Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/FB9A12F48E0211E9B8ABE44BF8AEA228.roa
File: FB9A12F48E0211E9B8ABE44BF8AEA228.roa (raw, json)
Hash identifier: Gatab+2uv5qKhboPXwi4ii30P6zNxnvir8uQqIaNONc=
Subject key identifier: C6:CC:B9:4A:A8:AA:C4:13:72:09:F2:26:2D:E5:20:FE:33:A4:0E:36
Certificate issuer: /CN=F36F56CAAR/serialNumber=9831B838BE2B90047CE52BD425A08295D4361EF2
Certificate serial: 02
Authority key identifier: 98:31:B8:38:BE:2B:90:04:7C:E5:2B:D4:25:A0:82:95:D4:36:1E:F2
Authority info access: rsync://rpki.afrinic.net/repository/arin/mDG4OL4rkAR85SvUJaCCldQ2HvI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/FB9A12F48E0211E9B8ABE44BF8AEA228.roa
Signing time: Thu 13 Jun 2019 17:45:08 +0000
ROA not before: Thu 13 Jun 2019 17:44:51 +0000
ROA not after: Mon 30 Jun 2025 17:44:51 +0000
asID: 328037
IP address blocks: 164.160.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft
rsync://rpki.afrinic.net/repository/arin/mDG4OL4rkAR85SvUJaCCldQ2HvI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F56CAAR/serialNumber=9831B838BE2B90047CE52BD425A08295D4361EF2
Validity
Not Before: Jun 13 17:44:51 2019 GMT
Not After : Jun 30 17:44:51 2025 GMT
Subject: CN=5d028ba3-98ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:1d:7f:64:65:ab:77:fd:4f:71:18:70:15:
9a:75:e5:98:b0:77:53:98:38:d4:62:b3:9f:6f:a0:
72:a5:b7:44:d9:e1:c7:d2:f5:83:0b:ef:01:fb:fe:
5e:1e:9a:41:a2:40:44:ac:b5:e1:4c:81:81:a1:11:
49:a5:ee:d9:ae:8f:ee:4d:85:16:dd:56:09:14:1b:
a0:ad:25:7e:64:0d:c3:53:dc:ec:49:62:3e:ab:d2:
a8:de:4c:3c:60:cf:93:ab:09:e0:3d:b3:8f:ba:c0:
9f:e9:09:8c:2c:cc:1e:ee:c2:d2:c0:7e:79:18:c6:
e2:b7:9f:ef:23:62:8f:2e:9e:b8:a1:86:df:87:14:
6f:a3:da:97:e4:40:2d:44:02:06:f8:e3:ec:7d:d2:
7f:c6:9f:22:c7:b7:28:65:57:30:17:02:a1:99:e1:
5f:a9:2b:04:db:24:39:59:89:b1:ba:13:54:8e:e3:
aa:9a:f4:f3:3e:c9:a2:5b:41:1a:75:92:e7:55:c1:
02:1e:19:bb:10:b2:57:ce:05:df:42:47:8c:e7:b3:
68:85:dc:b4:e7:11:02:4a:40:27:b2:d8:84:2d:cf:
46:92:a1:34:f6:65:69:99:d1:fe:fd:47:77:5d:88:
61:b6:20:0b:13:c9:b2:2b:d7:60:7e:70:c7:d5:00:
ab:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CC:B9:4A:A8:AA:C4:13:72:09:F2:26:2D:E5:20:FE:33:A4:0E:36
X509v3 Authority Key Identifier:
keyid:98:31:B8:38:BE:2B:90:04:7C:E5:2B:D4:25:A0:82:95:D4:36:1E:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/mDG4OL4rkAR85SvUJaCCldQ2HvI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/FB9A12F48E0211E9B8ABE44BF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
