Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/A17B340AB46311E59241EB56F8AEA228.roa
File: A17B340AB46311E59241EB56F8AEA228.roa (raw, json)
Hash identifier: 7FwQeUfCbVL0Bd2EXyoVC5y/xe6Lbd8u11SpNh5f5zI=
Subject key identifier: B4:0B:53:C1:DF:8C:74:1B:63:99:72:D4:50:94:A3:14:8F:23:6F:CB
Certificate issuer: /CN=F36DB4B4AF/serialNumber=CFD1CE11582E70F8D51B7870725C15EF67E0C651
Certificate serial: 06
Authority key identifier: CF:D1:CE:11:58:2E:70:F8:D5:1B:78:70:72:5C:15:EF:67:E0:C6:51
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/A17B340AB46311E59241EB56F8AEA228.roa
Signing time: Wed 06 Jan 2016 10:54:17 +0000
ROA not before: Wed 06 Jan 2016 10:54:12 +0000
ROA not after: Wed 31 Dec 2036 10:54:12 +0000
asID: 37100
IP address blocks: 2c0f:f8e0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB4B4AF/serialNumber=CFD1CE11582E70F8D51B7870725C15EF67E0C651
Validity
Not Before: Jan 6 10:54:12 2016 GMT
Not After : Dec 31 10:54:12 2036 GMT
Subject: CN=568cf259-5519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:08:9c:70:ae:72:1b:af:e4:9a:a5:33:10:a9:
a3:1f:fb:19:8e:64:92:39:2e:46:a0:80:c1:8e:bb:
f9:1f:12:8e:28:dc:a0:85:f9:0e:c9:35:11:88:7e:
1f:9c:29:33:6c:68:f3:76:f2:3c:8a:25:7b:2d:0b:
d3:6a:2c:d7:b1:ed:47:68:37:8c:7f:f4:08:ca:c1:
83:d6:ab:2e:53:79:c0:27:6a:dd:2e:25:6c:d4:69:
de:81:11:f5:ca:e0:f5:ac:91:79:0e:58:03:f1:9e:
58:d2:0e:12:73:87:e0:5a:06:8c:2d:a5:f1:4d:5b:
57:87:ab:a9:80:4e:97:8d:a7:1d:60:78:97:26:b3:
de:1c:d6:3c:55:06:e8:95:29:b6:63:0f:56:6a:10:
90:da:4e:4a:5c:1d:33:26:74:a9:91:90:e0:f1:ee:
8b:3f:1f:f3:98:57:01:f4:1e:88:fe:fc:48:1a:39:
67:9c:a6:06:54:c4:c0:65:3f:77:27:1a:bd:48:b2:
20:7f:2c:2c:e0:8a:ad:05:3d:71:ad:73:51:c6:af:
69:eb:76:b7:2c:7c:41:e3:ec:0f:b6:5c:5c:5e:ed:
a1:08:51:9a:53:0a:bc:7d:30:fd:63:85:af:af:d4:
83:7f:ab:ec:2c:89:6e:77:b8:d4:60:7f:4e:4d:22:
1d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0B:53:C1:DF:8C:74:1B:63:99:72:D4:50:94:A3:14:8F:23:6F:CB
X509v3 Authority Key Identifier:
keyid:CF:D1:CE:11:58:2E:70:F8:D5:1B:78:70:72:5C:15:EF:67:E0:C6:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/A17B340AB46311E59241EB56F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f8e0::/32
Signature Algorithm: sha256WithRSAEncryption
d1:8d:01:f0:63:29:16:65:f7:c3:3f:06:cc:0a:19:69:b4:bc:
7a:9c:8f:e5:06:a6:0d:5f:ce:6d:d3:f5:33:0f:c3:48:73:ff:
ef:67:f7:a9:01:91:33:81:07:b4:df:51:72:44:b3:5c:05:d0:
d1:35:19:c9:2d:9f:39:2c:28:2e:bf:a4:8d:d4:76:b0:3d:d1:
bb:47:71:bf:df:97:10:07:3b:fb:ba:6f:03:65:b7:ba:af:45:
b2:26:d9:cb:fd:ac:12:63:b9:0a:bc:8d:60:3f:eb:5a:06:26:
a6:22:0d:b2:43:6f:33:d0:e6:16:3c:0a:45:66:ac:f6:ea:85:
44:a3:01:54:50:ac:bc:03:2d:3d:d1:76:92:50:88:69:64:7a:
61:11:db:4f:d5:9c:9c:5e:03:20:4b:42:58:3a:17:69:7b:77:
e0:e3:b6:d3:4f:8c:2b:93:02:9d:4a:89:83:27:23:df:3e:80:
fd:2f:48:99:bd:a2:d7:fc:40:a0:0f:79:d3:86:00:d7:74:12:
f4:87:44:e3:ce:87:7d:d7:d0:09:ad:68:a5:5f:5c:c6:08:3c:
fb:dc:0e:41:c3:a9:82:70:ce:ec:a8:aa:55:07:33:a5:27:d3:
3e:74:ec:7b:81:10:5a:40:76:9d:48:25:5d:d4:80:0f:2e:25:
a3:46:15:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:18 2024 by rpki-client on console-fra.rpki-client.org