Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/1C0D37FA91F011E9AE72377FF8AEA228.roa
File: 1C0D37FA91F011E9AE72377FF8AEA228.roa (raw, json)
Hash identifier: 1FCw+Y3uXimIvmrFhMWwVuIRqYo1LXHBTvbNdEsq7eQ=
Subject key identifier: 47:BB:75:99:26:96:78:BC:06:A6:30:51:ED:52:15:98:89:F0:B6:24
Certificate issuer: /CN=F36FF546AF/serialNumber=CD083AF5D271A0F2DDAB0F150BEB005F38A946B1
Certificate serial: 04
Authority key identifier: CD:08:3A:F5:D2:71:A0:F2:DD:AB:0F:15:0B:EB:00:5F:38:A9:46:B1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zQg69dJxoPLdqw8VC-sAXzipRrE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/1C0D37FA91F011E9AE72377FF8AEA228.roa
Signing time: Tue 18 Jun 2019 17:40:07 +0000
ROA not before: Tue 18 Jun 2019 17:40:01 +0000
ROA not after: Sat 18 Jun 2039 17:40:01 +0000
asID: 6968
IP address blocks: 2001:43f8:790::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.mft
rsync://rpki.afrinic.net/repository/afrinic/zQg69dJxoPLdqw8VC-sAXzipRrE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 May 2024 00:04:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FF546AF/serialNumber=CD083AF5D271A0F2DDAB0F150BEB005F38A946B1
Validity
Not Before: Jun 18 17:40:01 2019 GMT
Not After : Jun 18 17:40:01 2039 GMT
Subject: CN=5d0921f6-5e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:f6:6f:ef:de:3f:77:a0:02:ed:0d:19:84:
a3:32:89:f5:33:b5:b3:8d:ac:13:15:8b:68:19:a5:
6e:ac:48:2a:a4:7c:a6:e0:0e:e8:f3:66:d4:00:65:
72:87:34:58:a3:6b:a4:6f:03:da:32:67:b1:d5:91:
0c:47:16:9e:e4:86:3e:0a:91:f3:b2:5e:7e:aa:40:
2c:63:8e:53:de:b0:a7:49:cf:86:b6:cd:29:a9:d5:
19:9a:71:81:c8:8c:21:06:3d:0e:17:75:db:e0:3c:
4d:15:a6:08:85:3c:61:5d:3e:d2:ef:23:19:cb:9a:
7f:18:67:bf:93:4d:98:b1:86:9e:bc:8a:cf:2b:91:
4a:33:c2:83:82:fe:be:5e:57:0a:8f:b4:d6:f5:80:
13:1c:e4:8a:2e:9d:46:5f:28:b4:e8:a8:9f:43:94:
42:d9:32:2a:2d:a0:c4:00:89:8f:c0:05:4a:76:95:
31:24:2a:e5:84:8c:46:4d:24:82:0d:8b:58:ee:42:
04:75:66:e1:fd:68:e9:b2:48:3b:0b:e6:20:aa:17:
ac:e5:79:7d:02:3a:29:fb:d2:41:22:e7:c5:02:ec:
0c:c2:6e:82:ee:0f:8a:91:22:f7:87:36:48:01:a9:
c8:74:7a:b7:d8:f4:d6:bd:09:75:df:44:6b:16:f2:
af:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BB:75:99:26:96:78:BC:06:A6:30:51:ED:52:15:98:89:F0:B6:24
X509v3 Authority Key Identifier:
keyid:CD:08:3A:F5:D2:71:A0:F2:DD:AB:0F:15:0B:EB:00:5F:38:A9:46:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zQg69dJxoPLdqw8VC-sAXzipRrE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/1C0D37FA91F011E9AE72377FF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:790::/48
Signature Algorithm: sha256WithRSAEncryption
a7:b3:21:8d:79:78:aa:44:64:90:bf:63:e6:7b:f8:0c:d1:46:
b1:6e:7d:e5:6c:ee:14:e0:68:84:9e:d9:93:96:f3:e9:c5:8d:
23:ed:9b:bd:ad:59:68:49:02:60:a5:bd:0b:9b:72:27:34:e7:
98:1d:f9:3b:fc:6a:25:45:7c:7e:a3:a5:14:c0:0e:e4:b4:66:
8a:58:ee:93:3b:bc:56:aa:6c:b4:e8:a7:43:99:ae:be:4b:c1:
b8:e1:43:10:cf:14:dc:e6:68:5a:98:97:52:47:4e:3a:85:d0:
0e:b7:51:d3:a3:a7:70:3e:41:b5:43:ad:5d:d6:f8:5c:b2:3b:
ac:81:7a:f6:98:e8:53:2c:c5:d7:8d:27:8d:92:ff:21:f3:14:
a5:8a:76:e0:19:46:35:53:4e:e8:8d:bc:c1:67:51:33:bd:90:
ec:e5:f9:70:f4:1e:30:a3:25:51:3e:65:42:30:d5:4b:8a:59:
e7:0d:1d:14:4c:c7:6d:72:61:e2:10:57:ca:f9:2a:32:45:1f:
88:4d:8e:92:c6:0a:62:b2:2f:ed:1d:ca:8c:f6:1f:ee:09:4e:
0a:f3:9d:f2:83:ae:eb:e7:4b:32:45:c6:e6:e2:c4:9a:91:ef:
0e:9b:3e:bf:de:d2:71:5e:47:03:6a:c1:60:f4:dc:d3:8d:2e:
48:fd:c5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:36:27 2024 by rpki-client on console-fra.rpki-client.org