Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/EB54553EC23111EBA9E0ED14F8AEA228.roa
File: EB54553EC23111EBA9E0ED14F8AEA228.roa (raw, json)
Hash identifier: d6xcKTp32mia+OgefI0TfyXuPVcpWg3DEScglv+HMrY=
Subject key identifier: AE:36:D2:33:60:7C:4F:93:E1:0C:5F:25:0A:B9:14:68:CE:B5:ED:35
Certificate issuer: /CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
Certificate serial: 01E3
Authority key identifier: AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/EB54553EC23111EBA9E0ED14F8AEA228.roa
Signing time: Mon 31 May 2021 17:02:02 +0000
ROA not before: Mon 31 May 2021 17:01:57 +0000
ROA not after: Thu 31 May 2035 17:01:57 +0000
asID: 327926
IP address blocks: 2c0f:e8e0:110::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 483 (0x1e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
Validity
Not Before: May 31 17:01:57 2021 GMT
Not After : May 31 17:01:57 2035 GMT
Subject: CN=60b5168a-8c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:33:f9:2a:ce:67:d2:be:11:8b:1c:a9:06:d6:
64:82:79:ca:1b:e9:09:b2:e4:c7:45:53:1c:d5:be:
ff:ca:73:39:eb:34:6e:ef:2f:7d:8d:16:73:6e:1f:
9f:93:81:40:84:88:fe:c2:4c:e3:ed:32:ff:1f:dc:
7c:2e:0e:dc:a6:c1:f1:e9:4d:d1:fd:73:f1:44:fd:
04:d8:03:ae:ef:6d:06:24:99:ea:27:09:c8:c3:ae:
ff:e9:65:ce:93:32:9e:b6:0f:66:a8:c9:ba:7c:f0:
36:a0:1a:c3:10:9a:0e:63:9d:51:aa:96:3f:17:49:
dd:d2:65:d9:8f:dd:b7:d4:1c:25:e6:33:43:23:63:
e6:c9:5d:8e:80:f7:4a:df:36:b8:ce:59:c4:c4:dc:
82:3e:ce:8d:06:69:95:ff:93:f6:2e:22:dc:40:80:
25:f1:4c:c8:d1:86:12:77:a0:87:59:89:32:09:98:
47:cd:62:c0:3b:19:12:5e:19:03:01:fa:ee:ea:fe:
dc:0d:0e:ba:29:da:c5:ce:e8:7f:b3:9c:cd:52:5a:
ed:eb:58:f9:0f:91:e5:20:26:a0:2c:12:74:40:7b:
79:bf:87:80:58:08:65:eb:ff:13:67:95:96:69:90:
83:72:4e:b7:52:8f:02:7b:7d:64:56:6f:97:93:09:
30:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:36:D2:33:60:7C:4F:93:E1:0C:5F:25:0A:B9:14:68:CE:B5:ED:35
X509v3 Authority Key Identifier:
keyid:AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/EB54553EC23111EBA9E0ED14F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:e8e0:110::/44
Signature Algorithm: sha256WithRSAEncryption
0b:99:f4:2b:1d:2d:fc:d8:8b:35:2a:f7:c2:75:a7:ef:a5:f7:
3e:50:8d:4e:d6:0f:97:56:c0:88:7f:77:61:64:94:93:be:f5:
3c:6a:bc:9a:a7:62:41:e5:db:83:ba:f3:58:0e:6e:cb:5c:7f:
e8:25:e2:bc:c0:a6:51:40:1e:ef:55:9b:a3:c0:cf:91:e6:d1:
e3:a2:f9:80:bf:ea:7b:5b:d2:23:ad:39:ec:b0:f3:2e:8e:c2:
50:d5:42:fd:8e:4a:c3:48:69:de:f5:b3:48:c5:2a:59:74:b0:
e7:0d:76:6c:e1:b9:1b:48:bc:02:7c:9a:46:10:45:cb:3e:f1:
25:c0:55:a1:7d:85:5c:6b:d2:81:ba:48:f7:13:01:9d:63:18:
c7:32:70:98:5d:db:45:7a:a4:41:60:32:55:43:38:63:8f:89:
ca:58:81:20:cb:95:11:83:34:91:17:38:d5:ac:ee:09:c1:f3:
96:82:9b:6b:a6:52:c6:bc:75:ba:52:23:96:7d:85:59:8d:21:
4e:1d:48:b6:3b:e9:13:88:66:93:43:b8:02:f9:39:06:6f:cc:
9e:39:f9:1f:8a:cb:85:1d:d7:8a:43:9e:69:24:f4:e8:40:11:
d8:65:86:76:db:79:c8:ed:6e:cd:24:04:31:a6:92:6a:e0:7e:
6d:74:39:86
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkE4MERBRjExMC8GA1UEBRMoQUMyRTUyRUU5MkJCQzIwNUEyMzBGRjc3QTE5MDQx
RERENTE0RDhGMDAeFw0yMTA1MzExNzAxNTdaFw0zNTA1MzExNzAxNTdaMBgxFjAU
BgNVBAMTDTYwYjUxNjhhLThjM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwM/kqzmfSvhGLHKkG1mSCecob6Qmy5MdFUxzVvv/KcznrNG7vL32NFnNu
H5+TgUCEiP7CTOPtMv8f3HwuDtymwfHpTdH9c/FE/QTYA67vbQYkmeonCcjDrv/p
Zc6TMp62D2aoybp88DagGsMQmg5jnVGqlj8XSd3SZdmP3bfUHCXmM0MjY+bJXY6A
90rfNrjOWcTE3II+zo0GaZX/k/YuItxAgCXxTMjRhhJ3oIdZiTIJmEfNYsA7GRJe
GQMB+u7q/twNDrop2sXO6H+znM1SWu3rWPkPkeUgJqAsEnRAe3m/h4BYCGXr/xNn
lZZpkINyTrdSjwJ7fWRWb5eTCTA9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrjbS
M2B8T5PhDF8lCrkUaM617TUwHwYDVR0jBBgwFoAUrC5S7pK7wgWiMP93oZBB3dUU
2PAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJBODBEL0M3MDVEODcyNUEyNDExRUFCOEU5REMwOUY4QUVBMjI4L3JDNVM3
cEs3d2dXaU1QOTNvWkJCM2RVVTJQQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JDNVM3cEs3d2dXaU1QOTNvWkJCM2RVVTJQQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkJBODBEL0M3MDVEODcyNUEyNDExRUFCOEU5REMwOUY4
QUVBMjI4L0VCNTQ1NTNFQzIzMTExRUJBOUUwRUQxNEY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQsD+jgARAwDQYJKoZIhvcN
AQELBQADggEBAAuZ9CsdLfzYizUq98J1p++l9z5QjU7WD5dWwIh/d2FklJO+9Txq
vJqnYkHl24O681gObstcf+gl4rzAplFAHu9Vm6PAz5Hm0eOi+YC/6ntb0iOtOeyw
8y6OwlDVQv2OSsNIad71s0jFKll0sOcNdmzhuRtIvAJ8mkYQRcs+8SXAVaF9hVxr
0oG6SPcTAZ1jGMcycJhd20V6pEFgMlVDOGOPicpYgSDLlRGDNJEXONWs7gnB85aC
m2umUsa8dbpSI5Z9hVmNIU4dSLY76ROIZpNDuAL5OQZvzJ45+R+Ky4Ud14pDnmkk
9OhAEdhlhnbbecjtbs0kBDGmkmrgfm10OYY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:15 2024 by rpki-client on console-fra.rpki-client.org