Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/D5B46FA6C23211EBB5593A16F8AEA228.roa
File: D5B46FA6C23211EBB5593A16F8AEA228.roa (raw, json)
Hash identifier: oX59+2BALwGM+ztTKboJ5zjbW8Hls8vuUFk164gb+sE=
Subject key identifier: 39:25:C8:F2:ED:31:01:8A:0F:9E:E8:11:C1:8E:C9:02:AA:B0:5C:45
Certificate issuer: /CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
Certificate serial: 01EF
Authority key identifier: AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/D5B46FA6C23211EBB5593A16F8AEA228.roa
Signing time: Mon 31 May 2021 17:08:36 +0000
ROA not before: Mon 31 May 2021 17:08:30 +0000
ROA not after: Thu 31 May 2035 17:08:30 +0000
asID: 327926
IP address blocks: 2c0f:e8e0:7000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Apr 2024 01:10:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 495 (0x1ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
Validity
Not Before: May 31 17:08:30 2021 GMT
Not After : May 31 17:08:30 2035 GMT
Subject: CN=60b51813-4a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d1:3d:fe:8d:ff:5d:78:20:b3:4d:81:3f:8d:
dd:8d:f2:42:e1:0a:bd:3b:7b:f6:9f:71:d4:a4:83:
f7:32:ca:e5:71:71:e8:fe:3a:95:2f:89:80:0c:af:
32:c4:b3:ee:fe:f1:01:86:8a:9a:af:5b:63:fc:85:
2f:74:7d:8c:09:bd:ce:63:ac:71:bb:ea:42:b9:ad:
fe:a1:17:b6:6a:e3:c4:33:03:8f:c1:68:15:fd:b1:
e5:b9:82:14:38:82:ae:85:5e:85:d5:09:c4:eb:64:
ea:c6:43:ad:a4:60:ab:10:93:26:51:69:81:a4:f9:
d1:71:f3:e9:f6:fd:be:cd:86:68:1f:2a:c2:1e:70:
93:a9:e5:71:66:9a:45:0b:14:c1:f5:1f:64:a5:87:
07:99:1a:4a:4d:e7:17:a6:f1:ac:d7:68:8e:41:97:
3b:9d:f1:63:80:79:cd:8e:76:6e:cb:94:a8:b9:15:
5a:3a:26:9c:00:f0:b7:db:16:2d:48:38:96:49:b1:
16:c5:f2:07:21:0c:0b:5c:c5:9d:ac:fe:49:5e:84:
94:36:a3:1a:78:4d:81:ff:29:bb:0b:94:8a:6c:65:
65:cc:c1:f8:ba:c4:e1:c4:5c:50:08:d7:78:07:ba:
96:45:07:4d:bd:ea:d8:93:80:74:f4:e8:33:a7:88:
39:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:25:C8:F2:ED:31:01:8A:0F:9E:E8:11:C1:8E:C9:02:AA:B0:5C:45
X509v3 Authority Key Identifier:
keyid:AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/D5B46FA6C23211EBB5593A16F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:e8e0:7000::/44
Signature Algorithm: sha256WithRSAEncryption
8a:81:62:d9:75:31:3f:25:c5:2a:6c:e6:26:88:d0:7c:30:02:
67:a4:ee:1a:7a:a5:90:1a:ea:b7:e9:b3:a6:ac:f6:ca:5b:66:
0c:b1:12:71:9c:77:6a:d0:af:15:1c:b9:5b:17:71:7c:7e:e4:
3c:57:e9:41:56:d2:62:66:2c:04:64:9f:0c:1d:35:d5:57:84:
02:92:36:7e:08:c5:1f:b2:e6:71:13:fc:70:57:6d:8b:24:0e:
12:6b:89:09:3b:e4:c1:dc:43:b4:70:b9:6d:6f:c6:8a:ed:dc:
cb:55:8e:5d:f6:a7:10:42:b6:ea:0d:8f:67:49:06:77:16:20:
c6:0d:a4:82:6f:8c:6a:2a:00:7a:ff:63:83:97:05:4d:61:08:
c2:64:3c:39:13:50:90:75:f0:80:12:7a:36:8f:e1:91:81:28:
b6:4d:29:0e:6c:4f:6e:33:a8:04:e8:36:90:ab:a8:85:f5:56:
f8:0b:67:34:0b:96:cf:4c:7c:d5:d2:d6:9b:db:9a:5b:5d:01:
e6:d2:ba:cf:bc:f5:bf:d8:ad:0b:66:93:15:49:13:06:88:d3:
96:25:58:ad:0f:67:da:e0:1c:e7:2f:9b:0e:6a:fa:6e:fc:08:
66:63:02:90:3a:93:a9:8c:31:01:ed:57:5b:ff:d1:69:a1:69:
1b:76:9d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:32:11 2024 by rpki-client on console-fra.rpki-client.org