Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/9F8D736E78F411E68FF6A770F8AEA228.roa
File: 9F8D736E78F411E68FF6A770F8AEA228.roa (raw, json)
Hash identifier: 7ziUZKYlHAOXobhxVsVrZSIl0QBZlFH2TqS8HbjPf4c=
Subject key identifier: 2E:AD:5C:D8:3C:1C:8B:3C:D7:43:A2:0B:99:27:DA:99:23:B7:52:84
Certificate issuer: /CN=F3651254AF/serialNumber=E555DD940F3150185D591C2DAAE29F28EAEAF575
Certificate serial: A9
Authority key identifier: E5:55:DD:94:0F:31:50:18:5D:59:1C:2D:AA:E2:9F:28:EA:EA:F5:75
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/9F8D736E78F411E68FF6A770F8AEA228.roa
Signing time: Mon 12 Sep 2016 14:24:33 +0000
ROA not before: Mon 12 Sep 2016 14:24:26 +0000
ROA not after: Wed 30 Sep 2026 14:24:26 +0000
asID: 327954
IP address blocks: 196.50.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft
rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 01 May 2024 09:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3651254AF/serialNumber=E555DD940F3150185D591C2DAAE29F28EAEAF575
Validity
Not Before: Sep 12 14:24:26 2016 GMT
Not After : Sep 30 14:24:26 2026 GMT
Subject: CN=57d6baa1-9d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6c:9e:27:0e:dd:99:8e:45:73:af:e9:eb:92:
a9:9d:1f:ef:ac:fb:8b:81:8c:ff:49:1d:95:af:48:
06:b5:de:5d:0d:82:fa:c7:97:13:76:f6:68:5d:38:
c1:4d:d8:61:88:5c:04:9a:9a:28:51:38:d5:9c:0f:
47:c6:53:19:ab:f8:67:f0:ba:29:26:95:9d:99:ff:
76:cc:9d:55:cf:23:ae:b2:f1:1e:2e:24:64:dc:f5:
55:d1:cd:ce:16:d3:da:3e:9c:fc:33:8e:cc:51:62:
a0:a2:da:92:88:1b:a1:28:46:70:e3:36:8e:51:3b:
38:51:ee:e6:dd:7e:68:73:18:6c:2f:18:ca:3d:69:
60:5c:51:bd:4c:7b:de:d2:ec:df:15:3b:42:54:22:
24:a7:04:fa:ce:30:d8:80:63:6c:82:74:59:f3:9a:
6b:c8:03:4f:d2:18:c1:f8:d8:ce:0f:bb:f4:0d:cf:
79:f4:22:0f:74:c9:b3:90:45:a0:44:e0:3e:a5:e4:
95:fd:5a:d6:9d:86:4a:aa:49:8e:6a:12:d4:f5:26:
78:ef:9f:2f:2a:25:a0:74:80:2b:3b:69:5f:4f:81:
d3:74:db:59:72:ab:32:1e:ce:d4:b3:27:33:dd:80:
d5:5d:b7:1b:c7:fd:39:3d:61:90:3e:5d:dc:48:b0:
33:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AD:5C:D8:3C:1C:8B:3C:D7:43:A2:0B:99:27:DA:99:23:B7:52:84
X509v3 Authority Key Identifier:
keyid:E5:55:DD:94:0F:31:50:18:5D:59:1C:2D:AA:E2:9F:28:EA:EA:F5:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/9F8D736E78F411E68FF6A770F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
196.50.1.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:e2:b5:7a:c7:f8:eb:0d:80:87:d3:0c:4c:30:b0:c7:9d:4c:
