Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/FC8B2EBE78F211E6870F9E6EF8AEA228.roa
File: FC8B2EBE78F211E6870F9E6EF8AEA228.roa (raw, json)
Hash identifier: hEoaYDq5s+p9BJGFFQ8BOIdkwXKomCvKjmMvCCfXKFU=
Subject key identifier: 11:74:02:78:EA:66:FC:4A:D6:A1:BD:82:07:54:35:A9:AB:91:EE:0A
Certificate issuer: /CN=F3651254AF/serialNumber=E555DD940F3150185D591C2DAAE29F28EAEAF575
Certificate serial: A4
Authority key identifier: E5:55:DD:94:0F:31:50:18:5D:59:1C:2D:AA:E2:9F:28:EA:EA:F5:75
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/FC8B2EBE78F211E6870F9E6EF8AEA228.roa
Signing time: Mon 12 Sep 2016 14:12:50 +0000
ROA not before: Mon 12 Sep 2016 14:12:42 +0000
ROA not after: Wed 30 Sep 2026 14:12:42 +0000
asID: 37670
IP address blocks: 2c0f:fbc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft
rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3651254AF/serialNumber=E555DD940F3150185D591C2DAAE29F28EAEAF575
Validity
Not Before: Sep 12 14:12:42 2016 GMT
Not After : Sep 30 14:12:42 2026 GMT
Subject: CN=57d6b7e2-6f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:41:08:e4:d1:44:4f:22:22:63:2f:a5:2f:5a:
0d:a3:d6:ae:72:4f:85:56:35:6f:c0:1e:ef:e0:20:
8d:67:ba:46:6b:96:a4:91:98:07:c8:48:cc:72:a3:
51:84:12:e1:69:c9:c5:b2:0d:58:1a:e1:64:c9:0b:
1b:23:97:91:56:55:c1:80:dd:d1:0f:92:c6:6a:59:
e2:2e:5b:ad:8e:52:fb:51:bd:93:f0:b5:6f:20:6e:
72:4c:ca:49:71:7b:2b:7e:38:23:02:8a:3a:a7:e4:
23:06:67:92:50:cd:a4:fe:ee:ac:69:4f:f7:6b:27:
92:43:5d:84:20:c9:63:ea:43:eb:ed:4c:cf:98:86:
2a:a7:36:fe:55:bf:d7:84:4c:50:54:3f:3b:d3:73:
d7:fb:a5:5a:e5:38:60:c1:91:54:b0:c0:56:24:d1:
09:25:03:1a:dc:ac:f6:cd:b8:14:88:ee:67:45:67:
16:ea:68:28:2f:de:5a:10:3c:e3:f6:34:05:c7:5e:
8b:dd:ba:5e:74:64:89:df:38:5d:f6:e9:20:b2:da:
85:2b:86:cb:87:bb:7e:4b:db:2a:9b:f0:0c:19:da:
77:98:55:eb:93:7d:de:d1:d4:20:1b:ff:31:cd:24:
65:35:e8:a7:08:49:48:e6:6c:03:5e:4a:c9:23:fe:
c4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:74:02:78:EA:66:FC:4A:D6:A1:BD:82:07:54:35:A9:AB:91:EE:0A
X509v3 Authority Key Identifier:
keyid:E5:55:DD:94:0F:31:50:18:5D:59:1C:2D:AA:E2:9F:28:EA:EA:F5:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/FC8B2EBE78F211E6870F9E6EF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fbc0::/32
Signature Algorithm: sha256WithRSAEncryption
72:60:94:46:42:71:0f:6e:03:9a:ee:1c:66:1b:4d:ba:8f:f2:
78:f9:8e:e3:b3:26:0e:bd:6f:fd:81:e7:0c:9e:5e:82:41:1d:
f0:1d:1b:71:40:50:f3:7f:34:a1:4d:fb:6b:68:39:bb:8a:da:
64:56:e8:c9:4e:d5:a8:03:2b:f6:3d:16:2f:4e:cc:ac:a0:3b:
85:bd:af:23:bd:be:95:83:a6:24:e3:74:27:94:19:64:c4:e4:
7a:65:24:3f:ad:4b:8a:b3:83:f8:76:ee:4e:12:61:ce:0d:f0:
e7:c6:f2:8a:f4:3e:d2:c4:97:50:ce:84:fe:fe:a7:af:98:c6:
dc:5c:8d:f2:05:4b:0c:59:ab:90:40:e9:2e:01:31:10:ab:94:
c0:36:98:95:07:19:fb:04:8a:00:da:e6:8e:1d:b8:97:d4:56:
28:c6:56:a3:ab:e2:95:2c:06:3e:05:39:28:be:5d:8f:9e:04:
91:0e:25:41:48:ba:43:64:58:3d:54:3c:44:09:32:af:b7:6e:
19:cf:57:23:51:0a:39:92:93:bc:62:74:bb:ea:47:74:39:fa:
b3:2f:22:29:c7:04:58:a9:ca:3f:88:15:51:c0:58:b7:d3:f1:
a6:6e:65:ea:d2:ac:11:1c:8e:49:57:38:73:e6:b7:d4:87:d4:
9c:c6:17:b9
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTEyNTRBRjExMC8GA1UEBRMoRTU1NUREOTQwRjMxNTAxODVENTkxQzJEQUFFMjlG
MjhFQUVBRjU3NTAeFw0xNjA5MTIxNDEyNDJaFw0yNjA5MzAxNDEyNDJaMBgxFjAU
BgNVBAMTDTU3ZDZiN2UyLTZmMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCmQQjk0URPIiJjL6UvWg2j1q5yT4VWNW/AHu/gII1nukZrlqSRmAfISMxy
o1GEEuFpycWyDVga4WTJCxsjl5FWVcGA3dEPksZqWeIuW62OUvtRvZPwtW8gbnJM
yklxeyt+OCMCijqn5CMGZ5JQzaT+7qxpT/drJ5JDXYQgyWPqQ+vtTM+YhiqnNv5V
v9eETFBUPzvTc9f7pVrlOGDBkVSwwFYk0QklAxrcrPbNuBSI7mdFZxbqaCgv3loQ
POP2NAXHXovdul50ZInfOF326SCy2oUrhsuHu35L2yqb8AwZ2neYVeuTfd7R1CAb
/zHNJGU16KcISUjmbANeSskj/sQFAgMBAAGjggJvMIICazAdBgNVHQ4EFgQUEXQC
eOpm/ErWob2CB1Q1qauR7gowHwYDVR0jBBgwFoAU5VXdlA8xUBhdWRwtquKfKOrq
9XUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUxMjU0L0ExQjMyM0VFMDMzNTExRTZBNjc1MTk3NEY4QUVBMjI4LzVWWGRs
QTh4VUJoZFdSd3RxdUtmS09ycTlYVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzVWWGRsQTh4VUJoZFdSd3RxdUtmS09ycTlYVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjUxMjU0L0ExQjMyM0VFMDMzNTExRTZBNjc1MTk3NEY4
QUVBMjI4L0ZDOEIyRUJFNzhGMjExRTY4NzBGOUU2RUY4QUVBMjI4LnJvYTAgBggr
BgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACwP+8AwDQYJKoZIhvcNAQELBQADggEB
AHJglEZCcQ9uA5ruHGYbTbqP8nj5juOzJg69b/2B5wyeXoJBHfAdG3FAUPN/NKFN
+2toObuK2mRW6MlO1agDK/Y9Fi9OzKygO4W9ryO9vpWDpiTjdCeUGWTE5HplJD+t
S4qzg/h27k4SYc4N8OfG8or0PtLEl1DOhP7+p6+YxtxcjfIFSwxZq5BA6S4BMRCr
lMA2mJUHGfsEigDa5o4duJfUVijGVqOr4pUsBj4FOSi+XY+eBJEOJUFIukNkWD1U
PEQJMq+3bhnPVyNRCjmSk7xidLvqR3Q5+rMvIinHBFipyj+IFVHAWLfT8aZuZerS
rBEcjklXOHPmt9SH1JzGF7k=
-----END CERTIFICATE-----
Generated at Sun May 19 01:46:28 2024 by rpki-client on console-ams.rpki-client.org