Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/21240358E06B11E9B9893673F8AEA228.roa
File: 21240358E06B11E9B9893673F8AEA228.roa (raw, json)
Hash identifier: GqxgOcBMKSqpP/Z+yCrjBk8lOk0k76R9qAdcc3a3UNY=
Subject key identifier: BD:90:3B:9A:C1:3D:AD:5E:1A:C8:A8:E5:4B:18:93:74:6F:26:0C:5E
Certificate issuer: /CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Certificate serial: A4
Authority key identifier: 7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/21240358E06B11E9B9893673F8AEA228.roa
Signing time: Thu 26 Sep 2019 14:37:13 +0000
ROA not before: Thu 26 Sep 2019 14:37:09 +0000
ROA not after: Thu 26 Sep 2024 14:37:09 +0000
asID: 327804
IP address blocks: 2c0f:f050:7000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.mft
rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Validity
Not Before: Sep 26 14:37:09 2019 GMT
Not After : Sep 26 14:37:09 2024 GMT
Subject: CN=5d8ccd19-2471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:10:40:f7:25:79:43:e3:4b:12:a6:06:2a:85:
37:20:bd:b8:1f:6c:5e:08:2a:9a:4b:cc:df:fb:a9:
61:50:6f:a0:c4:f5:c7:0f:2b:b1:05:b2:b2:ea:fd:
e7:5d:b1:8a:d1:60:0c:3f:f1:28:03:d3:65:22:5a:
c2:ae:50:51:e6:4d:f8:4b:56:f1:10:46:c6:c0:59:
9a:96:48:8f:15:3a:ff:62:b0:b3:85:b4:d5:bd:e6:
79:53:a3:a6:fc:d4:2e:b2:bf:9e:93:17:6a:f6:53:
54:68:ef:8c:36:71:2d:ed:c4:0e:dd:0a:09:4e:6a:
70:ef:a6:91:79:ae:28:c1:a5:64:0b:0e:df:43:5c:
ac:bf:d0:9b:da:ef:3e:f2:fe:39:67:61:c2:6b:11:
f0:96:6c:13:25:fa:a3:c8:51:92:e7:6f:bf:be:a7:
32:79:37:bb:42:17:ce:91:7e:87:77:07:ed:24:2c:
89:c9:1f:29:b4:92:46:1e:17:28:8d:e9:03:5f:5c:
e0:a0:94:dc:72:82:0e:cf:e9:f4:d4:f3:c2:77:51:
78:78:d2:d2:f2:cf:c0:07:cf:15:39:64:dd:16:e6:
d3:ff:9d:d4:9c:a4:ce:84:a8:2d:67:bb:40:19:0e:
30:eb:9d:7e:d2:df:d8:7c:a9:1e:53:55:f0:db:c3:
ac:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:90:3B:9A:C1:3D:AD:5E:1A:C8:A8:E5:4B:18:93:74:6F:26:0C:5E
X509v3 Authority Key Identifier:
keyid:7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/21240358E06B11E9B9893673F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f050:7000::/36
Signature Algorithm: sha256WithRSAEncryption
26:2a:8a:da:87:ac:a3:ca:4a:0d:f6:17:41:bc:92:27:ad:3f:
2a:19:7c:b1:96:c3:5f:8a:01:b0:e7:2e:03:4a:7c:f1:2b:d8:
99:fd:c7:5b:f7:0c:32:16:df:bd:9b:94:47:79:da:e2:74:e5:
91:4f:e4:c1:d8:ca:fa:71:17:18:dc:44:e6:1a:e9:87:ec:a1:
cc:48:81:ee:f5:49:32:58:b0:ff:ad:38:9a:5b:e5:58:9c:a9:
4d:47:c5:45:64:77:ba:01:50:c2:04:a6:f1:b5:73:c8:b5:0a:
2a:8f:7c:70:12:dd:15:33:d4:20:ba:41:97:06:00:54:8d:8f:
6c:fa:30:95:3c:33:70:bb:0b:2d:3b:25:ad:64:bf:0e:ae:04:
2b:c4:a7:bb:92:98:e5:67:00:a3:8c:3f:2e:fd:00:1c:3e:5b:
6d:5f:22:51:0e:ed:b0:10:2b:91:af:d6:aa:8b:34:5e:29:12:
78:d5:15:6c:c8:f6:16:c5:63:33:fd:19:23:94:1d:25:13:15:
f1:28:91:bc:eb:93:03:53:3c:4e:12:3f:77:bb:2e:d1:62:c2:
24:df:8e:ab:44:61:64:d4:4d:54:60:60:25:be:9c:0d:7c:a9:
77:00:bc:54:73:12:63:8f:48:76:bd:3c:39:9f:f8:9e:87:21:
8d:9b:26:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:31:50 2024 by rpki-client on console-fra.rpki-client.org