Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/D4004CBAB63B11EFB3B6169F762E951A.roa
File: D4004CBAB63B11EFB3B6169F762E951A.roa (raw, json)
Hash identifier: +GkBRPKvLygotuEbmcVv//uURPZaYMit+Np2XKV64b0=
Subject key identifier: 96:A3:9A:0E:7B:E2:E0:2E:1B:8F:4B:B6:7B:E7:EE:1F:96:E9:9C:3B
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0751
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/D4004CBAB63B11EFB3B6169F762E951A.roa
Signing time: Mon 09 Dec 2024 14:42:35 +0000
ROA not before: Mon 09 Dec 2024 14:42:31 +0000
ROA not after: Sat 30 Jul 2033 14:42:31 +0000
asID: 37119
IP address blocks: 2c0f:f888:a930::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1873 (0x751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF
Validity
Not Before: Dec 9 14:42:31 2024 GMT
Not After : Jul 30 14:42:31 2033 GMT
Subject: CN=675701db-8286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:a5:2d:b2:0b:8c:1e:7a:4b:12:46:87:5c:
30:1b:57:b2:c9:c7:b1:52:79:81:1c:5c:ee:1f:ef:
a3:31:f6:54:00:4b:18:26:10:71:e0:5f:10:fd:fb:
dd:bc:de:d0:60:88:02:1a:07:4c:77:81:5d:e8:b4:
6e:02:ec:ab:c9:3c:8c:a4:34:7a:e9:c7:28:9b:74:
9e:83:a5:2f:b9:43:5d:45:d4:2e:25:5e:bd:d4:82:
25:2c:26:03:db:49:c5:9e:40:f5:47:e6:3e:2f:ca:
df:c3:16:f9:17:10:1e:61:5b:06:63:4b:dd:ad:42:
75:ef:09:90:d3:f0:c7:ea:5a:25:33:2a:7f:a0:49:
1d:11:9f:8b:56:20:19:de:91:1e:41:8e:f7:37:b1:
47:1b:16:d5:65:c8:5b:04:05:46:45:8a:58:da:1d:
f7:d1:56:95:ad:90:46:3f:37:9d:03:a8:b8:2e:22:
07:c3:86:2c:b3:5b:66:cd:f9:88:5f:75:07:b0:bb:
8a:d5:a7:cf:4f:58:bc:aa:a0:c2:0b:4c:98:97:91:
94:03:fe:be:cf:65:ad:e5:be:8a:2a:9d:79:e6:45:
26:c8:73:de:02:90:fb:c5:a8:dd:63:2b:8f:88:e2:
61:57:70:f3:60:84:f1:6c:2d:22:ae:09:93:79:b6:
04:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A3:9A:0E:7B:E2:E0:2E:1B:8F:4B:B6:7B:E7:EE:1F:96:E9:9C:3B
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/D4004CBAB63B11EFB3B6169F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f888:a930::/44
Signature Algorithm: sha256WithRSAEncryption
b7:70:29:d3:ed:73:07:9a:b8:04:9f:b3:4f:fc:3e:a8:50:f9:
fe:1a:d3:cd:ba:2c:af:f3:01:13:9f:cb:1e:ec:50:a2:8f:7b:
8d:d7:ba:0f:55:2d:28:73:88:b0:59:77:46:82:f1:c4:e1:75:
0e:94:75:98:f5:ef:1c:b2:cd:e4:86:48:fc:4b:4b:aa:11:fb:
1e:da:ac:ed:8f:64:77:87:8d:c7:f5:dd:41:f4:3a:8a:ce:2e:
a5:ee:03:d9:2b:ca:2b:8f:31:47:c4:1b:37:06:bb:2e:e7:71:
32:dc:0c:91:9f:7f:46:9a:cf:02:83:61:a6:bd:55:71:a5:94:
bb:69:e3:b1:c9:ef:a1:c2:4d:e2:af:9b:24:5b:ea:38:ee:3c:
23:77:30:f7:27:6b:fa:62:1b:31:77:96:bc:3b:36:a2:e9:d5:
ad:24:48:8d:2e:81:c6:f9:ab:04:53:1b:eb:e6:ab:13:28:f7:
74:45:92:85:91:bd:f9:76:a0:9d:f7:9c:4b:85:15:2f:c2:8b:
ec:7d:b6:4e:ee:5e:c4:08:05:41:5b:22:99:95:96:a4:64:13:
26:c6:d3:1c:82:4f:46:ef:ba:2f:34:d9:e8:f4:b1:11:1f:bc:
22:cc:53:07:a7:57:90:08:70:1e:4b:04:07:92:35:0c:5d:dc:
fa:97:50:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:57 2025 by rpki-client