Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/B217A2825A6611EAB1529D4BF8AEA228.roa
File:                     B217A2825A6611EAB1529D4BF8AEA228.roa (raw, json)
Hash identifier:          vzveyzJlprOUydarhesuSRbAJ+Ui96qsAven0yoHfa4=
Subject key identifier:   23:22:A3:78:7B:0C:8F:F3:5D:BF:78:74:61:8B:02:B4:B0:71:DD:BC
Certificate issuer:       /CN=F36B70EFAF/serialNumber=D0BE67D045B33F05A5871510399E709C98F6D77D
Certificate serial:       02
Authority key identifier: D0:BE:67:D0:45:B3:3F:05:A5:87:15:10:39:9E:70:9C:98:F6:D7:7D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0L5n0EWzPwWlhxUQOZ5wnJj2130.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/B217A2825A6611EAB1529D4BF8AEA228.roa
Signing time:             Fri 28 Feb 2020 20:12:51 +0000
ROA not before:           Fri 28 Feb 2020 20:12:47 +0000
ROA not after:            Thu 28 Feb 2030 20:12:47 +0000
asID:                     328337
IP address blocks:        102.134.64.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/0L5n0EWzPwWlhxUQOZ5wnJj2130.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/0L5n0EWzPwWlhxUQOZ5wnJj2130.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0L5n0EWzPwWlhxUQOZ5wnJj2130.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 31 Mar 2024 00:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B70EFAF/serialNumber=D0BE67D045B33F05A5871510399E709C98F6D77D
        Validity
            Not Before: Feb 28 20:12:47 2020 GMT
            Not After : Feb 28 20:12:47 2030 GMT
        Subject: CN=5e597443-64a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:22:75:f2:7c:b4:5d:87:74:9e:8c:32:3d:87:
                    34:e3:ef:f7:eb:6d:dd:1d:7b:67:f7:10:9b:05:cb:
                    53:2a:10:c9:ae:f6:bc:4f:14:d6:c3:28:de:94:5d:
                    31:45:0e:b6:1f:de:ad:a6:2f:31:ea:75:9d:bf:d6:
                    8e:27:03:c2:e2:c9:a1:eb:14:a3:a3:03:eb:76:2a:
                    ca:d5:b1:78:f8:ef:96:ba:87:49:d9:d6:8a:88:98:
                    d8:76:ea:7b:f5:4b:28:93:69:19:e6:74:f6:eb:dc:
                    0c:0c:9a:74:90:9c:99:18:f3:81:81:ef:84:19:a6:
                    4f:fc:03:d1:e4:60:fe:77:b6:9f:21:00:d4:a6:03:
                    2f:8c:e1:28:7b:cb:54:d4:00:0e:fa:8b:fc:76:6b:
                    95:dc:f3:1c:b3:f0:21:ff:eb:ff:6e:0f:c5:c7:a6:
                    65:3a:06:4e:5a:31:18:b2:8c:92:27:70:b4:ad:e3:
                    ca:8b:4f:60:c9:85:12:34:27:f5:7c:3d:d4:5b:2c:
                    ee:b5:0c:40:4a:8c:56:2b:53:4f:cb:3c:26:8b:55:
                    6d:c4:1d:de:99:7e:d8:19:01:c0:1e:36:4c:b4:8a:
                    0e:ce:f3:1d:0e:97:8f:08:a5:65:73:d4:3c:74:4a:
                    ab:5f:57:1d:29:07:41:59:57:fd:83:55:0e:34:ed:
                    3a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:22:A3:78:7B:0C:8F:F3:5D:BF:78:74:61:8B:02:B4:B0:71:DD:BC
            X509v3 Authority Key Identifier:
                keyid:D0:BE:67:D0:45:B3:3F:05:A5:87:15:10:39:9E:70:9C:98:F6:D7:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/0L5n0EWzPwWlhxUQOZ5wnJj2130.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0L5n0EWzPwWlhxUQOZ5wnJj2130.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/B217A2825A6611EAB1529D4BF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.134.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         92:8d:22:a4:3f:e3:77:80:5c:11:bc:41:ed:00:f9:33:d0:45:
         98:a4:d5:e5:fe:09:24:a1:27:48:4e:ba:01:7f:80:2c:db:e2:
         48:09:d8:2e:2e:8e:4c:f2:ff:35:2f:db:4f:aa:b0:37:6d:57:
         72:b0:dc:b9:31:68:16:58:a2:ce:15:6f:7b:9c:3e:b0:fb:d5:
         63:62:12:02:49:03:0e:a6:31:aa:89:cb:7a:51:ce:04:d1:aa:
         28:72:0c:0b:57:26:88:90:9a:b5:70:35:2f:4a:0f:6b:2b:56:
         90:d2:a4:12:05:28:b8:43:33:d7:45:99:47:9f:a3:32:90:56:
         cf:94:9a:3c:35:fc:04:d8:65:39:29:8f:c2:6c:52:e7:b5:12:
         76:d6:a2:72:ab:61:a3:b0:aa:dc:b6:70:fb:dc:98:98:14:97:
         e5:4b:5f:c3:b2:d9:d1:3c:06:ad:ab:9e:5f:a4:a6:db:ba:a3:
         a3:64:50:f5:21:c3:a5:97:2c:c8:13:5f:65:14:35:50:47:9d:
         08:04:59:de:40:ed:22:64:08:c2:0a:72:43:b8:ea:94:be:c8:
         cc:1a:e5:ff:69:6c:7c:c2:37:89:93:ae:d3:d6:21:24:ee:e4:
         9a:39:c9:a7:1e:04:76:ee:f9:21:ee:b5:2e:64:c3:e5:61:ca:
         60:d9:3e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:19:15 2024 by rpki-client on console-ams.rpki-client.org