Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/55A65834DD6211EF89629D91762E951A.roa
File: 55A65834DD6211EF89629D91762E951A.roa (raw, json)
Hash identifier: IYRIsMNlSJ3TLTCaAqwi1vZyUKUA1d075/7swg1tqV4=
Subject key identifier: A7:D7:EE:3B:46:80:B8:18:9D:0D:94:76:48:4C:AF:EA:F5:5D:39:A6
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 079A
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/55A65834DD6211EF89629D91762E951A.roa
Signing time: Tue 28 Jan 2025 10:26:28 +0000
ROA not before: Tue 28 Jan 2025 10:26:25 +0000
ROA not after: Sat 30 Jul 2033 10:26:25 +0000
asID: 37119
IP address blocks: 2c0f:f888:d000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1946 (0x79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF
Validity
Not Before: Jan 28 10:26:25 2025 GMT
Not After : Jul 30 10:26:25 2033 GMT
Subject: CN=6798b0d4-800b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cc:7c:06:d7:da:85:4b:ce:06:59:20:56:35:
ec:62:ee:56:96:b1:f1:1a:70:59:08:de:fe:6b:d3:
59:ee:ef:07:5d:f2:22:97:e2:77:e7:a0:92:dc:99:
81:85:db:37:a4:34:38:4f:fc:65:97:d5:f3:c9:34:
2b:87:ed:3f:c7:20:ca:c1:a6:93:f8:0c:d1:50:b0:
f5:90:7b:f2:e1:79:8f:94:27:cb:45:74:98:aa:64:
e2:58:48:23:2f:18:cf:38:a0:72:5b:66:1e:3b:a9:
6b:e0:47:65:ad:2d:15:ec:30:dd:63:cf:7a:38:2f:
55:8c:fb:d8:1a:e5:90:c2:40:e1:e2:ca:65:fe:05:
3c:24:55:11:49:d1:f5:16:38:71:3e:a1:2f:66:cc:
ef:77:b1:d1:53:ce:50:5a:50:03:b5:0a:ed:1e:16:
1c:6f:89:3c:50:af:ec:d5:8d:19:8e:89:1e:62:0b:
cb:1a:51:8e:d5:c0:fc:82:a0:9a:90:a0:58:66:cc:
4f:11:17:bf:35:5c:87:f5:71:78:92:59:72:67:a7:
9e:ee:b3:f7:0b:f7:57:1d:b5:82:e0:e2:c5:f8:ae:
3d:c6:8a:f3:ea:2b:db:8d:62:34:f3:98:78:9b:ce:
be:6f:47:ae:9e:ed:12:d2:61:ea:25:14:d1:de:3b:
fd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D7:EE:3B:46:80:B8:18:9D:0D:94:76:48:4C:AF:EA:F5:5D:39:A6
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/55A65834DD6211EF89629D91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:d000::/36
Signature Algorithm: sha256WithRSAEncryption
52:67:10:41:a5:87:06:c4:a0:e6:ca:3c:a9:49:a6:83:69:a2:
3a:2c:11:30:d1:f5:84:04:ad:42:63:f2:29:87:b9:fe:14:ed:
26:2b:65:e4:13:a7:23:25:50:0e:e8:eb:9f:62:e2:82:5a:64:
11:2d:1b:0f:17:f6:c8:79:3c:73:22:af:47:eb:dd:5d:b5:cd:
1b:28:f4:55:d9:cd:f6:bc:ce:4e:64:7a:63:f5:c5:5d:f5:d2:
48:98:b1:4f:ad:a6:da:7f:01:f1:75:b0:10:fd:d6:9a:04:ab:
7b:74:fd:42:1c:45:33:23:cb:3a:f4:89:7f:50:c3:e2:a1:81:
d6:15:6c:46:39:61:4f:ce:35:62:40:55:3b:1a:8e:8b:b3:8e:
7f:89:7d:fd:15:97:78:90:f8:97:72:0a:fe:24:63:aa:88:c4:
b9:28:be:31:57:97:66:cd:c3:80:4d:c1:d3:23:fc:d8:7f:a1:
e8:d3:79:06:88:00:da:29:c5:5a:55:36:ee:61:d4:61:ba:04:
d6:1b:f3:6f:cd:a2:5a:76:49:a5:f2:0b:51:d5:1d:bb:65:41:
48:f7:a9:3f:81:85:54:22:09:b1:8b:1f:e5:33:b0:61:2e:10:
c7:b9:c6:14:65:bf:ea:5e:aa:4b:cf:f6:bb:9c:2d:e0:66:28:
03:62:9c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:54 2025 by rpki-client