Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0163/9D9820A4FC9A11E9A58BD73DF8AEA228/A8193972FCA011E986735342F8AEA228.roa
File: A8193972FCA011E986735342F8AEA228.roa (raw, json)
Hash identifier: sPw5LOyY+Urz9KZ/d5LVGl7SkJuhJf6qwj5Bd4j3cp4=
Subject key identifier: 0D:06:75:DC:B8:D7:FF:32:E1:6E:4B:9F:72:EB:F9:AF:BF:FD:6A:13
Certificate issuer: /CN=F36F0163AR/serialNumber=7F162A52116D256CF5D7412977B8EA8A4F2CB9E3
Certificate serial: 02
Authority key identifier: 7F:16:2A:52:11:6D:25:6C:F5:D7:41:29:77:B8:EA:8A:4F:2C:B9:E3
Authority info access: rsync://rpki.afrinic.net/repository/arin/fxYqUhFtJWz110Epd7jqik8sueM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0163/9D9820A4FC9A11E9A58BD73DF8AEA228/A8193972FCA011E986735342F8AEA228.roa
Signing time: Fri 01 Nov 2019 12:10:56 +0000
ROA not before: Fri 01 Nov 2019 12:10:51 +0000
ROA not after: Thu 01 Nov 2029 12:10:51 +0000
asID: 37682
IP address blocks: 169.239.192.0/24 maxlen: 24
169.239.193.0/24 maxlen: 24
169.239.194.0/24 maxlen: 24
169.239.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F0163/9D9820A4FC9A11E9A58BD73DF8AEA228/fxYqUhFtJWz110Epd7jqik8sueM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F0163/9D9820A4FC9A11E9A58BD73DF8AEA228/fxYqUhFtJWz110Epd7jqik8sueM.mft
rsync://rpki.afrinic.net/repository/arin/fxYqUhFtJWz110Epd7jqik8sueM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 25 Jun 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0163AR/serialNumber=7F162A52116D256CF5D7412977B8EA8A4F2CB9E3
Validity
Not Before: Nov 1 12:10:51 2019 GMT
Not After : Nov 1 12:10:51 2029 GMT
Subject: CN=5dbc20d0-30af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6b:4a:28:28:4c:27:54:ef:3e:2f:73:e3:d3:
c9:b2:04:f8:4d:6d:80:d1:6c:94:18:c1:d7:0b:df:
39:23:49:0c:70:00:0b:4e:f0:59:a0:1a:c0:a4:ef:
24:dd:5b:09:69:cc:52:7c:cb:cb:9b:f8:84:33:81:
1a:12:ea:7e:ef:e6:e6:41:b5:4d:7e:8e:c0:b0:66:
48:2b:92:2c:be:2c:a0:2f:40:67:52:30:33:e9:15:
90:40:e2:9f:05:49:1e:b3:da:b3:4c:0c:45:59:a4:
49:25:86:e4:5e:44:28:39:f1:f1:4a:9c:9c:c9:06:
99:be:39:c8:47:d7:fc:b9:9b:11:be:d8:ca:4e:cf:
b6:c3:20:22:0e:bc:15:c4:47:26:a7:d6:e4:54:67:
93:f3:83:a7:1e:b9:80:1e:d8:fd:17:4f:ca:f8:13:
65:2c:15:12:18:72:e7:d0:ca:df:00:78:43:56:8c:
00:4a:51:dc:49:ca:db:b9:d1:8d:91:3b:da:44:ff:
c8:53:85:4a:36:b2:5c:c6:62:50:fa:3c:36:e8:6a:
8d:16:ee:4e:70:54:57:c7:9d:e6:d0:f7:10:1c:1f:
d8:5b:de:15:01:9e:98:f3:ba:43:dd:18:fe:92:71:
78:46:73:aa:3b:10:2a:9e:e7:9e:bc:82:ee:a6:81:
52:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:06:75:DC:B8:D7:FF:32:E1:6E:4B:9F:72:EB:F9:AF:BF:FD:6A:13
X509v3 Authority Key Identifier:
