Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C741/BE173EB406BD11E588824D08F8AEA228/ABD3CC5E23D711E594D1A12AF8AEA228.roa
File: ABD3CC5E23D711E594D1A12AF8AEA228.roa (raw, json)
Hash identifier: drQdHL3RR7Rr1MiuKtNqDguawW895RY9z/7WuQH7PY8=
Subject key identifier: 2E:7F:10:8F:3E:55:7E:6A:4C:5A:B6:66:02:A4:E1:F4:DF:5A:B6:DA
Certificate issuer: /CN=F365C741AF/serialNumber=DFED1DB31869BDCCC967B540E22DB05642542F1D
Certificate serial: 2C
Authority key identifier: DF:ED:1D:B3:18:69:BD:CC:C9:67:B5:40:E2:2D:B0:56:42:54:2F:1D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3-0dsxhpvczJZ7VA4i2wVkJULx0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365C741/BE173EB406BD11E588824D08F8AEA228/ABD3CC5E23D711E594D1A12AF8AEA228.roa
Signing time: Mon 06 Jul 2015 12:07:14 +0000
ROA not before: Mon 06 Jul 2015 12:08:03 +0000
ROA not after: Wed 31 Dec 2025 12:08:03 +0000
asID: 37100
IP address blocks: 105.16.0.0/12 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365C741/BE173EB406BD11E588824D08F8AEA228/3-0dsxhpvczJZ7VA4i2wVkJULx0.crl
rsync://rpki.afrinic.net/repository/member_repository/F365C741/BE173EB406BD11E588824D08F8AEA228/3-0dsxhpvczJZ7VA4i2wVkJULx0.mft
rsync://rpki.afrinic.net/repository/afrinic/3-0dsxhpvczJZ7VA4i2wVkJULx0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365C741AF/serialNumber=DFED1DB31869BDCCC967B540E22DB05642542F1D
Validity
Not Before: Jul 6 12:08:03 2015 GMT
Not After : Dec 31 12:08:03 2025 GMT
Subject: CN=559a6f72-1336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:96:1f:e9:5b:a3:e6:4f:f9:25:d1:d6:e5:09:
c2:c1:dd:ae:29:ab:9f:91:2b:4a:4b:ab:f1:9b:70:
f1:b9:44:dc:18:1b:fa:68:69:b5:a8:c3:ab:67:41:
0c:0a:14:9f:e0:0c:5f:8a:4a:96:45:63:06:ed:4d:
00:38:74:4a:4d:29:d4:27:17:64:44:bf:54:be:0e:
2a:9f:8f:ee:57:84:95:9b:42:d1:85:b3:56:4c:98:
71:c2:64:96:c0:0c:b8:6d:72:9c:e1:68:c5:81:e9:
75:91:a9:5a:c8:29:9f:14:96:74:8f:54:a5:87:a5:
07:10:dd:fe:c8:e7:cb:73:db:dc:8e:02:98:80:2f:
f6:41:f8:5b:27:13:02:13:4c:32:f7:43:00:44:b6:
30:ae:6c:fc:f2:00:f8:40:a9:2b:49:9e:9e:f8:0e:
c9:79:b3:39:68:26:fd:cc:c4:05:e6:2d:89:6e:f3:
6d:26:07:15:63:54:5f:61:3a:7d:24:4b:b5:88:8a:
cf:04:57:95:8b:e7:87:36:d9:91:14:27:e9:76:49:
1f:44:05:94:fd:c2:46:d0:18:05:36:62:f5:30:4e:
f6:e9:e2:72:bf:83:e4:78:8f:63:35:e0:12:92:c1:
6b:07:1a:3a:ed:f4:32:eb:21:2d:da:88:c6:7d:77:
df:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7F:10:8F:3E:55:7E:6A:4C:5A:B6:66:02:A4:E1:F4:DF:5A:B6:DA
X509v3 Authority Key Identifier:
keyid:DF:ED:1D:B3:18:69:BD:CC:C9:67:B5:40:E2:2D:B0:56:42:54:2F:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365C741/BE173EB406BD11E588824D08F8AEA228/3-0dsxhpvczJZ7VA4i2wVkJULx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3-0dsxhpvczJZ7VA4i2wVkJULx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C741/BE173EB406BD11E588824D08F8AEA228/ABD3CC5E23D711E594D1A12AF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
