Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/84E0EB40E05C11E99E32A268F8AEA228.roa
File: 84E0EB40E05C11E99E32A268F8AEA228.roa (raw, json)
Hash identifier: RUQTJhj7SMgBLke862dmiTCFWGlAaogQKrqq9D3SRBQ=
Subject key identifier: F0:6B:44:05:2A:21:65:70:27:D9:95:BD:88:11:69:1A:BB:D8:5A:7D
Certificate issuer: /CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Certificate serial: 98
Authority key identifier: 7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/84E0EB40E05C11E99E32A268F8AEA228.roa
Signing time: Thu 26 Sep 2019 12:52:38 +0000
ROA not before: Thu 26 Sep 2019 12:52:33 +0000
ROA not after: Thu 26 Sep 2024 12:52:33 +0000
asID: 327804
IP address blocks: 2c0f:f050:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.mft
rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 May 2024 00:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Validity
Not Before: Sep 26 12:52:33 2019 GMT
Not After : Sep 26 12:52:33 2024 GMT
Subject: CN=5d8cb496-3286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:57:cd:09:84:a8:5b:df:e7:47:e7:c9:2a:98:
a1:2e:27:3b:10:f1:27:f1:5e:e9:15:d1:80:53:fa:
d8:f2:05:8c:c2:82:8a:e4:b1:f6:a0:4a:51:fe:7b:
00:4a:15:33:ef:b5:66:8f:0d:73:89:e6:22:14:34:
14:9b:3e:3f:40:9b:e2:fb:c1:36:bf:89:23:7b:74:
94:b1:94:55:61:6a:ea:c0:05:ad:a5:88:4d:71:e6:
8a:c5:f5:ea:ce:5c:ed:2e:67:02:58:37:9d:c5:f5:
7f:a2:58:03:ef:28:2b:0e:94:1c:d7:28:bf:37:89:
62:59:c6:9b:a0:30:d8:14:dd:28:8c:d9:b1:f8:78:
fc:ad:6a:a0:91:46:f7:87:2c:22:3f:ad:fe:3b:63:
e5:54:6d:32:38:27:2c:fc:75:fc:81:d4:07:c5:51:
f8:e2:a6:52:ff:27:81:5e:c4:14:f7:3b:6d:16:a0:
54:5e:e6:6f:b1:e6:24:34:26:00:48:e5:b6:a5:e7:
cc:b1:f0:33:bf:63:e3:f8:3c:e8:6e:2b:6e:fe:c9:
15:dc:da:a1:6a:bc:07:c5:c7:63:b9:a6:48:89:1e:
38:c8:3e:2d:7d:f5:df:73:9f:10:1e:19:08:d5:3a:
cd:ac:36:e6:3a:87:50:55:9a:65:24:ae:32:27:cb:
86:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6B:44:05:2A:21:65:70:27:D9:95:BD:88:11:69:1A:BB:D8:5A:7D
X509v3 Authority Key Identifier:
keyid:7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/84E0EB40E05C11E99E32A268F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f050:1000::/36
Signature Algorithm: sha256WithRSAEncryption
43:b6:b0:b3:af:90:aa:71:40:4b:dd:4e:3c:ca:7b:fd:f8:68:
a8:01:b7:35:7a:da:43:2c:d2:9b:49:ed:76:06:a8:73:0e:4d:
e3:b4:ec:f0:2d:fc:a7:25:b8:1a:1c:60:09:22:d2:99:1f:33:
d9:48:e4:0c:21:af:17:2e:0f:1a:e0:8a:cd:07:90:4d:bb:d9:
33:36:cd:7b:a1:f2:2a:f8:22:ea:33:86:aa:73:1b:b1:b8:d3:
b5:43:d6:58:b7:cd:ac:d2:d0:9b:30:74:58:0d:93:4a:8c:2b:
a0:0c:56:bf:53:fc:47:29:d8:de:73:4b:c7:5f:e1:53:b1:11:
99:38:70:0a:cd:73:c8:74:7b:a4:dc:c9:ab:9c:42:75:fb:39:
e0:84:0e:1a:c6:0d:9b:88:1b:a1:a6:d1:33:12:77:d8:32:31:
a8:ba:97:73:03:48:2c:22:5b:81:df:26:0d:1b:1e:4c:02:38:
17:46:2c:54:15:6d:53:c5:be:35:ce:92:42:ea:d5:dd:4f:fd:
4b:8a:aa:0a:9b:1a:ce:50:ac:c3:b4:22:ae:f1:b2:79:c6:1d:
50:2e:0d:5c:1c:5b:ef:de:c6:1d:0e:be:9f:e3:a5:e5:de:50:
6c:70:2a:91:9c:b4:f8:0e:cd:53:86:9f:b7:73:66:4e:3a:cd:
5f:ff:39:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 01:46:15 2024 by rpki-client on console-fra.rpki-client.org