Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/6C505444B61C11EF9EF9C95D762E951A.roa
File: 6C505444B61C11EF9EF9C95D762E951A.roa (raw, json)
Hash identifier: HiJR03JjjbmJrxzNKuwTsX+81RvJXVFZjA3rXhOOKns=
Subject key identifier: 1D:7F:89:11:A4:A4:F8:1A:F6:AA:55:4E:8A:6E:45:44:63:81:AC:A1
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 072B
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/6C505444B61C11EF9EF9C95D762E951A.roa
Signing time: Mon 09 Dec 2024 10:57:46 +0000
ROA not before: Mon 09 Dec 2024 10:57:38 +0000
ROA not after: Sat 30 Jul 2033 10:57:38 +0000
asID: 37119
IP address blocks: 2c0f:f888:a100::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1835 (0x72b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF
Validity
Not Before: Dec 9 10:57:38 2024 GMT
Not After : Jul 30 10:57:38 2033 GMT
Subject: CN=6756cd2a-a63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:90:ee:41:3a:eb:2d:98:12:cd:b7:5e:0e:c1:
2d:8d:e4:0f:cb:1c:c4:73:4c:c7:82:cc:51:80:61:
b7:b1:35:38:80:64:59:09:0f:03:23:d5:b0:1f:0c:
6b:81:a0:8e:db:07:d2:13:58:7b:74:f5:c2:2e:9d:
81:1e:4b:44:d5:91:92:bf:f3:6d:ff:c8:cc:8b:1b:
ba:d6:c4:b7:58:0d:c5:28:4f:04:4f:b8:07:50:da:
46:75:1b:a1:da:d1:8b:57:b6:7a:3c:d2:9f:cb:9e:
a0:cb:b2:28:f4:5e:b2:77:85:34:f7:9e:3f:5b:32:
97:b0:e4:73:e2:85:83:27:10:7b:b7:09:e4:b0:f5:
89:61:1f:f7:7c:a9:23:51:81:df:76:bf:d1:45:e3:
94:4e:07:97:7d:65:9f:7e:44:7b:13:87:15:81:f5:
83:c0:7e:8b:d5:8c:32:98:4a:8e:84:81:b8:8f:9e:
53:96:78:6e:2b:4c:26:d9:cd:95:e9:82:f5:0a:95:
7d:c5:7b:9c:c3:21:2b:cd:80:6e:d6:4e:d3:0b:f1:
90:c6:98:c6:10:22:33:be:d6:a4:9f:57:8e:82:69:
60:94:60:9c:2a:a0:00:65:a0:78:4b:5a:3d:2a:ab:
37:bf:d3:b6:bf:4c:34:5b:3f:6e:33:4e:28:95:4c:
2e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7F:89:11:A4:A4:F8:1A:F6:AA:55:4E:8A:6E:45:44:63:81:AC:A1
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/6C505444B61C11EF9EF9C95D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:a100::/44
Signature Algorithm: sha256WithRSAEncryption
b8:ac:32:52:09:7c:c5:44:80:64:e2:8e:5c:82:bb:a7:d5:26:
2f:8b:df:c1:d4:08:32:a3:81:cf:49:c8:87:22:e5:f8:35:c3:
05:e2:5f:98:d9:19:f4:97:03:c5:52:eb:54:79:40:0a:ff:f5:
cd:a8:19:1c:5b:a1:4d:46:a6:86:ec:0c:55:b7:32:b2:5b:ae:
c7:f3:ac:63:0c:2f:77:17:9c:c3:b8:43:74:eb:c6:24:c5:7d:
0f:89:a0:8d:35:17:d3:9a:5e:29:00:26:09:9a:aa:98:f0:67:
39:16:f8:45:14:5b:4d:4d:60:b6:87:35:a2:f8:5f:c4:a1:14:
16:7f:d0:15:67:00:95:12:62:7c:23:67:0b:98:da:24:e5:0b:
66:b1:92:90:18:d5:c8:b2:21:ad:14:70:41:0e:d1:45:3c:cd:
ac:93:a5:29:88:dd:1d:21:4d:0a:6e:24:2e:da:34:65:5d:9a:
2c:b6:eb:20:58:7a:21:28:f0:d8:25:3e:28:32:48:4a:a1:3b:
a9:ae:fd:f0:38:13:6f:23:98:6f:24:f6:5d:28:90:50:26:49:
44:e0:52:40:bb:d1:f4:40:db:f0:4f:61:38:3e:56:15:86:bf:
05:39:c9:f9:76:7a:11:79:a5:b8:61:da:a8:73:e6:6c:bd:21:
dc:2b:17:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:45:02 2025 by rpki-client