Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/45E527EEE06B11E9A08E4B73F8AEA228.roa
File: 45E527EEE06B11E9A08E4B73F8AEA228.roa (raw, json)
Hash identifier: 23s85qK+3yXmDwPv+pgNeECUQC4qbLPuIqLfP5pWMTQ=
Subject key identifier: CC:E2:82:D8:4B:C7:96:0D:6B:91:37:43:7A:C3:AA:31:6D:F3:3F:F4
Certificate issuer: /CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Certificate serial: A6
Authority key identifier: 7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/45E527EEE06B11E9A08E4B73F8AEA228.roa
Signing time: Thu 26 Sep 2019 14:38:15 +0000
ROA not before: Thu 26 Sep 2019 14:38:11 +0000
ROA not after: Thu 26 Sep 2024 14:38:11 +0000
asID: 327804
IP address blocks: 2c0f:f050:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.mft
rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Validity
Not Before: Sep 26 14:38:11 2019 GMT
Not After : Sep 26 14:38:11 2024 GMT
Subject: CN=5d8ccd57-7bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:87:18:ff:4b:4a:33:67:2f:18:e1:6f:f4:59:
39:b9:c6:7d:d0:34:e7:a5:82:36:b0:6a:2a:67:c7:
46:6c:5c:3d:61:4d:69:c2:33:d9:0b:17:1d:95:ad:
cf:0b:ef:12:6b:41:be:01:44:4e:60:ca:c3:f5:78:
01:88:fe:57:b9:5b:7b:fc:b6:6d:0b:32:0b:7c:56:
4c:fe:cc:d6:27:54:e4:f7:72:9a:75:bd:8d:2c:d1:
17:68:34:50:31:2d:90:11:fa:1f:94:bb:43:23:0a:
39:15:28:f5:29:c7:6f:1b:9c:78:8e:a1:af:53:e6:
b8:c2:f9:14:95:fd:1f:82:cf:7e:49:ec:a8:15:64:
f3:9f:91:e1:c4:2c:b0:31:b5:c3:3a:47:02:3c:30:
90:98:d0:ff:16:ba:ed:b7:94:9b:c2:75:5c:ff:9b:
a4:f4:be:37:36:9e:de:16:46:ad:74:69:c5:d5:80:
1c:2a:6f:a3:f1:12:10:92:34:f5:dd:c5:d7:00:0c:
50:ec:5e:c8:d7:10:2b:6b:a6:6d:20:e7:01:bb:9a:
ac:07:e9:f8:98:50:3e:82:80:48:1f:96:8d:86:5a:
f6:93:24:9e:f5:6b:7b:ac:36:fd:d5:ac:06:98:1a:
c8:de:69:f4:87:69:0a:8a:f8:2b:46:6b:28:fe:09:
7c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E2:82:D8:4B:C7:96:0D:6B:91:37:43:7A:C3:AA:31:6D:F3:3F:F4
X509v3 Authority Key Identifier:
keyid:7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/45E527EEE06B11E9A08E4B73F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f050:9000::/36
Signature Algorithm: sha256WithRSAEncryption
82:bb:0d:3e:10:5d:2c:73:4a:33:60:7d:db:d6:af:a2:43:aa:
a0:f5:a6:2f:75:ef:3e:e1:3a:3f:b6:52:6f:72:fb:74:47:5f:
3a:af:d1:d6:9f:3b:23:6f:3a:23:28:90:1e:c4:28:a6:89:e4:
