Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/FA78454ADDC111E8B15C694DF8AEA228.roa
File: FA78454ADDC111E8B15C694DF8AEA228.roa (raw, json)
Hash identifier: uu495Ulte7M9lqyB0F6mlOadgmAPbSCrWmqWcuFpoQU=
Subject key identifier: 48:80:6A:72:47:69:1B:6A:72:FD:60:BC:B7:5C:37:E0:C8:95:13:DC
Certificate issuer: /CN=F36E1839AF/serialNumber=DFB198A24121AFBEA80BE6C2553ED09F85225032
Certificate serial: 015F
Authority key identifier: DF:B1:98:A2:41:21:AF:BE:A8:0B:E6:C2:55:3E:D0:9F:85:22:50:32
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/37GYokEhr76oC-bCVT7Qn4UiUDI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/FA78454ADDC111E8B15C694DF8AEA228.roa
Signing time: Thu 01 Nov 2018 10:36:24 +0000
ROA not before: Thu 01 Nov 2018 10:36:16 +0000
ROA not after: Mon 01 Nov 2038 10:36:16 +0000
asID: 328112
IP address blocks: 2c0f:f3c8::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.mft
rsync://rpki.afrinic.net/repository/afrinic/37GYokEhr76oC-bCVT7Qn4UiUDI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 351 (0x15f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E1839AF/serialNumber=DFB198A24121AFBEA80BE6C2553ED09F85225032
Validity
Not Before: Nov 1 10:36:16 2018 GMT
Not After : Nov 1 10:36:16 2038 GMT
Subject: CN=5bdad728-31bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f3:df:38:d2:62:da:74:20:2d:6a:d1:d4:ff:
68:f8:58:4d:f6:79:f6:05:71:61:a4:00:34:36:1c:
c2:b4:44:c8:41:d8:48:2f:e1:85:8c:81:f2:cc:03:
8f:a9:6b:ad:2d:f0:98:b7:db:14:c1:73:b4:59:6b:
bc:14:e9:9c:22:1f:e4:9d:59:a4:7e:c8:8c:2b:2a:
88:f6:e2:48:27:8f:33:71:1d:8f:76:89:ee:b5:ae:
15:4d:10:5a:0a:c0:13:0b:74:af:5f:7a:53:4c:59:
6c:fb:13:f8:b5:84:3c:46:5c:b0:54:8f:c9:13:0e:
67:9b:c3:0f:33:c1:1f:0e:84:61:33:54:ed:ea:9f:
21:80:3e:8d:84:d4:c1:a0:4f:62:30:22:32:7a:4e:
58:2b:e3:b4:96:e6:cd:b6:05:03:46:16:71:12:94:
b4:ea:10:b4:1b:26:df:ff:cb:a5:be:4e:c6:48:27:
ba:ad:64:f1:b3:e3:cd:62:a1:fe:85:bd:3c:7a:4c:
31:18:5f:0b:4f:31:7f:b7:f4:9b:1b:55:d9:e2:a9:
f2:17:0d:19:11:86:af:a6:b4:44:60:30:81:25:69:
e7:2b:37:d1:e8:e1:b0:ca:05:bd:b0:83:47:0d:47:
05:53:d4:bd:7d:82:8a:44:a4:ce:da:bd:a5:eb:6f:
7c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:80:6A:72:47:69:1B:6A:72:FD:60:BC:B7:5C:37:E0:C8:95:13:DC
X509v3 Authority Key Identifier:
keyid:DF:B1:98:A2:41:21:AF:BE:A8:0B:E6:C2:55:3E:D0:9F:85:22:50:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/37GYokEhr76oC-bCVT7Qn4UiUDI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/FA78454ADDC111E8B15C694DF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f3c8::/32
Signature Algorithm: sha256WithRSAEncryption
40:b2:6c:d0:9c:2c:c7:58:2a:e3:3d:f0:37:68:fd:bf:2f:0d:
48:f0:1a:08:b2:18:e8:08:4a:a5:1b:d3:ec:31:b0:91:a3:1b:
41:67:8c:b8:81:a3:0a:ae:f7:fd:85:5d:b0:d2:0d:d3:0d:18:
78:f2:fb:35:0a:22:d8:d8:d2:0a:26:c0:1f:66:1a:97:5b:6e:
1a:bb:6f:b8:98:58:eb:28:04:c0:d3:87:48:f5:c1:e8:b7:85:
86:ea:3f:e3:0a:d1:af:7f:22:3a:84:9a:fb:15:11:b1:7f:2c:
ea:4b:c4:86:c1:87:ab:9e:1b:3e:8f:c0:aa:fc:54:82:40:f5:
45:e7:09:e2:90:d0:32:f4:52:39:74:de:07:24:0e:c6:89:76:
5e:b6:bf:e3:2b:39:01:42:0f:ab:c9:f5:b6:84:3d:11:92:b0:
89:14:20:c0:6d:e6:a2:a4:83:f8:66:64:6d:98:ac:04:f5:3f:
c2:c6:81:da:29:3f:d0:b7:72:bd:e0:fa:53:7f:e0:26:1e:89:
2b:1b:46:8a:4c:bb:d8:37:a0:cd:1a:1e:fe:24:65:f8:d9:df:
79:2e:1b:d9:75:a7:89:2e:56:97:23:07:35:b5:04:06:5f:88:
20:b1:21:9f:57:3b:7b:6e:12:93:1c:c9:85:93:5d:4e:a4:5f:
a2:de:ec:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:19 2024 by rpki-client on console-fra.rpki-client.org