Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/78D79E18B61A11EF84B9ED52762E951A.roa
File: 78D79E18B61A11EF84B9ED52762E951A.roa (raw, json)
Hash identifier: KbKQ0nqVjc5vAAoosIl4h3yn6QeeNJR/UWbCVOflIUc=
Subject key identifier: 2A:08:C4:C2:82:33:12:C9:4D:F3:47:55:CC:0B:A9:5B:7D:64:43:E7
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 071F
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/78D79E18B61A11EF84B9ED52762E951A.roa
Signing time: Mon 09 Dec 2024 10:43:48 +0000
ROA not before: Mon 09 Dec 2024 10:43:44 +0000
ROA not after: Sat 30 Jul 2033 10:43:44 +0000
asID: 37119
IP address blocks: 2c0f:f888:a020::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1823 (0x71f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF
Validity
Not Before: Dec 9 10:43:44 2024 GMT
Not After : Jul 30 10:43:44 2033 GMT
Subject: CN=6756c9e4-30c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:74:87:76:0b:8b:6e:c1:83:2d:ce:5f:3c:
2d:8a:d6:01:52:c1:0e:c7:70:15:0a:fc:b9:12:9e:
b7:27:24:aa:9c:e3:d3:95:ab:15:4b:7a:d8:d5:ec:
46:c7:cd:d7:a4:96:50:81:51:1b:f7:0d:dd:88:ed:
af:3d:ee:08:d7:24:8e:16:01:0f:33:3d:82:49:08:
b8:f8:0a:e1:67:33:35:2f:fd:23:8f:3a:95:48:07:
01:58:83:61:ae:08:25:19:30:4a:ea:d9:c0:5b:cb:
1f:ed:37:18:a8:5c:44:16:ee:9b:d9:6a:d0:de:1d:
25:cb:73:da:b4:1c:ca:69:86:5f:5d:38:cb:34:6e:
85:68:7d:02:bc:a1:c7:1b:c0:3c:ca:4f:89:da:df:
81:59:a6:e3:7b:cf:e0:b5:63:a3:5c:5c:f1:3c:e4:
f5:88:8c:7b:14:0d:00:10:ec:6d:2f:ce:40:87:1d:
81:ed:c5:7d:7a:95:1e:03:90:bb:9e:b6:53:38:93:
fe:08:e0:1d:0f:75:00:1f:50:4b:4b:b9:14:47:64:
6f:29:f3:ef:f7:e5:0e:26:76:b9:16:e3:07:27:73:
64:64:fb:08:08:b7:a0:38:2b:20:cd:f8:23:a8:67:
17:0c:f8:20:e0:e7:c3:bb:af:83:ba:8e:eb:c7:54:
a1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:08:C4:C2:82:33:12:C9:4D:F3:47:55:CC:0B:A9:5B:7D:64:43:E7
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/78D79E18B61A11EF84B9ED52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:a020::/44
Signature Algorithm: sha256WithRSAEncryption
a6:d1:9f:cb:fc:c9:da:bd:20:65:21:4f:06:6e:a0:f5:da:80:
28:49:06:a5:4f:ed:28:3f:12:95:52:2d:e9:66:59:20:bb:d0:
06:78:66:16:03:8f:49:87:39:65:1f:f6:d8:23:13:1a:8c:12:
29:92:3b:4e:99:07:6c:f5:16:bd:ea:c4:48:37:ab:77:79:78:
33:89:b0:96:38:70:f4:93:4f:b5:8c:77:63:b5:53:22:ca:cc:
09:01:36:53:ee:55:f8:af:17:3f:7a:3e:57:51:f4:df:9a:d8:
8a:6e:d5:9d:2b:01:46:9c:ed:5c:6d:d3:09:2d:23:2d:35:c6:
ea:44:32:73:39:38:3a:75:0f:13:fb:72:1f:d5:0d:9a:8c:d9:
4c:1a:30:06:ed:a8:10:41:ec:69:85:ff:30:56:6f:f6:8c:37:
66:ce:39:90:6c:31:db:1f:06:9e:28:00:01:2e:a1:4d:78:ad:
f4:4a:79:1c:eb:c8:2b:49:2c:27:9d:c2:3d:e4:1d:13:f5:4b:
36:2e:23:08:f7:52:3e:cd:e7:fe:a1:97:38:c6:58:11:43:73:
45:d0:5e:5c:48:58:b7:c7:b8:39:25:f8:d2:5e:76:62:13:8f:
3e:c8:a7:1e:6f:37:3d:b2:ed:38:3a:21:04:84:52:03:a4:1c:
b7:52:10:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:45:27 2025 by rpki-client