dd:5a:5d:47:a1:9d:46:37:2e:f6:3f:8f:ef:9c:67:41:be:70:
70:f1:36:ab:50:97:66:c4:a6:df:0c:d6:71:57:d1:26:bc:f9:
96:3f:e5:ef:6f:a0:1e:e4:1f:fe:92:52:d5:f1:31:40:27:28:
54:db:f2:38:fd:42:bb:2e:4e:e9:95:a2:29:29:f4:c6:c8:05:
90:5d:4b:49:5e:ab:0e:96:cc:cd:a7:da:2b:a9:95:e6:f2:70:
47:ec:d7:09:ec:7d:b5:cb:6f:bf:97:e9:00:ff:b2:7e:65:42:
7f:84:11:6a:18:61:3e:4e:2a:cf:c8:5f:2b:d1:6f:e4:a8:5c:
ad:95:f6:b8:1e:25:0c:53:57:da:00:e2:e2:58:39:68:a1:f3:
3f:66:1a:27:64:31:fb:70:b4:3e:8a:ce:bd:59:24:0d:7a:b6:
57:6f:33:4b:be:c5:c5:5c:f2:46:b5:de:27:96:7e:ef:08:66:
ce:3f:8c:8b:8a:fe:89:27:4c:bd:de:ba:23:65:d6:4d:68:1d:
b1:38:96:a7:96:78:ab:7e:ac:cf:b2:91:0a:5c:67:f8:d5:82:
4f:37:37:42:17:87:d8:16:dc:08:0b:42:5a:69:2a:34:ec:53:
20:fc:a6:fb
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTEyNTRBRjExMC8GA1UEBRMoRTU1NUREOTQwRjMxNTAxODVENTkxQzJEQUFFMjlG
MjhFQUVBRjU3NTAeFw0xNjA5MTIxNDI0MjZaFw0yNjA5MzAxNDI0MjZaMBgxFjAU
BgNVBAMTDTU3ZDZiYWExLTlkMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5bJ4nDt2ZjkVzr+nrkqmdH++s+4uBjP9JHZWvSAa13l0NgvrHlxN29mhd
OMFN2GGIXASamihRONWcD0fGUxmr+GfwuikmlZ2Z/3bMnVXPI66y8R4uJGTc9VXR
zc4W09o+nPwzjsxRYqCi2pKIG6EoRnDjNo5ROzhR7ubdfmhzGGwvGMo9aWBcUb1M
e97S7N8VO0JUIiSnBPrOMNiAY2yCdFnzmmvIA0/SGMH42M4Pu/QNz3n0Ig90ybOQ
RaBE4D6l5JX9WtadhkqqSY5qEtT1Jnjvny8qJaB0gCs7aV9PgdN021lyqzIeztSz
JzPdgNVdtxvH/Tk9YZA+XdxIsDMjAgMBAAGjggJuMIICajAdBgNVHQ4EFgQULq1c
2DwcizzXQ6ILmSfamSO3UoQwHwYDVR0jBBgwFoAU5VXdlA8xUBhdWRwtquKfKOrq
9XUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUxMjU0L0ExQjMyM0VFMDMzNTExRTZBNjc1MTk3NEY4QUVBMjI4LzVWWGRs
QTh4VUJoZFdSd3RxdUtmS09ycTlYVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzVWWGRsQTh4VUJoZFdSd3RxdUtmS09ycTlYVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjUxMjU0L0ExQjMyM0VFMDMzNTExRTZBNjc1MTk3NEY4
QUVBMjI4LzlGOEQ3MzZFNzhGNDExRTY4RkY2QTc3MEY4QUVBMjI4LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMQyATANBgkqhkiG9w0BAQsFAAOCAQEA
uuK1esf46w2Ah9MMTDCwx51M3VpdR6GdRjcu9j+P75xnQb5wcPE2q1CXZsSm3wzW
cVfRJrz5lj/l72+gHuQf/pJS1fExQCcoVNvyOP1Cuy5O6ZWiKSn0xsgFkF1LSV6r
DpbMzafaK6mV5vJwR+zXCex9tctvv5fpAP+yfmVCf4QRahhhPk4qz8hfK9Fv5Khc
rZX2uB4lDFNX2gDi4lg5aKHzP2YaJ2Qx+3C0PorOvVkkDXq2V28zS77FxVzyRrXe
J5Z+7whmzj+Mi4r+iSdMvd66I2XWTWgdsTiWp5Z4q36sz7KRClxn+NWCTzc3QheH
2BbcCAtCWmkqNOxTIPym+w==
-----END CERTIFICATE-----
Generated at Tue Apr 30 02:02:27 2024 by rpki-client on console-fra.rpki-client.org