Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/1509545CC33311E8B6F81A75F8AEA228.roa
File: 1509545CC33311E8B6F81A75F8AEA228.roa (raw, json)
Hash identifier: BZLjmQCkm/nPBfOVw4E72cBSB2eeB8o/IDROqLoeTwc=
Subject key identifier: B3:22:AD:EB:05:A5:7D:B2:8B:7A:8D:F6:D6:6F:1A:40:F9:DF:0B:0A
Certificate issuer: /CN=F3627A02AF/serialNumber=56952EF930F44FFE912770E3DBC163049F5AFDB7
Certificate serial: 17
Authority key identifier: 56:95:2E:F9:30:F4:4F:FE:91:27:70:E3:DB:C1:63:04:9F:5A:FD:B7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/1509545CC33311E8B6F81A75F8AEA228.roa
Signing time: Fri 28 Sep 2018 15:28:00 +0000
ROA not before: Fri 28 Sep 2018 15:27:55 +0000
ROA not after: Sun 28 Sep 2025 15:27:55 +0000
asID: 37721
IP address blocks: 2c0f:ee00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.mft
rsync://rpki.afrinic.net/repository/afrinic/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3627A02AF/serialNumber=56952EF930F44FFE912770E3DBC163049F5AFDB7
Validity
Not Before: Sep 28 15:27:55 2018 GMT
Not After : Sep 28 15:27:55 2025 GMT
Subject: CN=5bae4880-0a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4a:59:6b:69:3b:20:ca:55:46:e2:e4:36:12:
df:91:8f:66:53:da:0e:11:df:34:b7:cc:80:93:a2:
bb:42:f3:01:a3:40:c6:fe:2e:fb:9d:3a:c9:8f:66:
8e:24:7b:86:a3:94:70:c4:a8:b0:35:78:2b:00:48:
2c:e0:35:4d:d6:ee:fd:58:69:95:44:3d:88:01:30:
8c:35:f8:4c:76:d9:9f:7f:17:1d:9d:75:be:04:9b:
a4:f8:9b:88:ee:c8:fb:d3:80:92:9a:c9:d8:cf:29:
de:2f:db:9d:48:d2:20:2a:54:ab:e1:cd:25:3e:89:
27:6b:9b:4e:a7:4f:80:e8:2c:c7:0a:22:43:36:36:
08:9b:8a:9c:c0:32:bc:a2:9a:58:59:99:60:d9:1a:
4a:ff:58:84:6e:41:20:19:94:c2:ac:0e:29:b7:97:
78:1b:3f:1b:e2:c7:c5:e0:86:76:60:f5:59:1a:dc:
bc:73:06:e2:b0:4e:c8:9d:32:68:6a:6b:81:81:65:
c9:41:5e:9b:10:0a:a7:e4:94:a0:fa:1f:1a:dc:99:
65:0b:2e:9d:05:21:42:6e:72:1f:7e:bd:a2:28:1d:
03:78:9a:b4:c2:ea:0a:3f:f6:9e:cf:75:1d:eb:02:
01:97:b7:41:66:9a:67:78:1c:50:3c:e8:9a:a5:fe:
91:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:22:AD:EB:05:A5:7D:B2:8B:7A:8D:F6:D6:6F:1A:40:F9:DF:0B:0A
X509v3 Authority Key Identifier:
keyid:56:95:2E:F9:30:F4:4F:FE:91:27:70:E3:DB:C1:63:04:9F:5A:FD:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/1509545CC33311E8B6F81A75F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv6:
2c0f:ee00::/32
Signature Algorithm: sha256WithRSAEncryption
55:db:82:bb:b7:af:6b:7e:9e:35:16:2f:d9:c7:d2:e7:57:f9:
6a:61:98:0d:b4:bf:af:cf:df:d6:db:37:81:ed:ac:1e:8b:a9:
a0:31:07:c8:d8:77:8f:c6:40:d8:52:d2:5e:bf:8f:f2:71:d5:
ec:c1:e6:d7:1a:83:d3:fa:58:51:42:1f:88:26:5a:51:f3:5a:
dd:9a:41:bf:69:62:1d:2a:81:24:23:9a:9b:21:08:af:42:de:
5b:26:a2:6b:4c:17:d9:cc:12:d4:00:bc:25:97:46:1e:81:4f:
46:9b:1c:7e:36:0d:d4:d6:38:66:57:32:e1:b1:79:b7:f4:e4:
b5:8e:5a:54:a1:47:27:74:79:36:a7:2b:7a:22:08:21:1f:f3:
28:ab:27:5c:aa:83:27:ac:51:a9:27:b4:40:12:5d:08:f7:41:
bc:6e:95:c8:65:3b:aa:07:d8:d5:fa:04:1c:e9:5e:ce:67:48:
15:99:0e:16:7f:22:6c:92:97:00:a9:72:bb:a2:db:18:ad:ea:
d2:06:06:6f:4e:b6:88:9b:92:ff:df:2a:06:d6:2a:d5:ab:b7:
40:00:89:c9:ef:a4:38:2c:9a:3b:f9:37:b5:50:12:e1:1f:47:
8f:2e:86:66:92:4f:46:b0:ef:51:d2:05:a9:f7:61:ec:fd:fc:
cb:55:ec:36
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIBFzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
N0EwMkFGMTEwLwYDVQQFEyg1Njk1MkVGOTMwRjQ0RkZFOTEyNzcwRTNEQkMxNjMw
NDlGNUFGREI3MB4XDTE4MDkyODE1Mjc1NVoXDTI1MDkyODE1Mjc1NVowGDEWMBQG
A1UEAxMNNWJhZTQ4ODAtMGExODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMFKWWtpOyDKVUbi5DYS35GPZlPaDhHfNLfMgJOiu0LzAaNAxv4u+506yY9m
jiR7hqOUcMSosDV4KwBILOA1Tdbu/VhplUQ9iAEwjDX4THbZn38XHZ11vgSbpPib
iO7I+9OAkprJ2M8p3i/bnUjSICpUq+HNJT6JJ2ubTqdPgOgsxwoiQzY2CJuKnMAy
vKKaWFmZYNkaSv9YhG5BIBmUwqwOKbeXeBs/G+LHxeCGdmD1WRrcvHMG4rBOyJ0y
aGprgYFlyUFemxAKp+SUoPofGtyZZQsunQUhQm5yH369oigdA3iatMLqCj/2ns91
HesCAZe3QWaaZ3gcUDzomqX+kdMCAwEAAaOCAm8wggJrMB0GA1UdDgQWBBSzIq3r
BaV9sot6jfbWbxpA+d8LCjAfBgNVHSMEGDAWgBRWlS75MPRP/pEncOPbwWMEn1r9
tzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MjdBMDIvMjZERkQ2QjhCNThFMTFFOEE2Q0UyNjY0RjhBRUEyMjgvVnBVdS1U
RDBUXzZSSjNEajI4RmpCSjlhX2JjLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvVnBVdS1URDBUXzZSSjNEajI4RmpCSjlhX2JjLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjdBMDIvMjZERkQ2QjhCNThFMTFFOEE2Q0UyNjY0RjhB
RUEyMjgvMTUwOTU0NUNDMzMzMTFFOEI2RjgxQTc1RjhBRUEyMjgucm9hMCAGCCsG
AQUFBwEHAQH/BBEwDzANBAIAAjAHAwUALA/uADANBgkqhkiG9w0BAQsFAAOCAQEA
VduCu7eva36eNRYv2cfS51f5amGYDbS/r8/f1ts3ge2sHoupoDEHyNh3j8ZA2FLS
Xr+P8nHV7MHm1xqD0/pYUUIfiCZaUfNa3ZpBv2liHSqBJCOamyEIr0LeWyaia0wX
2cwS1AC8JZdGHoFPRpscfjYN1NY4Zlcy4bF5t/TktY5aVKFHJ3R5NqcreiIIIR/z
KKsnXKqDJ6xRqSe0QBJdCPdBvG6VyGU7qgfY1foEHOlezmdIFZkOFn8ibJKXAKly
u6LbGK3q0gYGb062iJuS/98qBtYq1au3QACJye+kOCyaO/k3tVAS4R9Hjy6GZpJP
RrDvUdIFqfdh7P38y1XsNg==
-----END CERTIFICATE-----
Generated at Sat May 18 01:44:26 2024 by rpki-client on console-ams.rpki-client.org