Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/B7327FCAC23011EB8EB93013F8AEA228.roa
File: B7327FCAC23011EB8EB93013F8AEA228.roa (raw, json)
Hash identifier: FzBJ+LD8lsMOLZHdwigkJL90+es1pormijWMN0h6XiE=
Subject key identifier: FA:B8:DE:72:FA:22:AC:97:98:2F:A8:5C:58:21:95:2C:E0:7D:F5:A2
Certificate issuer: /CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
Certificate serial: 01DF
Authority key identifier: AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/B7327FCAC23011EB8EB93013F8AEA228.roa
Signing time: Mon 31 May 2021 16:53:25 +0000
ROA not before: Mon 31 May 2021 16:53:21 +0000
ROA not after: Sat 31 May 2031 16:53:21 +0000
asID: 327926
IP address blocks: 2c0f:e8e0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Apr 2024 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479 (0x1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
Validity
Not Before: May 31 16:53:21 2021 GMT
Not After : May 31 16:53:21 2031 GMT
Subject: CN=60b51485-3e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:12:58:9f:75:9c:ab:7b:21:e8:49:40:1e:14:
88:63:8c:bb:d2:f9:1f:fe:48:f6:e6:19:5d:8e:9c:
ad:51:ec:9e:00:46:dc:25:12:34:2e:10:fd:70:be:
c3:78:e1:fa:b1:ff:c0:58:e0:42:b4:64:7b:12:6c:
5f:b9:a7:be:56:82:4d:3b:b3:45:05:26:ca:d3:f0:
0b:9c:69:89:49:0c:92:73:10:a8:20:1a:82:53:d4:
7a:d8:61:d5:2c:e3:9d:42:9a:3e:b8:7c:e3:e3:ae:
df:50:c1:2c:63:25:35:ea:f5:1f:24:8a:3d:33:c8:
7b:b6:ad:5f:2f:e3:54:aa:18:9b:46:4b:a6:53:47:
6e:af:57:bf:0e:6d:36:bb:92:3f:00:da:01:5c:54:
50:6b:38:58:42:63:f8:7d:e3:58:bc:aa:d6:5b:6e:
eb:5b:62:3e:1b:d1:82:a2:db:85:43:34:bb:30:ce:
31:3d:ef:28:27:62:fe:b3:33:f7:b5:9a:ce:c0:06:
02:ba:2a:3f:d8:cd:96:0e:07:e5:d5:2d:15:af:77:
6e:c4:89:55:1a:ef:85:d4:43:00:cd:f1:11:5b:5b:
93:e4:55:35:4a:18:e6:67:78:5c:54:0d:6b:d4:33:
cf:1a:b4:bb:65:be:f2:e7:8b:4f:bb:8a:d1:d4:dc:
90:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B8:DE:72:FA:22:AC:97:98:2F:A8:5C:58:21:95:2C:E0:7D:F5:A2
X509v3 Authority Key Identifier:
keyid:AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/B7327FCAC23011EB8EB93013F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:e8e0::/44
Signature Algorithm: sha256WithRSAEncryption
67:5f:b0:4e:4d:47:18:ef:92:3f:52:57:50:ec:df:bd:a0:a8:
d9:8c:4e:11:75:73:aa:69:e3:df:b3:29:39:c9:4e:7c:bb:69:
d4:2a:42:4e:20:91:5a:6e:2d:79:e4:be:45:a4:3c:0a:3a:c4:
bf:72:dc:74:25:42:6f:58:a2:fd:f3:0c:96:3c:a8:6f:24:e8:
c1:ca:64:ff:61:01:ec:ae:a2:60:6c:3b:89:77:28:78:d5:13:
0a:0a:0f:0d:4c:e8:96:ef:b8:e7:af:16:15:4d:d9:d2:3a:dc:
68:3e:e9:93:d7:1f:74:37:2a:9f:67:d6:30:00:41:9b:6c:1b:
a4:91:f5:fc:c3:2f:59:87:b2:9a:b5:8b:5d:7b:a0:23:99:77:
7d:9f:fe:ff:fd:bb:25:a9:42:bc:cd:77:d7:c8:4f:5c:15:e5:
98:50:f6:a1:47:6e:08:31:14:cb:00:4c:8a:cd:f2:4c:55:d0:
b6:32:69:bc:ad:52:ab:9e:9b:fe:52:07:80:a7:0c:c2:79:a6:
80:91:12:1b:65:b5:fd:34:8c:78:fa:64:93:ff:4d:e4:45:d8:
ac:de:a6:24:8e:0f:6c:34:ff:dc:fd:4e:91:cd:8e:80:40:86:
ce:97:40:ec:51:ee:b3:ab:4d:d1:a7:1e:10:73:f0:39:2c:9e:
a8:37:31:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:05:22 2024 by rpki-client on console-fra.rpki-client.org