Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/42E0DF7E85E011E989E4CF0DF8AEA228.roa
File: 42E0DF7E85E011E989E4CF0DF8AEA228.roa (raw, json)
Hash identifier: ub04iL+FdrPKe6xm0DlU5EWb8IsSt+07XZ7Am9PMCkI=
Subject key identifier: 01:1A:B6:60:59:86:24:A1:A2:5E:96:9D:44:0C:80:7B:DD:22:71:9D
Certificate issuer: /CN=F365C895RI/serialNumber=A8407C50D3551269595D84CF1243A5F3AFF81070
Certificate serial: 02
Authority key identifier: A8:40:7C:50:D3:55:12:69:59:5D:84:CF:12:43:A5:F3:AF:F8:10:70
Authority info access: rsync://rpki.afrinic.net/repository/ripe/qEB8UNNVEmlZXYTPEkOl86_4EHA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/42E0DF7E85E011E989E4CF0DF8AEA228.roa
Signing time: Mon 03 Jun 2019 09:16:25 +0000
ROA not before: Mon 03 Jun 2019 09:16:20 +0000
ROA not after: Sat 30 Jun 2029 09:16:20 +0000
asID: 328174
IP address blocks: 80.88.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.crl
rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft
rsync://rpki.afrinic.net/repository/ripe/qEB8UNNVEmlZXYTPEkOl86_4EHA.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 May 2024 00:25:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365C895RI/serialNumber=A8407C50D3551269595D84CF1243A5F3AFF81070
Validity
Not Before: Jun 3 09:16:20 2019 GMT
Not After : Jun 30 09:16:20 2029 GMT
Subject: CN=5cf4e569-1765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d9:be:9a:54:d3:0f:2f:c0:d7:ef:b5:ba:6e:
3a:9a:ed:4d:11:f9:8b:80:b6:d9:d8:90:8d:07:32:
16:01:fc:0e:34:1a:bc:4d:84:a0:f2:a4:e9:fc:de:
66:b8:78:97:49:52:ff:94:61:21:d4:29:bd:6b:16:
ad:94:62:8d:f4:5e:da:62:99:db:ea:50:91:e0:0d:
10:98:96:39:03:4c:dd:28:e4:65:d6:e4:b5:54:fe:
e4:dd:47:28:79:1b:01:b7:58:c4:fd:2e:4d:17:25:
f7:0c:45:b0:5e:b0:50:e9:f6:46:77:5f:e6:5a:dc:
08:64:9c:37:1d:df:c5:74:5e:5b:42:af:44:4c:35:
15:9f:95:84:5c:1d:5e:b9:ca:da:9b:3e:b1:a6:33:
8d:90:9b:9e:58:f7:ce:6d:af:b5:16:84:64:78:ee:
0b:55:ac:ca:e2:96:65:7f:a9:0c:54:cb:ad:c7:81:
9a:68:be:02:97:51:bc:1b:1d:4a:1e:f9:7b:f6:38:
90:12:fb:e8:b0:3f:19:2e:c8:7b:06:39:e6:b6:e2:
09:aa:10:ff:c9:da:83:58:34:2b:fa:d7:13:3f:bb:
28:df:cd:b8:15:23:65:fa:67:1f:e3:c6:24:e4:4f:
5e:06:2e:dc:1a:7f:43:e4:e8:34:44:83:59:35:3b:
2a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1A:B6:60:59:86:24:A1:A2:5E:96:9D:44:0C:80:7B:DD:22:71:9D
X509v3 Authority Key Identifier:
keyid:A8:40:7C:50:D3:55:12:69:59:5D:84:CF:12:43:A5:F3:AF:F8:10:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/qEB8UNNVEmlZXYTPEkOl86_4EHA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/42E0DF7E85E011E989E4CF0DF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