164.160.88.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:26:ba:68:e0:84:26:7d:74:c9:66:c0:40:5b:14:07:c2:11:
d4:f4:78:6c:3c:0f:2f:9a:6d:f9:52:c4:07:8e:8d:68:61:50:
62:3f:67:d6:7b:ad:67:d1:52:21:81:9d:82:03:1d:97:9d:33:
22:70:48:be:5c:a8:d1:e1:0a:07:93:01:7e:3a:47:f4:c8:54:
97:af:84:cf:d9:3b:58:c7:88:49:88:9f:14:0b:88:48:94:a0:
bb:5e:82:16:ef:b3:c3:da:1c:3e:ee:de:c8:d0:d9:81:41:fc:
5c:9d:39:5d:da:a2:84:57:25:75:4a:07:58:2c:f9:c7:72:e4:
b1:be:d5:eb:0c:db:74:89:9a:cf:c2:39:09:f8:b2:29:6d:c8:
42:f0:7e:3b:e4:23:ee:75:b8:ec:2b:95:30:53:52:24:d3:7c:
66:6f:1c:ea:ad:b9:a0:67:dc:c0:60:3e:b0:8f:4f:a8:3b:06:
9d:46:e1:ce:fb:78:dd:84:69:5a:88:af:ec:42:96:53:93:7e:
a7:94:03:36:d4:a2:58:5c:d1:c8:4d:06:ae:dd:b7:26:aa:5b:
75:3c:3c:c4:dc:8d:62:58:c0:f5:c5:70:42:a8:03:46:e0:05:
b2:c1:31:2b:ff:c8:6e:73:af:ec:f4:a6:87:72:46:6b:88:f6:
73:15:e4:27
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZG
NTZDQUFSMTEwLwYDVQQFEyg5ODMxQjgzOEJFMkI5MDA0N0NFNTJCRDQyNUEwODI5
NUQ0MzYxRUYyMB4XDTE5MDYxMzE3NDQ1MVoXDTI1MDYzMDE3NDQ1MVowGDEWMBQG
A1UEAxMNNWQwMjhiYTMtOThlYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALppHX9kZat3/U9xGHAVmnXlmLB3U5g41GKzn2+gcqW3RNnhx9L1gwvvAfv+
Xh6aQaJARKy14UyBgaERSaXu2a6P7k2FFt1WCRQboK0lfmQNw1Pc7EliPqvSqN5M
PGDPk6sJ4D2zj7rAn+kJjCzMHu7C0sB+eRjG4ref7yNijy6euKGG34cUb6Pal+RA
LUQCBvjj7H3Sf8afIse3KGVXMBcCoZnhX6krBNskOVmJsboTVI7jqpr08z7JoltB
GnWS51XBAh4ZuxCyV84F30JHjOezaIXctOcRAkpAJ7LYhC3PRpKhNPZlaZnR/v1H
d12IYbYgCxPJsivXYH5wx9UAq/kCAwEAAaOCAmswggJnMB0GA1UdDgQWBBTGzLlK
qKrEE3IJ8iYt5SD+M6QONjAfBgNVHSMEGDAWgBSYMbg4viuQBHzlK9QloIKV1DYe
8jAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjU2Q0EvMEQwNTZDRDQ4RTAxMTFFOTg1MTk2NDRBRjhBRUEyMjgvbURHNE9M
NHJrQVI4NVN2VUphQ0NsZFEySHZJLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
bURHNE9MNHJrQVI4NVN2VUphQ0NsZFEySHZJLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RjU2Q0EvMEQwNTZDRDQ4RTAxMTFFOTg1MTk2NDRBRjhBRUEy
MjgvRkI5QTEyRjQ4RTAyMTFFOUI4QUJFNDRCRjhBRUEyMjgucm9hMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCpKBYMA0GCSqGSIb3DQEBCwUAA4IBAQBcJrpo
4IQmfXTJZsBAWxQHwhHU9HhsPA8vmm35UsQHjo1oYVBiP2fWe61n0VIhgZ2CAx2X
nTMicEi+XKjR4QoHkwF+Okf0yFSXr4TP2TtYx4hJiJ8UC4hIlKC7XoIW77PD2hw+
7t7I0NmBQfxcnTld2qKEVyV1SgdYLPnHcuSxvtXrDNt0iZrPwjkJ+LIpbchC8H47
5CPudbjsK5UwU1Ik03xmbxzqrbmgZ9zAYD6wj0+oOwadRuHO+3jdhGlaiK/sQpZT
k36nlAM21KJYXNHITQau3bcmqlt1PDzE3I1iWMD1xXBCqANG4AWywTEr/8huc6/s
9KaHckZriPZzFeQn
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:00:16 2024 by rpki-client on console-fra.rpki-client.org