Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/9B2E5DCE546F11EA917E7080F8AEA228.roa
File: 9B2E5DCE546F11EA917E7080F8AEA228.roa (raw, json)
Hash identifier: V2IvMzllcmdIdSPHRG7fr6xcXNEuA636N0F8/oRZyr8=
Subject key identifier: AA:B0:1A:F3:8A:4C:B9:C7:37:70:3E:E7:28:F6:EE:D2:FE:DF:24:94
Certificate issuer: /CN=F36D289CRI/serialNumber=6F29C9BCC0249520E5070669FAF666526F7C8F30
Certificate serial: E2
Authority key identifier: 6F:29:C9:BC:C0:24:95:20:E5:07:06:69:FA:F6:66:52:6F:7C:8F:30
Authority info access: rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/9B2E5DCE546F11EA917E7080F8AEA228.roa
Signing time: Fri 21 Feb 2020 06:01:31 +0000
ROA not before: Fri 21 Feb 2020 06:01:26 +0000
ROA not after: Fri 28 Feb 2025 06:01:26 +0000
asID: 327754
IP address blocks: 80.95.0.0/22 maxlen: 24
80.95.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Jun 2024 00:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D289CRI/serialNumber=6F29C9BCC0249520E5070669FAF666526F7C8F30
Validity
Not Before: Feb 21 06:01:26 2020 GMT
Not After : Feb 28 06:01:26 2025 GMT
Subject: CN=5e4f723b-c928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:99:92:b0:e7:c4:c5:00:f1:e8:6c:62:dc:03:
e7:4b:d5:bf:dc:fa:75:51:49:08:a3:a1:b1:70:e5:
d2:ab:ac:1d:f5:f1:68:3e:2e:b5:a8:0a:0b:fa:39:
f9:0a:5a:5c:dc:2a:d2:a2:87:0d:df:2a:44:26:0e:
44:30:99:6e:a1:c1:c8:16:90:cc:e7:06:4f:98:67:
76:93:d8:fa:da:ee:3c:a2:cd:14:c6:66:e7:b9:6d:
00:a7:12:e8:eb:85:3a:d3:2b:7c:b1:42:a6:15:92:
28:b7:4a:c3:1d:55:4f:5d:ad:bf:af:57:e6:8a:67:
17:d5:79:30:3c:90:4c:fe:dd:f9:17:2b:8b:9b:24:
70:67:11:88:6e:88:57:10:5e:7f:91:fa:39:ac:eb:
b5:d3:16:4c:17:4e:ea:af:55:d0:52:c5:58:bc:fc:
e0:67:77:84:62:ab:86:d3:24:95:34:6c:ac:f4:ee:
23:73:b1:b5:f7:79:2e:5e:ab:48:de:68:e9:03:47:
b3:dd:5b:c8:67:56:06:77:0b:03:18:28:bb:73:d2:
1e:0b:2a:dd:d7:e6:22:82:72:ec:ec:3c:31:51:fd:
3e:b6:62:10:3e:5a:16:14:31:d6:3f:06:1a:22:d1:
92:fe:38:e8:20:49:77:16:00:dc:21:5c:81:c8:4e:
a1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B0:1A:F3:8A:4C:B9:C7:37:70:3E:E7:28:F6:EE:D2:FE:DF:24:94
X509v3 Authority Key Identifier:
keyid:6F:29:C9:BC:C0:24:95:20:E5:07:06:69:FA:F6:66:52:6F:7C:8F:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/9B2E5DCE546F11EA917E7080F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
80.95.0.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:8e:9a:63:94:dd:74:af:0c:9d:a8:f5:54:28:45:42:af:48:
d7:06:65:c6:14:ad:ab:a9:0e:e3:70:23:30:0c:d4:2e:08:04:
2c:4d:c5:8b:39:c6:75:d5:90:c2:aa:c4:60:11:f4:9d:c1:42:
9e:d2:d1:19:34:36:1d:c6:de:bd:f0:e6:f2:ea:12:30:5a:2c:
43:41:6d:f7:3f:5c:53:3f:73:f9:c0:ee:59:82:ca:36:ab:4d:
d4:0f:4a:fd:0c:ab:32:6d:50:cb:03:a5:0a:77:43:6e:97:bf:
1a:ba:25:d2:a4:23:57:2d:07:f7:c3:e9:90:52:25:5c:a1:19:
c4:b7:20:c4:e8:6e:4c:6b:11:50:17:8a:be:00:84:60:ff:b2:
32:3c:7c:a6:6e:b9:4f:72:78:c4:93:c2:b4:43:1d:d7:8b:c7:
f0:46:5e:32:a4:31:d1:95:7c:6a:97:5e:2e:29:ae:a0:91:62:
33:00:46:d1:18:a4:ce:ce:4f:f7:c8:7e:d8:c5:c1:95:cf:fe:
f8:93:48:4b:90:69:6a:16:5f:db:9b:fc:11:49:f4:75:18:e5:
ed:30:f1:35:1a:0d:1b:7e:af:3e:6b:8a:84:df:cd:6a:5a:7d:
ff:73:ea:43:92:48:70:7b:21:1c:12:29:5e:1f:ef:b0:18:42:
14:36:c7:50
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDI4OUNSSTExMC8GA1UEBRMoNkYyOUM5QkNDMDI0OTUyMEU1MDcwNjY5RkFGNjY2
NTI2RjdDOEYzMDAeFw0yMDAyMjEwNjAxMjZaFw0yNTAyMjgwNjAxMjZaMBgxFjAU
BgNVBAMTDTVlNGY3MjNiLWM5MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFmZKw58TFAPHobGLcA+dL1b/c+nVRSQijobFw5dKrrB318Wg+LrWoCgv6
OfkKWlzcKtKihw3fKkQmDkQwmW6hwcgWkMznBk+YZ3aT2Pra7jyizRTGZue5bQCn
EujrhTrTK3yxQqYVkii3SsMdVU9drb+vV+aKZxfVeTA8kEz+3fkXK4ubJHBnEYhu
iFcQXn+R+jms67XTFkwXTuqvVdBSxVi8/OBnd4Riq4bTJJU0bKz07iNzsbX3eS5e
q0jeaOkDR7PdW8hnVgZ3CwMYKLtz0h4LKt3X5iKCcuzsPDFR/T62YhA+WhYUMdY/
Bhoi0ZL+OOggSXcWANwhXIHITqFhAgMBAAGjggJrMIICZzAdBgNVHQ4EFgQUqrAa
84pMucc3cD7nKPbu0v7fJJQwHwYDVR0jBBgwFoAUbynJvMAklSDlBwZp+vZmUm98
jzAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQyODlDLzEyRkFCOTYyQTg3NTExRTk5Mjg1Qzc0NUY4QUVBMjI4L2J5bkp2
TUFrbFNEbEJ3WnAtdlptVW05OGp6QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L2J5bkp2TUFrbFNEbEJ3WnAtdlptVW05OGp6QS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkQyODlDLzEyRkFCOTYyQTg3NTExRTk5Mjg1Qzc0NUY4QUVB
MjI4LzlCMkU1RENFNTQ2RjExRUE5MTdFNzA4MEY4QUVBMjI4LnJvYTAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA1BfADANBgkqhkiG9w0BAQsFAAOCAQEAf46a
Y5TddK8Mnaj1VChFQq9I1wZlxhStq6kO43AjMAzULggELE3FiznGddWQwqrEYBH0
ncFCntLRGTQ2HcbevfDm8uoSMFosQ0Ft9z9cUz9z+cDuWYLKNqtN1A9K/QyrMm1Q
ywOlCndDbpe/Grol0qQjVy0H98PpkFIlXKEZxLcgxOhuTGsRUBeKvgCEYP+yMjx8
pm65T3J4xJPCtEMd14vH8EZeMqQx0ZV8apdeLimuoJFiMwBG0Rikzs5P98h+2MXB
lc/++JNIS5BpahZf25v8EUn0dRjl7TDxNRoNG36vPmuKhN/Nalp9/3PqQ5JIcHsh
HBIpXh/vsBhCFDbHUA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 01:45:56 2024 by rpki-client on console-fra.rpki-client.org