Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/69718BD0C23211EBADC2A715F8AEA228.roa
File: 69718BD0C23211EBADC2A715F8AEA228.roa (raw, json)
Hash identifier: TnY/7DA+BgejOFr04BM5hHh0ycu1/cZe42UI729de/E=
Subject key identifier: C1:C2:B4:C2:6A:94:A7:E2:2E:54:D9:3F:E7:9E:67:83:29:AE:BA:E3
Certificate issuer: /CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
Certificate serial: 01E7
Authority key identifier: AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/69718BD0C23211EBADC2A715F8AEA228.roa
Signing time: Mon 31 May 2021 17:05:34 +0000
ROA not before: Mon 31 May 2021 17:05:28 +0000
ROA not after: Thu 31 May 2035 17:05:28 +0000
asID: 327926
IP address blocks: 2c0f:e8e0:4030::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Apr 2024 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 487 (0x1e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
Validity
Not Before: May 31 17:05:28 2021 GMT
Not After : May 31 17:05:28 2035 GMT
Subject: CN=60b5175e-2826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a2:be:af:90:93:2f:5d:9e:27:61:66:5b:43:
e0:e7:ea:30:ce:23:89:0c:f9:79:e7:36:6f:69:37:
eb:1b:6f:85:02:2f:57:d1:0f:0e:d7:30:b8:21:c2:
25:90:05:81:e7:8d:cf:1f:49:d2:e0:b9:4b:4e:34:
b5:8c:a7:30:80:c8:da:5d:fa:b0:ee:05:f9:15:c1:
c2:09:bd:be:d3:26:af:dc:f9:17:2b:43:83:4d:a3:
07:a6:6b:3b:e2:48:a3:6a:56:a4:d7:5d:56:4a:d4:
e1:bf:a4:c3:4e:8f:06:8b:7c:5b:1d:3c:be:5c:ba:
90:f4:3c:89:f9:5d:9f:ca:28:c2:b5:c1:0f:d5:5e:
8b:1f:f6:90:a9:4c:71:75:db:89:70:63:fb:79:c2:
69:95:14:f0:1a:63:27:8a:ec:5d:6b:72:54:31:a8:
c6:b3:d4:51:4d:7b:79:cb:ce:ff:37:c5:d8:b9:31:
80:15:e4:8c:60:e4:0e:8f:10:71:84:5a:fa:2b:bc:
3a:11:af:e7:b3:ba:72:ec:72:f5:15:fc:e9:e1:19:
69:52:ee:3f:f1:45:62:7c:69:db:96:b2:05:af:e7:
88:72:3f:5d:8d:98:80:26:ad:9f:82:cc:38:87:34:
d3:c2:e4:8a:ec:26:4c:e6:e2:2e:54:f6:b8:7a:df:
46:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C2:B4:C2:6A:94:A7:E2:2E:54:D9:3F:E7:9E:67:83:29:AE:BA:E3
X509v3 Authority Key Identifier:
keyid:AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/69718BD0C23211EBADC2A715F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:e8e0:4030::/44
Signature Algorithm: sha256WithRSAEncryption
68:26:4f:38:c9:8e:47:6b:e8:55:70:db:df:c0:7f:03:54:bc:
1c:05:e3:df:04:32:92:35:d1:e7:48:db:43:0d:55:69:32:a9:
82:f3:5f:c0:08:74:de:4e:c4:38:c5:61:35:ee:91:f6:ba:c6:
47:e0:67:47:15:60:cf:dc:66:a8:5f:86:15:9e:56:80:be:9c:
e9:39:fd:36:bf:f3:79:ee:25:c0:ca:cd:95:10:d6:06:c7:23:
fc:3b:62:ac:af:ae:6c:46:82:a8:71:2c:d7:4f:93:2f:9c:ef:
bb:69:87:fc:af:1f:00:eb:ed:bb:ab:15:e3:36:89:c4:36:f5:
2e:1a:76:0d:ac:a9:eb:3d:ca:13:66:75:68:db:52:10:56:03:
1e:7c:38:46:48:4a:ef:ae:44:74:e9:3e:e5:25:25:fe:af:51:
bd:0a:02:b1:b4:58:ab:75:56:7b:fe:ad:e1:47:35:72:05:54:
79:e9:15:b1:15:0f:33:68:f2:bf:98:b3:bb:fa:0e:ee:83:20:
a8:92:ac:37:04:0b:3e:72:bb:6b:1f:46:fe:92:6d:9f:9b:a8:
00:b0:5b:ab:3f:3f:fe:42:2f:ab:52:19:d0:5f:4a:7a:f5:d0:
08:25:0e:1c:95:c9:fb:59:c5:60:21:cb:9a:c9:da:73:57:55:
0c:4c:27:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:01:12 2024 by rpki-client on console-ams.rpki-client.org