Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/BF97D40AFC9B11E9A8F7AE3EF8AEA228.roa
File: BF97D40AFC9B11E9A8F7AE3EF8AEA228.roa (raw, json)
Hash identifier: G9n58toWNUqMDu66699/GW70sTU/7pnUIRdVDqWMeDQ=
Subject key identifier: 58:21:C0:2A:F6:BA:1E:3B:F0:A7:1C:25:DE:BA:50:4B:CD:05:07:73
Certificate issuer: /CN=F36F0163AF/serialNumber=39D030AE0AFAC6912B0B133FF7A342F784D0EA8C
Certificate serial: 02
Authority key identifier: 39:D0:30:AE:0A:FA:C6:91:2B:0B:13:3F:F7:A3:42:F7:84:D0:EA:8C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OdAwrgr6xpErCxM_96NC94TQ6ow.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/BF97D40AFC9B11E9A8F7AE3EF8AEA228.roa
Signing time: Fri 01 Nov 2019 11:35:48 +0000
ROA not before: Fri 01 Nov 2019 11:35:41 +0000
ROA not after: Thu 01 Nov 2029 11:35:41 +0000
asID: 37682
IP address blocks: 2c0f:eac0:800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.mft
rsync://rpki.afrinic.net/repository/afrinic/OdAwrgr6xpErCxM_96NC94TQ6ow.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 17 May 2024 00:05:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0163AF/serialNumber=39D030AE0AFAC6912B0B133FF7A342F784D0EA8C
Validity
Not Before: Nov 1 11:35:41 2019 GMT
Not After : Nov 1 11:35:41 2029 GMT
Subject: CN=5dbc1894-cce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:0f:a2:bd:07:a4:45:02:e3:b2:73:f3:61:
66:e5:c2:e7:21:db:0c:ab:39:c5:87:b9:6e:3d:0a:
d4:68:3c:69:3d:97:1e:14:1f:f6:d0:97:f8:76:80:
fa:ac:fe:ef:4d:1c:20:e5:17:4c:cc:b0:8b:45:67:
76:2a:7d:20:a8:d0:52:0a:04:71:75:9e:a5:fd:14:
44:51:91:57:56:0e:4d:9b:ca:21:d3:14:72:f5:46:
b0:1e:60:b1:ff:16:d7:92:51:9d:e7:58:05:81:4e:
a6:ad:c9:5c:11:9b:7e:ec:ea:75:da:a5:9b:b2:84:
ad:f7:56:58:2c:37:f1:35:69:94:89:a2:8a:f6:f9:
f2:4e:da:70:25:7b:6e:97:99:50:d9:c7:46:2f:0f:
b5:18:73:b9:c0:76:18:04:92:54:cb:b6:62:9a:51:
2d:5c:0a:a1:d2:6a:f1:e5:11:ec:f9:a5:c5:d1:bb:
83:6e:a1:8a:85:59:e8:99:f9:c1:ec:c4:af:3c:f5:
63:e0:5a:62:0a:5a:b8:73:b8:5c:a1:36:6a:c6:5c:
41:09:a8:a6:c9:dd:4b:da:75:7d:df:c5:3b:68:32:
5b:93:0e:2a:3e:33:1f:ef:54:b9:78:f7:ff:88:92:
84:0d:c4:48:32:47:33:2b:19:79:89:82:fa:6b:f6:
0e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:21:C0:2A:F6:BA:1E:3B:F0:A7:1C:25:DE:BA:50:4B:CD:05:07:73
X509v3 Authority Key Identifier:
keyid:39:D0:30:AE:0A:FA:C6:91:2B:0B:13:3F:F7:A3:42:F7:84:D0:EA:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OdAwrgr6xpErCxM_96NC94TQ6ow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/BF97D40AFC9B11E9A8F7AE3EF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv6:
2c0f:eac0:800::/37
Signature Algorithm: sha256WithRSAEncryption
83:42:8d:9d:87:d2:6b:b3:e7:11:fa:2f:b3:2c:22:69:77:12:
cb:09:58:45:ee:28:64:06:e0:29:2e:fa:c8:9d:84:84:d6:56:
e0:04:3a:4a:15:f5:45:90:50:c9:a5:b1:7a:25:bf:e5:85:09:
d4:9c:27:65:17:05:d1:23:4d:93:3b:3b:b4:1b:f3:0c:b4:70:
4d:a2:cf:e8:fc:3e:23:8b:71:ea:6a:d3:b8:d5:19:d5:36:52:
1b:2a:de:b0:ba:0e:3a:56:57:7b:74:36:6a:bc:a8:6b:24:86:
a3:7f:d8:33:1c:04:4b:16:75:14:5d:8b:05:a9:21:bb:f0:9a:
b6:2c:84:90:32:e3:91:1b:b3:a6:00:8a:39:0d:de:19:82:09:
17:c8:6e:08:0a:07:7a:88:3d:b6:f4:aa:20:c6:e1:14:17:5f:
07:2b:46:ca:a6:89:cf:b8:75:43:3f:24:65:1e:b3:8b:9f:90:
33:f0:59:4f:ce:c8:62:cd:9a:b2:a8:0d:4d:2a:90:b0:82:d5:
c1:50:e7:fd:81:0a:10:d0:64:02:a0:ad:dd:ee:f5:f5:32:e9:
3d:7f:af:c5:4f:2b:30:62:2a:21:86:ba:69:0f:9b:20:ce:70:
f1:1f:cf:ab:7e:ef:98:31:62:d7:c6:61:48:f8:d8:d8:9c:40:
82:c2:57:7d
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZG
MDE2M0FGMTEwLwYDVQQFEygzOUQwMzBBRTBBRkFDNjkxMkIwQjEzM0ZGN0EzNDJG
Nzg0RDBFQThDMB4XDTE5MTEwMTExMzU0MVoXDTI5MTEwMTExMzU0MVowGDEWMBQG
A1UEAxMNNWRiYzE4OTQtY2NlMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALdAD6K9B6RFAuOyc/NhZuXC5yHbDKs5xYe5bj0K1Gg8aT2XHhQf9tCX+HaA
+qz+700cIOUXTMywi0Vndip9IKjQUgoEcXWepf0URFGRV1YOTZvKIdMUcvVGsB5g
sf8W15JRnedYBYFOpq3JXBGbfuzqddqlm7KErfdWWCw38TVplImiivb58k7acCV7
bpeZUNnHRi8PtRhzucB2GASSVMu2YppRLVwKodJq8eUR7PmlxdG7g26hioVZ6Jn5
wezErzz1Y+BaYgpauHO4XKE2asZcQQmopsndS9p1fd/FO2gyW5MOKj4zH+9UuXj3
/4iShA3ESDJHMysZeYmC+mv2DmMCAwEAAaOCAnAwggJsMB0GA1UdDgQWBBRYIcAq
9roeO/CnHCXeulBLzQUHczAfBgNVHSMEGDAWgBQ50DCuCvrGkSsLEz/3o0L3hNDq
jDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjAxNjMvODg1REM2NDRGQzlBMTFFOTgxNzlCMjNERjhBRUEyMjgvT2RBd3Jn
cjZ4cEVyQ3hNXzk2TkM5NFRRNm93LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvT2RBd3JncjZ4cEVyQ3hNXzk2TkM5NFRRNm93LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjAxNjMvODg1REM2NDRGQzlBMTFFOTgxNzlCMjNERjhB
RUEyMjgvQkY5N0Q0MEFGQzlCMTFFOUE4RjdBRTNFRjhBRUEyMjgucm9hMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDLA/qwAgwDQYJKoZIhvcNAQELBQADggEB
AINCjZ2H0muz5xH6L7MsIml3EssJWEXuKGQG4Cku+sidhITWVuAEOkoV9UWQUMml
sXolv+WFCdScJ2UXBdEjTZM7O7Qb8wy0cE2iz+j8PiOLcepq07jVGdU2Uhsq3rC6
DjpWV3t0Nmq8qGskhqN/2DMcBEsWdRRdiwWpIbvwmrYshJAy45Ebs6YAijkN3hmC
CRfIbggKB3qIPbb0qiDG4RQXXwcrRsqmic+4dUM/JGUes4ufkDPwWU/OyGLNmrKo
DU0qkLCC1cFQ5/2BChDQZAKgrd3u9fUy6T1/r8VPKzBiKiGGumkPmyDOcPEfz6t+
75gxYtfGYUj42NicQILCV30=
-----END CERTIFICATE-----
Generated at Wed May 15 03:49:52 2024 by rpki-client on console-fra.rpki-client.org