Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/1F7D1E38B61A11EFB5F70451762E951A.roa
File: 1F7D1E38B61A11EFB5F70451762E951A.roa (raw, json)
Hash identifier: cwVuZGDK3xBb/e83Wur2PgDyGwXAoIczJfwo4naPc3k=
Subject key identifier: 15:3C:EC:C8:20:51:6E:6D:24:21:43:52:4B:CB:28:E4:1D:8C:6F:B8
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 071D
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/1F7D1E38B61A11EFB5F70451762E951A.roa
Signing time: Mon 09 Dec 2024 10:41:18 +0000
ROA not before: Mon 09 Dec 2024 10:41:15 +0000
ROA not after: Sat 30 Jul 2033 10:41:15 +0000
asID: 37119
IP address blocks: 2c0f:f888:a010::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1821 (0x71d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF
Validity
Not Before: Dec 9 10:41:15 2024 GMT
Not After : Jul 30 10:41:15 2033 GMT
Subject: CN=6756c94e-8c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5e:26:6e:20:00:c4:0d:e3:e8:fd:79:39:4e:
60:cc:65:29:9d:23:3c:34:49:3d:a0:1d:c3:6e:59:
f5:47:8c:dc:f5:83:7e:95:7c:5b:3a:b8:2e:4e:c9:
4a:d6:74:ac:82:1e:44:fc:ba:69:58:2e:c5:54:c1:
04:43:04:d0:94:06:97:5e:24:7c:c5:1d:12:22:8b:
d6:82:3d:3b:c7:be:87:90:43:1a:7e:64:ee:fc:a0:
4e:7d:46:ba:af:58:e2:bc:85:bc:55:9e:c6:91:63:
f3:27:51:5a:3c:6b:fe:25:88:f9:40:d4:45:a5:e2:
d3:83:c0:ec:57:86:84:cb:c6:26:cd:c2:aa:e1:f7:
6a:b5:98:87:b5:db:4f:f3:da:81:f4:88:fa:be:25:
c5:c4:30:b4:ea:c6:7f:62:85:d7:41:6f:ab:1f:54:
45:0d:b3:68:30:e2:3a:2b:78:07:d8:a2:b5:8f:4f:
0e:5b:c8:6e:95:82:34:63:51:f8:e2:90:96:1e:45:
94:36:9e:2b:45:c8:cd:39:9a:27:43:73:53:10:a8:
fa:c1:19:71:37:c0:22:59:ce:07:68:69:5c:9c:3b:
f9:91:91:22:04:ff:a6:e1:12:ef:93:21:47:c9:89:
b5:8e:cf:51:d1:16:f5:a2:83:51:be:9c:0e:e6:c3:
06:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3C:EC:C8:20:51:6E:6D:24:21:43:52:4B:CB:28:E4:1D:8C:6F:B8
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/1F7D1E38B61A11EFB5F70451762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:a010::/44
Signature Algorithm: sha256WithRSAEncryption
49:22:dd:91:91:7c:c8:7d:44:7b:39:34:70:2b:72:7f:52:ba:
30:42:45:a2:4b:a6:40:97:89:94:b7:d1:8d:a2:a5:b7:34:4f:
08:ac:2a:05:e0:55:7e:c5:70:b5:44:04:67:ee:33:f5:5f:3b:
15:3c:83:df:e5:95:b1:15:ea:ad:97:d3:23:51:06:88:8e:01:
c8:20:36:f5:84:66:ac:c9:e1:0c:1d:d9:bc:c7:90:f3:91:16:
82:ff:93:25:3d:f2:53:e2:9c:5b:49:65:47:54:f5:43:b2:7a:
76:db:1d:d7:bb:73:e4:aa:56:b9:8b:c2:63:c4:e1:5c:e3:7d:
4b:3a:b1:20:1c:4f:18:cf:d8:5c:9f:eb:b9:f4:50:82:6d:74:
01:ad:6d:a1:71:a3:cf:b3:64:a5:e1:6a:fd:0a:6f:6b:1e:d2:
f3:13:f4:bd:85:3d:68:4c:b8:b5:e6:23:62:d6:b0:40:e4:72:
78:0d:76:29:b6:f8:94:cf:d5:12:b9:76:93:e7:4b:7c:e0:7d:
f4:d9:12:36:c0:7e:02:6c:02:dd:d0:6c:39:b1:db:aa:1e:a4:
87:42:62:ad:58:6a:5d:8e:c6:4d:a3:41:4a:ca:59:69:6e:8e:
f6:b5:fb:8f:32:4a:c7:f7:c4:21:01:65:ce:fe:22:87:ce:39:
5f:8c:52:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:21:01 2025 by rpki-client