Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/678B7098E48D11EFB0502A6E762E951A.roa
File: 678B7098E48D11EFB0502A6E762E951A.roa (raw, json)
Hash identifier: jonAE1XfJY/5m4j4uM2w3HbC11SG5Uy6EkEVqN0G0Cw=
Subject key identifier: EB:C5:02:CA:E9:EF:8E:70:59:B3:48:87:57:3C:DE:A0:E3:06:EA:3B
Certificate issuer: /CN=F36F273DAF/serialNumber=D8AA00AB159519A6D65670DE9E598B73DF6AB2C1
Certificate serial: 55
Authority key identifier: D8:AA:00:AB:15:95:19:A6:D6:56:70:DE:9E:59:8B:73:DF:6A:B2:C1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/678B7098E48D11EFB0502A6E762E951A.roa
Signing time: Thu 06 Feb 2025 13:22:25 +0000
ROA not before: Thu 06 Feb 2025 13:22:21 +0000
ROA not after: Fri 06 Feb 2026 13:22:21 +0000
asID: 328699
IP address blocks: 2c0f:e8f8:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F273DAF, serialNumber=D8AA00AB159519A6D65670DE9E598B73DF6AB2C1
Validity
Not Before: Feb 6 13:22:21 2025 GMT
Not After : Feb 6 13:22:21 2026 GMT
Subject: CN=67a4b791-79c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:af:73:10:8e:1b:ed:5f:2b:fc:af:af:f0:cc:
95:24:15:a4:44:1f:a1:7e:2c:f6:32:5f:54:ba:6e:
88:87:bc:8d:d0:47:bb:c2:de:e2:cb:6d:d1:ac:3b:
0e:db:26:b9:a7:0c:db:8a:34:3e:15:84:ec:71:aa:
77:d8:37:8d:21:0e:f6:47:16:fd:ca:22:d9:af:9d:
de:bf:a4:06:29:94:d5:70:5f:73:67:41:7b:9a:5f:
99:5a:6d:76:c5:c0:34:12:63:91:e1:5e:78:f4:31:
d2:59:b7:88:3d:03:9b:17:c4:ef:ab:47:7c:73:ad:
d2:de:be:1c:07:90:b1:a5:fc:fa:44:3e:2a:da:8b:
4a:63:48:b8:bc:92:9d:22:93:66:c9:c4:ae:6c:25:
c0:d5:82:5b:b9:d9:d5:e0:0a:64:39:71:c1:e6:86:
4d:49:8d:a2:05:61:03:9f:00:3c:ee:9c:1a:6b:9f:
2e:00:04:17:ee:45:f0:d8:21:ec:48:c4:a7:b4:de:
92:19:34:c6:fa:b7:b9:21:97:e2:3d:8a:f9:b1:9a:
63:bb:f9:9d:bd:ba:db:96:0d:48:2a:27:5c:0f:07:
9e:71:5e:59:16:33:26:a4:bb:1a:24:2f:7d:b7:6b:
df:27:fd:5c:67:f1:b6:8e:fe:bf:06:d9:9b:32:a6:
db:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C5:02:CA:E9:EF:8E:70:59:B3:48:87:57:3C:DE:A0:E3:06:EA:3B
X509v3 Authority Key Identifier:
keyid:D8:AA:00:AB:15:95:19:A6:D6:56:70:DE:9E:59:8B:73:DF:6A:B2:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/678B7098E48D11EFB0502A6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:e8f8:2000::/40
Signature Algorithm: sha256WithRSAEncryption
b3:83:7b:93:24:9d:49:e4:fc:b9:79:01:2e:29:7e:8b:6e:51:
58:59:52:d4:4c:64:72:e6:6a:d8:d4:56:9b:9b:9a:03:51:c2:
c5:f2:70:ad:40:d0:7f:16:d5:2b:1a:96:94:a5:f8:c0:c0:83:
20:c6:ee:c1:ea:9f:26:8c:0e:2e:e1:28:b1:9b:4c:32:2b:73:
8c:54:4f:4b:9c:d6:c9:31:fd:c8:15:1d:38:63:fa:d0:fa:96:
8b:7f:3f:c8:c8:6d:0d:15:79:6b:3c:45:e4:d4:47:0d:00:cf:
5f:39:a8:07:2b:dd:50:24:fd:1f:6e:01:d5:32:c7:cb:b7:13:
15:13:22:ca:35:38:2b:43:a7:ca:60:f0:37:02:22:2a:05:7f:
57:b6:62:73:27:ca:97:1b:9b:74:ac:1b:90:c2:3e:75:8e:75:
a7:4d:ef:d6:25:2e:79:7f:8b:20:3c:17:16:6e:d6:eb:8e:9d:
ae:dd:f3:23:2f:28:38:a8:2d:c6:2d:59:be:5d:91:4f:1c:2d:
de:8e:10:d7:64:7e:67:bd:99:a1:10:5b:44:18:37:5b:d3:04:
f1:ac:18:58:fd:8b:25:9d:04:9b:c5:52:b0:23:b9:52:8a:ba:
c3:79:8f:4f:0a:39:38:df:dd:fd:02:45:74:fc:43:28:16:d3:
a1:e2:64:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:29 2025 by rpki-client on console.sobornost.net