Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/475635345CFC11EE8839D6454AD9E6FC.roa
File: 475635345CFC11EE8839D6454AD9E6FC.roa (raw, json)
Hash identifier: Vpxyb9rvlAtF95jj5ry+uXRBp7X51uxZVYTnk/Yhmmo=
Subject key identifier: ED:9D:B2:04:9F:BA:05:55:55:46:C9:5A:56:FE:E6:76:C8:01:B3:6D
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0C17
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/475635345CFC11EE8839D6454AD9E6FC.roa
Signing time: Wed 27 Sep 2023 06:08:29 +0000
ROA not before: Wed 27 Sep 2023 06:08:26 +0000
ROA not after: Mon 30 Sep 2030 06:08:26 +0000
asID: 203020
IP address blocks: 161.123.208.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3095 (0xc17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 27 06:08:26 2023 GMT
Not After : Sep 30 06:08:26 2030 GMT
Subject: CN=6513c6dd-bd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7a:4d:68:0d:cd:38:12:22:8f:85:d6:78:b5:
e8:91:a0:3f:5f:71:78:ae:b0:29:f9:e4:af:75:18:
8a:01:86:bb:c9:30:66:df:a7:68:f4:16:90:7d:cc:
bb:01:3f:c4:18:9c:6c:6a:1a:dc:12:07:c3:09:96:
6a:03:52:45:7b:4a:89:f9:9d:cc:37:a0:2a:a8:07:
09:b9:92:68:5d:02:a9:46:18:21:7c:e0:16:6d:5e:
8b:fd:31:53:14:5b:0a:8a:4a:77:db:1b:38:d7:72:
4f:5b:55:c1:61:34:5b:bf:51:55:96:7b:03:ee:6d:
3b:9a:7d:90:cc:7e:ad:bd:e4:d2:f2:67:28:3f:fe:
cb:9b:1e:ef:a0:1c:7d:14:8c:67:64:1d:3f:f9:c5:
12:ef:80:f7:74:0a:8c:97:f7:57:e1:96:a3:c7:af:
86:82:7b:01:e7:42:ed:f3:db:dc:e0:65:e0:65:f1:
ec:c7:ce:8a:30:58:33:07:7a:9c:95:af:ed:70:ee:
f3:42:ca:8e:a9:09:ca:fd:98:62:52:89:cc:9b:f3:
05:21:c0:81:5a:3a:cf:18:8b:5c:2e:a1:94:e4:60:
ac:c2:c1:53:6b:f7:28:8d:43:31:68:f8:1a:f9:47:
7b:e8:58:05:33:bd:fe:d4:82:64:de:73:88:cd:fd:
15:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9D:B2:04:9F:BA:05:55:55:46:C9:5A:56:FE:E6:76:C8:01:B3:6D
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/475635345CFC11EE8839D6454AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.208.0/23
Signature Algorithm: sha256WithRSAEncryption
65:da:b6:10:80:21:03:db:57:96:e3:4e:86:16:85:d6:37:31:
9e:39:3d:84:c5:b8:59:f2:47:0b:53:49:28:3b:3b:06:3c:4e:
49:e1:dc:d6:a7:6f:da:d4:a6:41:c0:92:7b:3b:c9:03:39:cc:
02:53:02:f4:e2:40:d7:54:6d:11:b6:b8:f1:9a:03:c0:e7:96:
62:9b:eb:8a:4f:bf:b1:b7:6e:0f:8e:1a:41:72:eb:d1:48:c6:
17:3e:50:70:fa:80:7f:fd:33:53:89:08:52:30:91:84:d5:82:
e9:99:58:7e:0a:56:fe:fc:de:28:db:be:0d:65:51:34:38:c1:
e8:67:b6:f6:8b:da:df:6e:e8:9f:e3:ca:0e:44:32:d2:d8:5a:
0d:e6:76:4e:bb:88:3e:f2:60:1d:eb:60:d2:3a:04:96:df:bf:
f7:69:f8:98:2a:af:94:d6:81:87:e2:80:d9:17:00:09:8a:31:
9d:74:49:e3:a1:da:00:c9:67:1b:8f:9b:b6:1a:c9:e4:6a:87:
94:0a:23:f9:0c:dc:e0:fb:a8:48:ee:fd:7a:aa:b7:ae:4d:ca:
23:81:56:69:ef:1e:1a:3b:3f:e5:85:43:75:96:64:cb:c7:de:
fa:b2:5b:57:10:ca:11:3f:30:24:62:89:02:c5:7e:5a:e5:67:
9e:d1:8a:55
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDBcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMzA5MjcwNjA4MjZaFw0zMDA5MzAwNjA4MjZaMBgxFjAU
BgNVBAMTDTY1MTNjNmRkLWJkNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDdek1oDc04EiKPhdZ4teiRoD9fcXiusCn55K91GIoBhrvJMGbfp2j0FpB9
zLsBP8QYnGxqGtwSB8MJlmoDUkV7Son5ncw3oCqoBwm5kmhdAqlGGCF84BZtXov9
MVMUWwqKSnfbGzjXck9bVcFhNFu/UVWWewPubTuafZDMfq295NLyZyg//subHu+g
HH0UjGdkHT/5xRLvgPd0CoyX91fhlqPHr4aCewHnQu3z29zgZeBl8ezHzoowWDMH
epyVr+1w7vNCyo6pCcr9mGJSicyb8wUhwIFaOs8Yi1wuoZTkYKzCwVNr9yiNQzFo
+Br5R3voWAUzvf7UgmTec4jN/RUNAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU7Z2y
BJ+6BVVVRslaVv7mdsgBs20wHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzQ3NTYzNTM0NUNGQzExRUU4ODM5RDY0NTRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGhe9AwDQYJKoZIhvcNAQELBQAD
ggEBAGXathCAIQPbV5bjToYWhdY3MZ45PYTFuFnyRwtTSSg7OwY8Tknh3Nanb9rU
pkHAkns7yQM5zAJTAvTiQNdUbRG2uPGaA8DnlmKb64pPv7G3bg+OGkFy69FIxhc+
UHD6gH/9M1OJCFIwkYTVgumZWH4KVv783ijbvg1lUTQ4wehntvaL2t9u6J/jyg5E
MtLYWg3mdk67iD7yYB3rYNI6BJbfv/dp+Jgqr5TWgYfigNkXAAmKMZ10SeOh2gDJ
ZxuPm7YayeRqh5QKI/kM3OD7qEju/Xqqt65NyiOBVmnvHho7P+WFQ3WWZMvH3vqy
W1cQyhE/MCRiiQLFflrlZ57RilU=
-----END CERTIFICATE-----
Generated at Fri May 24 02:53:22 2024 by rpki-client on console-fra.rpki-client.org