Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/3E1770AC568511EC8ABA3175D8A014CE.roa
File: 3E1770AC568511EC8ABA3175D8A014CE.roa (raw, json)
Hash identifier: FnTn7fdtE2yiT5gkUCelWCWTNl/5nT6fafG4r56LwRw=
Subject key identifier: 15:65:FC:E0:69:E1:5B:51:B3:D6:BA:B8:DB:9E:6C:E3:55:0F:A6:1C
Certificate issuer: /CN=F36F51F8AF/serialNumber=4DEFB41D3B42CCFD73B1A04477C0E825C74D6C6E
Certificate serial: 04F0
Authority key identifier: 4D:EF:B4:1D:3B:42:CC:FD:73:B1:A0:44:77:C0:E8:25:C7:4D:6C:6E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/3E1770AC568511EC8ABA3175D8A014CE.roa
Signing time: Mon 06 Dec 2021 11:11:22 +0000
ROA not before: Mon 06 Dec 2021 11:11:18 +0000
ROA not after: Mon 16 Dec 2030 11:11:18 +0000
asID: 36924
IP address blocks: 2c0f:f048::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft
rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Apr 2024 00:51:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1264 (0x4f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F51F8AF/serialNumber=4DEFB41D3B42CCFD73B1A04477C0E825C74D6C6E
Validity
Not Before: Dec 6 11:11:18 2021 GMT
Not After : Dec 16 11:11:18 2030 GMT
Subject: CN=61adefd9-bd45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:63:e3:b8:e9:c3:85:6e:14:18:4a:15:b5:7f:
f1:95:04:02:0b:99:99:55:8e:74:fd:5d:4a:91:66:
a4:b6:f4:06:8c:d3:b6:84:85:a6:a6:9f:49:85:4a:
65:f6:78:83:50:d7:10:99:a9:8c:db:08:e1:e3:53:
19:3e:47:b5:97:95:a9:d3:dc:0f:8a:2c:47:34:8e:
2f:cb:29:77:47:cf:74:e4:52:f6:18:31:61:4c:3d:
e8:ad:7f:40:6e:94:8c:b6:7a:7a:b0:ac:60:a6:1d:
0a:64:99:e7:1b:32:ed:01:61:1c:4a:94:f8:35:88:
b8:58:50:6f:fd:64:cd:95:a9:5b:31:96:4c:2c:b2:
2f:5e:b3:1d:f2:d6:79:dc:d5:58:50:56:d7:3c:88:
84:4a:e5:96:90:ce:bf:75:74:2e:d8:ff:5a:dd:f9:
f6:64:35:e8:10:ba:36:81:46:c9:87:42:6d:cb:54:
82:57:7d:48:ca:54:39:7b:f5:ac:56:6d:be:b3:ff:
7a:be:8e:1c:3b:9f:76:8a:0b:56:f2:25:0b:8d:5c:
c2:67:1b:b6:78:eb:ee:65:6b:20:9a:05:57:34:cd:
23:40:80:e5:89:76:bc:fb:5f:75:4b:f2:d0:e9:58:
12:9d:48:27:e7:86:1f:0c:e2:6e:0a:22:be:ec:19:
b4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:65:FC:E0:69:E1:5B:51:B3:D6:BA:B8:DB:9E:6C:E3:55:0F:A6:1C
X509v3 Authority Key Identifier:
keyid:4D:EF:B4:1D:3B:42:CC:FD:73:B1:A0:44:77:C0:E8:25:C7:4D:6C:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/3E1770AC568511EC8ABA3175D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f048::/32
Signature Algorithm: sha256WithRSAEncryption
99:1b:4f:28:61:7c:65:98:e9:ff:87:99:e1:f1:ec:d1:67:b9:
10:d9:47:9d:97:5f:63:99:f8:d3:b5:d4:5e:fe:83:a5:ab:25:
61:79:2a:3e:84:69:2a:c1:7a:99:01:db:e9:5a:34:36:8a:6b:
f2:2f:a7:a1:79:d6:ba:c1:ee:82:8f:c6:30:69:f0:25:ea:86:
ec:3e:65:f5:dc:8c:05:be:4f:67:b4:c5:60:a7:28:d7:98:9b:
26:7d:cf:4e:60:4e:0c:d5:cc:72:57:a7:10:ec:b1:47:b2:f0:
2a:ad:21:fb:84:e4:aa:18:42:2a:2c:92:b4:68:6e:90:10:39:
4b:d8:c7:b0:75:47:1e:65:0a:41:12:b2:ea:07:1f:e0:0e:c6:
cf:35:2b:6e:ab:98:28:03:da:20:30:ab:27:3c:9c:3d:36:22:
7f:a3:55:d9:b9:c7:af:be:04:d1:d5:5f:04:bd:98:41:c4:31:
f9:4f:a8:56:ea:37:99:23:06:8c:cb:92:22:44:c2:0a:62:30:
35:29:5c:af:f5:be:f2:35:6a:c2:ba:5a:bb:07:91:7c:5f:30:
b6:95:5a:75:b3:0a:4e:c5:81:ce:f9:67:53:22:1a:48:86:1c:
b1:ca:6a:7b:f1:9f:ff:3e:63:33:5a:4d:3b:a5:b9:d2:04:12:
77:b9:48:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:41:50 2024 by rpki-client on console-ams.rpki-client.org