105.16.0.0/12
Signature Algorithm: sha256WithRSAEncryption
25:53:ba:b1:ce:e3:51:23:53:b7:f6:06:d8:b7:a9:8f:ad:a4:
66:af:4f:12:43:4d:01:a7:87:df:89:d9:73:7c:f5:d5:4f:30:
93:43:69:8f:98:8d:00:fe:b5:af:64:f4:5d:79:03:08:a0:31:
7e:04:65:e4:13:05:10:c7:23:28:75:d6:5e:fa:9e:87:a6:e0:
d4:02:f2:ac:3a:55:74:3c:e0:80:f3:78:8a:5c:44:5a:ba:11:
56:bf:f7:2d:35:93:62:10:73:40:5e:f2:5b:72:73:00:3a:b7:
d4:2d:47:05:a2:45:68:33:0d:c8:a4:f9:dd:22:38:cc:61:7b:
3e:4b:f2:7f:80:3c:11:ec:f8:74:62:ba:ca:26:2c:b6:44:2f:
db:6e:b6:85:c1:fb:61:0d:37:ce:c0:0e:e8:99:57:26:8c:79:
80:e9:a4:97:d1:92:ed:de:97:02:74:f5:bc:f1:95:9d:5c:93:
13:8c:1f:00:43:c3:b0:28:c2:e2:62:0f:eb:04:3a:69:82:d8:
ab:4a:8c:23:03:0e:16:ee:5e:c2:89:fa:c4:b4:7b:0b:48:e5:
dd:f4:ed:0a:cc:d6:cc:57:64:88:db:8b:f3:c3:4a:59:cb:99:
a2:e2:db:a3:f5:a6:e2:a1:bc:cb:0d:f2:d1:d8:16:01:3b:aa:
86:7a:24:01
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIBLDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
Qzc0MUFGMTEwLwYDVQQFEyhERkVEMURCMzE4NjlCRENDQzk2N0I1NDBFMjJEQjA1
NjQyNTQyRjFEMB4XDTE1MDcwNjEyMDgwM1oXDTI1MTIzMTEyMDgwM1owGDEWMBQG
A1UEAxMNNTU5YTZmNzItMTMzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMqWH+lbo+ZP+SXR1uUJwsHdrimrn5ErSkur8Ztw8blE3Bgb+mhptajDq2dB
DAoUn+AMX4pKlkVjBu1NADh0Sk0p1CcXZES/VL4OKp+P7leElZtC0YWzVkyYccJk
lsAMuG1ynOFoxYHpdZGpWsgpnxSWdI9UpYelBxDd/sjny3Pb3I4CmIAv9kH4WycT
AhNMMvdDAES2MK5s/PIA+ECpK0menvgOyXmzOWgm/czEBeYtiW7zbSYHFWNUX2E6
fSRLtYiKzwRXlYvnhzbZkRQn6XZJH0QFlP3CRtAYBTZi9TBO9unicr+D5HiPYzXg
EpLBawcaOu30MushLdqIxn13350CAwEAAaOCAm0wggJpMB0GA1UdDgQWBBQufxCP
PlV+akxatmYCpOH031q22jAfBgNVHSMEGDAWgBTf7R2zGGm9zMlntUDiLbBWQlQv
HTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NUM3NDEvQkUxNzNFQjQwNkJEMTFFNTg4ODI0RDA4RjhBRUEyMjgvMy0wZHN4
aHB2Y3pKWjdWQTRpMndWa0pVTHgwLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvMy0wZHN4aHB2Y3pKWjdWQTRpMndWa0pVTHgwLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUM3NDEvQkUxNzNFQjQwNkJEMTFFNTg4ODI0RDA4RjhB
RUEyMjgvQUJEM0NDNUUyM0Q3MTFFNTk0RDFBMTJBRjhBRUEyMjgucm9hMB4GCCsG
AQUFBwEHAQH/BA8wDTALBAIAATAFAwMEaRAwDQYJKoZIhvcNAQELBQADggEBACVT
urHO41EjU7f2Bti3qY+tpGavTxJDTQGnh9+J2XN89dVPMJNDaY+YjQD+ta9k9F15
AwigMX4EZeQTBRDHIyh11l76noem4NQC8qw6VXQ84IDzeIpcRFq6EVa/9y01k2IQ
c0Be8ltycwA6t9QtRwWiRWgzDcik+d0iOMxhez5L8n+APBHs+HRiusomLLZEL9tu
toXB+2ENN87ADuiZVyaMeYDppJfRku3elwJ09bzxlZ1ckxOMHwBDw7AowuJiD+sE
OmmC2KtKjCMDDhbuXsKJ+sS0ewtI5d307QrM1sxXZIjbi/PDSlnLmaLi26P1puKh
vMsN8tHYFgE7qoZ6JAE=
-----END CERTIFICATE-----
Generated at Sat May 18 01:31:20 2024 by rpki-client on console-fra.rpki-client.org