80.88.11.0/24
Signature Algorithm: sha256WithRSAEncryption
74:a3:28:6f:a0:66:34:31:93:af:cb:fa:f2:19:00:6b:47:2b:
8f:f2:77:83:e0:58:54:58:d8:00:70:83:cb:a8:1e:01:66:b4:
ff:ba:fc:dc:79:a9:b8:9c:9e:d1:6d:2b:ea:96:ae:37:f0:a2:
ec:c7:da:e6:82:f6:96:96:b0:70:b8:90:d5:c7:14:a5:18:0d:
08:d4:b1:e4:7c:d0:f3:a6:e5:5a:1a:0b:d7:19:d7:fc:80:0a:
cd:bd:c3:43:36:b4:11:01:c6:14:1d:32:66:85:6b:20:33:31:
a0:8a:29:d1:46:71:f0:3b:46:bc:e7:a4:dd:b1:f6:e8:c8:29:
cf:02:6f:15:93:e7:13:26:b5:7d:01:b7:75:db:b7:d3:7d:9c:
d5:a4:d0:e3:ca:a5:95:d6:dc:9a:be:04:eb:c0:65:c5:85:05:
0a:b8:0d:b0:e5:4b:e8:f5:d7:51:f2:c4:f9:15:53:73:62:53:
3d:9d:e9:5d:7e:0d:9f:25:0e:05:52:89:20:f4:04:f2:6f:c8:
b0:07:47:61:83:04:4d:7c:df:1f:79:ec:54:42:bd:3d:0a:58:
8c:b1:ea:41:6b:46:8f:80:af:46:5c:2d:56:c4:3f:3b:8d:08:
66:f7:e6:2f:30:24:db:fd:9c:9d:a0:17:bf:4c:59:54:98:f8:
1d:7e:5d:8a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
Qzg5NVJJMTEwLwYDVQQFEyhBODQwN0M1MEQzNTUxMjY5NTk1RDg0Q0YxMjQzQTVG
M0FGRjgxMDcwMB4XDTE5MDYwMzA5MTYyMFoXDTI5MDYzMDA5MTYyMFowGDEWMBQG
A1UEAxMNNWNmNGU1NjktMTc2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMbZvppU0w8vwNfvtbpuOprtTRH5i4C22diQjQcyFgH8DjQavE2EoPKk6fze
Zrh4l0lS/5RhIdQpvWsWrZRijfRe2mKZ2+pQkeANEJiWOQNM3SjkZdbktVT+5N1H
KHkbAbdYxP0uTRcl9wxFsF6wUOn2Rndf5lrcCGScNx3fxXReW0KvREw1FZ+VhFwd
XrnK2ps+saYzjZCbnlj3zm2vtRaEZHjuC1WsyuKWZX+pDFTLrceBmmi+ApdRvBsd
Sh75e/Y4kBL76LA/GS7IewY55rbiCaoQ/8nag1g0K/rXEz+7KN/NuBUjZfpnH+PG
JORPXgYu3Bp/Q+ToNESDWTU7KicCAwEAAaOCAmswggJnMB0GA1UdDgQWBBQBGrZg
WYYkoaJelp1EDIB73SJxnTAfBgNVHSMEGDAWgBSoQHxQ01USaVldhM8SQ6Xzr/gQ
cDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NUM4OTUvRjQyMEM2QTQ4NURDMTFFOTgwODdCRjBCRjhBRUEyMjgvcUVCOFVO
TlZFbWxaWFlUUEVrT2w4Nl80RUhBLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L3JpcGUv
cUVCOFVOTlZFbWxaWFlUUEVrT2w4Nl80RUhBLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NUM4OTUvRjQyMEM2QTQ4NURDMTFFOTgwODdCRjBCRjhBRUEy
MjgvNDJFMERGN0U4NUUwMTFFOTg5RTRDRjBERjhBRUEyMjgucm9hMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAUFgLMA0GCSqGSIb3DQEBCwUAA4IBAQB0oyhv
oGY0MZOvy/ryGQBrRyuP8neD4FhUWNgAcIPLqB4BZrT/uvzceam4nJ7RbSvqlq43
8KLsx9rmgvaWlrBwuJDVxxSlGA0I1LHkfNDzpuVaGgvXGdf8gArNvcNDNrQRAcYU
HTJmhWsgMzGgiinRRnHwO0a856TdsfboyCnPAm8Vk+cTJrV9Abd127fTfZzVpNDj
yqWV1tyavgTrwGXFhQUKuA2w5Uvo9ddR8sT5FVNzYlM9neldfg2fJQ4FUokg9ATy
b8iwB0dhgwRNfN8feexUQr09CliMsepBa0aPgK9GXC1WxD87jQhm9+YvMCTb/Zyd
oBe/TFlUmPgdfl2K
-----END CERTIFICATE-----
Generated at Wed May 8 02:08:58 2024 by rpki-client on console-ams.rpki-client.org