Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/7BB8EFC0DD4711EFAA77C65D762E951A.roa
File: 7BB8EFC0DD4711EFAA77C65D762E951A.roa (raw, json)
Hash identifier: EJ7Wyz4phl849MLi/Fw/4qElzMy4ukmaa1ZPzol5Uas=
Subject key identifier: 97:C6:56:1C:8F:D4:02:8C:6D:D1:CB:57:F1:21:63:76:18:01:19:4C
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0790
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/7BB8EFC0DD4711EFAA77C65D762E951A.roa
Signing time: Tue 28 Jan 2025 07:14:16 +0000
ROA not before: Tue 28 Jan 2025 07:14:12 +0000
ROA not after: Sat 30 Jul 2033 07:14:12 +0000
asID: 37119
IP address blocks: 2c0f:f888:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1936 (0x790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF
Validity
Not Before: Jan 28 07:14:12 2025 GMT
Not After : Jul 30 07:14:12 2033 GMT
Subject: CN=679883c8-4fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:48:8c:7e:38:72:d3:17:4a:b9:b3:6a:c3:ce:
d0:c4:51:94:d2:88:b7:16:fd:f4:92:98:b6:b4:d1:
f5:37:9f:2f:59:5e:1e:77:b3:ed:bd:1b:fc:37:d5:
a7:a7:5b:ff:96:65:1f:95:f7:23:70:4a:86:61:5e:
9b:a3:3f:42:ee:04:9f:95:49:aa:a3:95:8c:fa:20:
ba:f4:24:c8:31:a1:f4:a8:86:c5:2e:40:44:33:8a:
df:b2:60:83:fc:bc:5e:10:5e:57:a9:37:2f:35:e9:
83:44:e4:e1:98:fe:af:17:1a:17:f3:7f:96:ef:21:
01:d9:a3:85:81:d3:c7:cc:ad:8e:2f:b1:bb:40:75:
41:14:62:1e:ae:7c:c2:63:19:14:cb:70:6d:b2:d4:
4f:aa:17:57:f1:e9:06:b2:07:c5:b1:f1:72:58:9c:
a3:40:44:ce:20:64:07:eb:e7:15:5f:82:64:44:3e:
a8:86:3f:4d:b3:42:ca:21:4a:4f:91:e4:fa:4a:26:
fb:f7:ea:c4:72:79:d8:48:cf:a0:b9:e3:c9:05:04:
8a:c2:e5:ec:dd:73:ae:79:0e:84:d2:b7:33:65:5e:
9a:a0:cc:61:27:fc:3a:bc:5e:7c:6c:1b:ca:1a:c8:
00:91:a1:a6:a7:83:2d:bb:d4:fc:4c:a6:86:77:0e:
e2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C6:56:1C:8F:D4:02:8C:6D:D1:CB:57:F1:21:63:76:18:01:19:4C
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/7BB8EFC0DD4711EFAA77C65D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:8000::/36
Signature Algorithm: sha256WithRSAEncryption
aa:36:d8:66:6e:02:89:5c:62:81:75:64:49:1c:30:cd:05:af:
4a:20:20:0f:13:d3:eb:a0:0a:9d:c9:a8:19:ce:47:25:9d:40:
b3:98:7b:4f:48:68:28:a4:93:7c:eb:6d:f9:0e:21:b5:eb:4c:
58:2f:b9:e6:f5:8c:38:06:a6:8b:90:e4:cd:ee:d5:b1:57:b4:
48:87:95:11:bc:c5:76:4a:92:37:ab:d3:28:5c:47:8f:80:c5:
df:88:f7:83:cb:ad:12:c8:86:85:50:fe:ee:a4:e9:89:75:fe:
21:d0:86:17:e5:fa:4b:90:ce:fe:ca:93:5f:97:ce:11:aa:dd:
4a:80:89:c1:ad:13:46:9a:67:79:77:74:91:18:a3:3d:3d:2b:
cd:4e:b7:f8:4f:b3:7b:ef:4d:58:63:2d:86:d4:4b:ac:95:71:
40:24:d7:a3:ac:04:83:69:7f:89:26:69:60:9f:d8:9e:93:a6:
f6:16:d1:ad:9e:d3:6f:7b:9d:4a:3b:2a:82:79:fc:15:d4:c2:
3f:96:47:11:63:fc:d6:41:b6:4e:65:7c:c3:62:ca:e6:80:7b:
0f:39:f5:15:68:f5:a7:ef:97:82:10:e8:3c:b6:93:7f:6f:64:
61:f8:bc:b2:e3:90:8e:f9:b4:dd:93:68:32:32:b1:8c:14:50:
1b:01:91:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:49 2025 by rpki-client