keyid:7F:16:2A:52:11:6D:25:6C:F5:D7:41:29:77:B8:EA:8A:4F:2C:B9:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0163/9D9820A4FC9A11E9A58BD73DF8AEA228/fxYqUhFtJWz110Epd7jqik8sueM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fxYqUhFtJWz110Epd7jqik8sueM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0163/9D9820A4FC9A11E9A58BD73DF8AEA228/A8193972FCA011E986735342F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
169.239.192.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:eb:4c:04:06:8d:41:02:87:57:89:e4:03:89:67:4c:1b:28:
6c:98:56:49:09:24:21:b9:1b:a4:ae:13:86:b2:37:71:86:6c:
7b:d6:04:ec:ce:20:bf:19:f8:7b:c7:f5:10:e9:65:43:b9:ad:
d1:c3:86:65:fe:ef:64:d2:a0:09:ea:97:a7:c7:5d:a5:24:97:
01:48:cc:fc:48:6c:74:7e:80:be:28:0f:94:5f:49:fd:af:19:
27:d6:33:b0:d4:c6:44:c4:62:ac:ab:f1:46:12:36:e7:97:e5:
f4:68:1d:66:59:d1:4a:9d:dd:76:46:15:b9:d1:22:3f:d9:f0:
73:d9:7e:a5:39:5c:a3:d4:df:c5:56:62:11:1c:66:ed:b5:ee:
70:6c:e8:33:27:f8:9a:d1:6c:68:58:ef:d8:db:af:5f:7a:f7:
42:b2:39:f4:1b:96:ca:64:e4:5b:e3:1a:2d:31:0a:9b:a8:69:
68:c0:fe:b8:48:4f:f6:a7:f9:b7:73:75:b5:cb:e1:d4:36:c1:
c2:3b:aa:52:ee:7a:0f:22:94:11:8a:ff:58:ef:f8:60:58:8b:
53:c6:a4:82:aa:0c:79:cd:57:45:88:ab:42:96:8d:e4:53:07:
ea:1f:8c:c1:c0:f2:01:06:61:80:52:e6:ff:c7:a3:84:99:0e:
fe:62:81:c6
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZG
MDE2M0FSMTEwLwYDVQQFEyg3RjE2MkE1MjExNkQyNTZDRjVENzQxMjk3N0I4RUE4
QTRGMkNCOUUzMB4XDTE5MTEwMTEyMTA1MVoXDTI5MTEwMTEyMTA1MVowGDEWMBQG
A1UEAxMNNWRiYzIwZDAtMzBhZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANFrSigoTCdU7z4vc+PTybIE+E1tgNFslBjB1wvfOSNJDHAAC07wWaAawKTv
JN1bCWnMUnzLy5v4hDOBGhLqfu/m5kG1TX6OwLBmSCuSLL4soC9AZ1IwM+kVkEDi
nwVJHrPas0wMRVmkSSWG5F5EKDnx8UqcnMkGmb45yEfX/LmbEb7Yyk7PtsMgIg68
FcRHJqfW5FRnk/ODpx65gB7Y/RdPyvgTZSwVEhhy59DK3wB4Q1aMAEpR3EnK27nR
jZE72kT/yFOFSjayXMZiUPo8NuhqjRbuTnBUV8ed5tD3EBwf2FveFQGemPO6Q90Y
/pJxeEZzqjsQKp7nnryC7qaBUjsCAwEAAaOCAmswggJnMB0GA1UdDgQWBBQNBnXc
uNf/MuFuS59y6/mvv/1qEzAfBgNVHSMEGDAWgBR/FipSEW0lbPXXQSl3uOqKTyy5
4zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjAxNjMvOUQ5ODIwQTRGQzlBMTFFOUE1OEJENzNERjhBRUEyMjgvZnhZcVVo
RnRKV3oxMTBFcGQ3anFpazhzdWVNLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
ZnhZcVVoRnRKV3oxMTBFcGQ3anFpazhzdWVNLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RjAxNjMvOUQ5ODIwQTRGQzlBMTFFOUE1OEJENzNERjhBRUEy
MjgvQTgxOTM5NzJGQ0EwMTFFOTg2NzM1MzQyRjhBRUEyMjgucm9hMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCqe/AMA0GCSqGSIb3DQEBCwUAA4IBAQAP60wE
Bo1BAodXieQDiWdMGyhsmFZJCSQhuRukrhOGsjdxhmx71gTsziC/Gfh7x/UQ6WVD
ua3Rw4Zl/u9k0qAJ6penx12lJJcBSMz8SGx0foC+KA+UX0n9rxkn1jOw1MZExGKs
q/FGEjbnl+X0aB1mWdFKnd12RhW50SI/2fBz2X6lOVyj1N/FVmIRHGbtte5wbOgz
J/ia0WxoWO/Y269fevdCsjn0G5bKZORb4xotMQqbqGlowP64SE/2p/m3c3W1y+HU
NsHCO6pS7noPIpQRiv9Y7/hgWItTxqSCqgx5zVdFiKtClo3kUwfqH4zBwPIBBmGA
Uub/x6OEmQ7+YoHG
-----END CERTIFICATE-----
Generated at Sun Jun 23 02:50:44 2024 by rpki-client on console-fra.rpki-client.org