69:82:b1:04:ea:6e:03:ab:9e:3a:e4:c9:27:c9:aa:44:ca:52:
05:29:e8:53:96:d9:39:6a:72:78:e1:4d:39:81:a6:ad:91:34:
be:f9:cf:37:37:73:73:a0:82:d7:f6:82:74:d2:0f:f3:25:26:
ec:70:a3:41:1c:cb:51:81:5f:dd:28:4c:73:75:ee:88:0d:09:
99:b3:62:37:04:9f:87:b3:52:88:7e:9d:53:c4:9f:88:e8:5b:
44:88:d9:5d:2a:52:07:62:f2:0e:71:0d:9e:12:67:18:5e:9d:
0f:34:98:57:06:94:a7:4f:08:ed:c0:79:07:38:73:04:7f:16:
4e:e1:3a:c1:11:9e:01:97:9d:5d:cd:8b:d8:40:42:bb:92:e4:
c8:37:2d:8e:5f:d0:19:4c:6f:fa:db:dd:c5:a6:d1:9c:df:f7:
9e:b4:bb:ba:8d:cd:95:c8:b2:c7:f7:42:0c:b4:d3:97:a5:88:
8d:7e:6f:0e:92:94:2a:74:f2:a6:0e:74:56:a5:c2:28:f2:75:
e2:a4:95:fe
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzgzNzFBRjExMC8GA1UEBRMoN0I5NjVCNjRDM0U3MjRCOTNGQzAwQjE4NkUxNUUz
NUNFRDUzNURDNzAeFw0xOTA5MjYxNDM4MTFaFw0yNDA5MjYxNDM4MTFaMBgxFjAU
BgNVBAMTDTVkOGNjZDU3LTdiYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDbhxj/S0ozZy8Y4W/0WTm5xn3QNOelgjawaipnx0ZsXD1hTWnCM9kLFx2V
rc8L7xJrQb4BRE5gysP1eAGI/le5W3v8tm0LMgt8Vkz+zNYnVOT3cpp1vY0s0Rdo
NFAxLZAR+h+Uu0MjCjkVKPUpx28bnHiOoa9T5rjC+RSV/R+Cz35J7KgVZPOfkeHE
LLAxtcM6RwI8MJCY0P8Wuu23lJvCdVz/m6T0vjc2nt4WRq10acXVgBwqb6PxEhCS
NPXdxdcADFDsXsjXECtrpm0g5wG7mqwH6fiYUD6CgEgflo2GWvaTJJ71a3usNv3V
rAaYGsjeafSHaQqK+CtGayj+CXyHAgMBAAGjggJwMIICbDAdBgNVHQ4EFgQUzOKC
2EvHlg1rkTdDesOqMW3zP/QwHwYDVR0jBBgwFoAUe5ZbZMPnJLk/wAsYbhXjXO1T
XccwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM4MzcxL0VDMEFFODc0N0FGQTExRTk4OEEzQzMzQ0Y4QUVBMjI4L2U1WmJa
TVBuSkxrX3dBc1liaFhqWE8xVFhjYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2U1WmJaTVBuSkxrX3dBc1liaFhqWE8xVFhjYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM4MzcxL0VDMEFFODc0N0FGQTExRTk4OEEzQzMzQ0Y4
QUVBMjI4LzQ1RTUyN0VFRTA2QjExRTlBMDhFNEI3M0Y4QUVBMjI4LnJvYTAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCwP8FCQMA0GCSqGSIb3DQEBCwUAA4IB
AQCCuw0+EF0sc0ozYH3b1q+iQ6qg9aYvde8+4To/tlJvcvt0R186r9HWnzsjbzoj
KJAexCimieRpgrEE6m4Dq5465MknyapEylIFKehTltk5anJ44U05gaatkTS++c83
N3NzoILX9oJ00g/zJSbscKNBHMtRgV/dKExzde6IDQmZs2I3BJ+Hs1KIfp1TxJ+I
6FtEiNldKlIHYvIOcQ2eEmcYXp0PNJhXBpSnTwjtwHkHOHMEfxZO4TrBEZ4Bl51d
zYvYQEK7kuTINy2OX9AZTG/6293FptGc3/eetLu6jc2VyLLH90IMtNOXpYiNfm8O
kpQqdPKmDnRWpcIo8nXipJX+
-----END CERTIFICATE-----
Generated at Sat May 18 01:31:50 2024 by rpki-client on console-fra.rpki-client.org