Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/A798AD58DD5411EFA5CFF1B5762E951A.roa
File: A798AD58DD5411EFA5CFF1B5762E951A.roa (raw, json)
Hash identifier: 2xq1rAVLhHjDAnvHdCvABzHOtDZZTq70+U3zEHsc2kg=
Subject key identifier: 80:F4:3E:14:F7:22:1E:85:06:50:63:6E:73:E9:3A:49:73:CD:71:E2
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0792
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/A798AD58DD5411EFA5CFF1B5762E951A.roa
Signing time: Tue 28 Jan 2025 08:48:33 +0000
ROA not before: Tue 28 Jan 2025 08:48:29 +0000
ROA not after: Sat 30 Jul 2033 08:48:29 +0000
asID: 37119
IP address blocks: 2c0f:f888:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1938 (0x792)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF
Validity
Not Before: Jan 28 08:48:29 2025 GMT
Not After : Jul 30 08:48:29 2033 GMT
Subject: CN=679899e1-bcd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:86:f3:60:99:82:ac:30:27:65:52:90:cc:2b:
6f:1e:02:b5:a7:fb:2b:e1:09:3f:5c:06:4b:a1:03:
de:bc:34:dc:82:22:e0:73:62:79:22:25:22:f3:0a:
ec:bb:d7:ec:29:93:0a:22:36:4d:e0:ee:a2:60:6d:
0a:68:23:7f:dc:bc:61:b6:ad:2a:44:0f:b7:d4:97:
73:d6:19:97:bb:b8:c5:b8:b8:e9:c0:2e:3a:cc:4b:
7a:af:72:6e:6c:5c:61:8f:f4:73:47:7d:db:08:46:
c0:6d:06:2b:40:22:89:77:c5:29:15:41:dd:76:cd:
58:17:7e:d5:f1:38:f0:45:c5:b3:de:38:d7:06:37:
a7:3d:4c:d8:91:47:d8:99:d6:6d:de:7a:bc:e2:bb:
3e:88:a4:1b:c8:a1:bb:96:b7:04:6e:e2:8d:6e:39:
fb:63:4e:d2:5d:72:f8:26:63:ae:3b:d5:3c:05:02:
97:a8:90:c7:c6:3b:c5:cb:d5:a1:36:b7:24:7b:b6:
37:5f:ee:b8:16:06:e7:7d:db:db:05:ca:84:2d:54:
12:c5:d0:de:f4:3e:59:48:af:a9:8e:a1:77:ad:06:
c7:b5:94:2a:ff:3e:35:d0:09:a5:09:c7:3d:02:4e:
2a:d3:1d:cb:52:3a:ff:dd:e7:c9:76:cd:d6:fe:1c:
6c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F4:3E:14:F7:22:1E:85:06:50:63:6E:73:E9:3A:49:73:CD:71:E2
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/A798AD58DD5411EFA5CFF1B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:9000::/36
Signature Algorithm: sha256WithRSAEncryption
a2:f1:89:c8:5b:19:18:c1:2b:c0:61:f8:22:ad:2e:9a:b6:8c:
be:87:c3:e3:1b:68:d7:6f:09:ab:a7:9f:02:4f:90:2f:ec:35:
c2:ff:6f:62:d9:15:92:30:b4:20:5b:9e:68:25:30:98:18:45:
a3:3e:28:a6:78:ce:51:6c:78:5e:a8:91:69:52:ec:93:ad:b1:
06:66:44:78:8c:38:d4:32:3c:0a:17:75:ee:28:a3:0f:c4:51:
95:d4:d5:e8:83:03:e6:36:6a:7a:1e:8f:34:34:b2:cc:6d:15:
5b:64:cd:b1:1a:cd:29:06:5e:e2:57:fe:a9:f0:7a:2d:ec:26:
4f:16:a9:43:85:05:dd:74:2c:46:9d:3a:c3:47:40:4b:27:7c:
d9:02:f1:f8:29:93:40:06:36:5f:a3:fa:36:12:b8:6a:cd:56:
d6:a0:4c:c8:c2:af:50:e8:a6:a5:f6:a3:c2:df:31:2e:72:17:
13:79:29:ed:f3:24:25:cd:24:f1:03:b6:f3:92:08:55:7f:92:
cc:73:54:d9:0e:97:ef:08:76:07:67:46:0f:53:3d:d1:69:47:
dc:53:7a:04:7a:02:60:40:a1:33:d0:ee:b7:0c:43:8b:e5:d8:
aa:e7:28:ce:65:a4:2c:ac:f7:98:34:a5:55:aa:a7:e3:8e:c7:
d2:23:fb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:57 2025 by rpki-client