROA not after: Thu 31 May 2035 17:31:38 +0000
asID: 327926
IP address blocks: 2c0f:e8e0:f000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 00:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 497 (0x1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
Validity
Not Before: May 31 17:31:38 2021 GMT
Not After : May 31 17:31:38 2035 GMT
Subject: CN=60b51d81-232e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:26:9a:56:2b:a4:a2:4e:a4:e9:e6:ab:dd:5d:
fa:15:dc:dd:d8:47:34:3f:68:a0:17:b0:37:e5:bc:
42:48:e4:ec:c9:1d:66:ee:82:b8:d7:4f:3b:40:ab:
76:ea:14:b0:ea:01:3f:e6:7f:2c:67:89:ba:56:68:
18:09:88:6a:9a:44:49:f0:64:9d:c4:10:ee:6e:76:
c1:f8:69:64:a0:54:69:38:39:34:c9:4a:ba:15:63:
c2:4e:40:d6:58:ab:db:96:37:b3:a6:f6:23:25:b2:
eb:cb:18:11:c3:d4:87:2c:e0:56:a6:0b:5a:ec:f8:
99:c0:6f:ae:9e:a1:1d:a6:69:a5:31:94:67:00:74:
8b:82:ff:86:5e:43:a6:5b:c7:59:78:c2:6d:e7:ae:
d9:69:f8:a0:59:a1:65:f7:ec:05:ca:35:ef:81:dc:
d6:d9:65:1a:28:81:e2:49:32:46:52:31:43:9d:c8:
1d:63:b0:c7:48:bc:c4:31:6d:cf:8e:b0:91:67:fd:
e9:f6:58:17:77:cc:f8:5a:a6:2a:2b:34:af:05:10:
ec:6b:ac:8e:73:97:24:9b:b3:53:31:40:e5:97:b2:
65:fc:e1:1c:ad:c3:ab:81:1f:a1:1d:59:a8:22:36:
9a:2b:26:73:cc:6d:1f:9f:a4:4e:0c:60:68:8c:31:
a6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:51:CF:B8:E4:ED:48:9D:F5:FE:1D:E4:C6:A4:1A:B9:54:16:0D:0E
X509v3 Authority Key Identifier:
keyid:AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/118B5046C23611EB8894801AF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:e8e0:f000::/36
Signature Algorithm: sha256WithRSAEncryption
7a:d6:f1:48:aa:b4:cf:91:b6:67:af:d2:6e:ce:b0:15:99:5c:
e8:f3:44:4f:79:c0:26:8e:7b:cf:36:91:ce:37:e4:da:22:1c:
5d:bd:4e:d7:bd:2b:44:93:31:ff:1e:70:55:98:4e:9a:d1:c6:
27:89:2c:5a:b7:f7:f9:77:b9:09:b7:b0:e8:01:81:b7:01:ed:
8e:bf:76:7b:00:d7:a9:c1:29:c8:fd:c6:87:6b:cf:38:79:ac:
95:74:8a:07:2e:25:d1:9c:03:4d:44:cd:fc:2d:22:c7:76:5a:
7b:ce:25:fc:dc:2e:4b:ee:16:33:e9:97:89:30:14:28:53:52:
81:0d:0e:ad:7b:46:64:aa:f2:42:ba:5c:68:9a:26:0f:a0:81:
d4:5d:49:87:9e:3c:f1:86:51:e9:43:09:ae:27:3f:00:26:4c:
46:4e:25:9b:b7:47:33:77:5c:7d:40:55:5e:e9:c6:b3:11:a0:
d1:85:b5:ba:67:71:bc:03:20:8f:c9:aa:d7:ba:f7:67:4b:0f:
b2:fc:ad:4e:1b:03:a2:93:a5:4f:c4:c0:4c:f3:2e:7e:74:fe:
6d:08:a7:a4:72:c2:ea:ae:ff:a1:52:d5:06:91:c6:57:cd:ad:
33:0c:9e:8d:73:14:3f:c0:42:c8:4f:51:95:28:94:56:03:22:
e9:fd:d8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 01:50:09 2024 by rpki-client on console-fra.rpki-client.org