Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/5F5BD7A8C90511EF919C5060762E951A.roa
File: 5F5BD7A8C90511EF919C5060762E951A.roa (raw, json)
Hash identifier: CP9UE+jBOHX8oQ6s2JYHUVcCyElYEvB82K2Sr0b1faI=
Subject key identifier: 65:81:14:49:70:CB:83:74:ED:CF:9F:D8:4C:BF:F5:D2:92:15:85:12
Certificate issuer: /CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Certificate serial: 04F7
Authority key identifier: DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/5F5BD7A8C90511EF919C5060762E951A.roa
Signing time: Thu 02 Jan 2025 12:30:38 +0000
ROA not before: Thu 02 Jan 2025 12:30:35 +0000
ROA not after: Sat 02 Jan 2027 12:30:35 +0000
asID: 21003
IP address blocks: 2c0f:fb10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 01:57:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1271 (0x4f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8F4FAF
Validity
Not Before: Jan 2 12:30:35 2025 GMT
Not After : Jan 2 12:30:35 2027 GMT
Subject: CN=677686ee-891f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:99:bb:93:7b:69:c6:d1:89:87:81:68:01:e0:
7d:1b:2d:04:45:93:e3:91:7c:17:74:96:24:75:7e:
a5:fd:ca:cb:18:c7:b5:26:7c:7d:f0:1e:9a:70:00:
69:f3:cd:b0:af:65:2a:09:08:80:ae:fb:2c:bb:c2:
e3:fb:a9:dc:06:68:aa:b2:5f:07:a4:16:37:3d:3f:
16:b4:35:66:0d:3c:c4:7c:d4:b7:aa:cc:25:a4:a4:
45:9f:da:c7:0a:da:7e:a5:0b:a3:ec:d8:c5:67:84:
f4:07:c1:ce:a6:c6:29:69:4b:f4:77:a0:7d:93:00:
a8:f6:c0:f0:33:73:19:8a:d1:49:02:b0:2a:66:4e:
88:d2:22:66:38:96:c2:e2:27:67:a3:e4:b6:53:e3:
62:1d:fd:be:6b:6d:a9:f9:1f:4b:c0:4f:6c:d6:13:
a1:28:9f:19:d4:43:1b:f2:39:1c:e4:07:f7:4f:9a:
20:35:21:cf:db:d4:da:69:95:9d:a6:9f:1d:7c:29:
2b:f2:8a:f7:2b:a3:5d:70:d7:61:50:35:fb:cc:a1:
a2:12:0b:48:56:cf:52:90:4e:72:de:9d:5a:8e:51:
ff:9a:ec:11:2f:10:e3:26:34:36:7b:0c:af:03:2c:
d7:52:6a:f6:d2:79:13:e2:51:2b:e0:ff:d8:ad:d0:
9c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:81:14:49:70:CB:83:74:ED:CF:9F:D8:4C:BF:F5:D2:92:15:85:12
X509v3 Authority Key Identifier:
keyid:DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/5F5BD7A8C90511EF919C5060762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fb10::/48
Signature Algorithm: sha256WithRSAEncryption
a0:10:9e:67:cd:9f:25:b4:b1:22:2b:c5:49:90:bf:c6:e6:bb:
00:e1:ec:da:92:07:c8:b3:9b:5e:7b:71:58:d1:b3:14:ab:52:
6b:02:ad:a5:1b:2c:1f:9d:53:03:a9:06:c2:31:4f:23:a0:e9:
86:40:ca:98:13:ff:1a:93:a1:6b:ee:47:0c:03:9c:d5:ae:e2:
c3:f0:c2:77:d3:4a:20:9b:79:e9:4f:19:bf:1a:ce:40:dd:c4:
29:af:2b:54:11:f1:dc:dc:28:8e:88:b3:00:48:39:52:bf:d1:
9b:74:f8:96:67:7e:ec:f9:ea:22:f8:35:ce:ef:f7:71:69:be:
a3:99:97:63:98:78:e9:bb:b3:d5:d0:c1:91:a6:e1:30:43:a8:
b9:8a:ad:4e:71:b3:bd:de:c8:de:52:22:96:07:ca:66:2e:62:
e2:83:c5:db:36:32:95:a3:60:02:e3:2a:c5:ff:fc:85:32:5b:
c7:65:ca:e3:91:76:97:0c:d8:1a:e4:b9:76:6d:bf:8c:30:1b:
3e:91:c2:66:67:a7:86:db:a6:19:f5:15:ca:ef:77:df:56:83:
b8:20:07:0a:6d:b4:f3:05:14:1f:bb:fe:32:50:1a:7f:ff:51:
78:5e:1d:a3:ea:60:a5:c9:7c:fc:5c:1f:c4:68:e0:63:ea:54:
de:8b:f1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:32:12 2025 by rpki-client