Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/59D5E0A6D4DE11EE8DEB4E56775412E6.roa
File: 59D5E0A6D4DE11EE8DEB4E56775412E6.roa (raw, json)
Hash identifier: kGAJvArJOm10+5/bZ66BbYY3lYsmEiIsUGMm4PZfME8=
Subject key identifier: A1:AF:E0:3B:B9:AB:06:6B:F7:4F:4D:3F:B3:66:64:91:BD:F6:F3:3C
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0D49
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/59D5E0A6D4DE11EE8DEB4E56775412E6.roa
Signing time: Mon 26 Feb 2024 19:36:35 +0000
ROA not before: Mon 26 Feb 2024 19:36:30 +0000
ROA not after: Tue 26 Feb 2030 19:36:30 +0000
asID: 203020
IP address blocks: 161.123.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3401 (0xd49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 26 19:36:30 2024 GMT
Not After : Feb 26 19:36:30 2030 GMT
Subject: CN=65dce843-18c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8c:13:0f:0e:63:be:70:e6:4c:fc:58:6b:92:
9a:26:17:0b:b2:3f:d3:db:dd:a4:87:bf:4e:08:92:
bd:e3:67:72:d7:f7:73:3c:a6:89:ca:2c:db:5e:08:
20:ed:7c:e3:72:34:69:d5:61:55:83:bf:40:eb:d4:
d8:02:87:b4:80:28:bc:3b:ac:ff:b8:11:24:a8:f9:
3f:24:98:f7:e7:d5:56:0e:78:0b:3b:2d:a9:aa:0b:
ac:99:49:3b:87:5f:30:80:7d:70:ad:2e:50:c6:44:
a2:31:37:8a:45:c0:68:f2:e6:b4:9d:52:91:94:eb:
49:d2:19:68:23:8f:b4:a2:18:e1:79:c2:40:17:11:
8b:ed:16:61:c6:08:05:06:7f:1b:a0:56:43:37:2b:
db:ab:c3:f1:67:24:5e:eb:03:b7:9c:45:89:cc:e7:
13:c9:66:bd:4c:71:2b:30:f1:a0:3e:5a:9c:91:77:
6b:4c:d2:a8:a3:33:85:26:e1:8b:2a:41:eb:0f:8a:
49:c8:71:26:1c:a0:4b:59:45:6a:22:a2:5b:f7:16:
82:e5:58:bb:13:30:d4:0c:4a:27:e2:17:e6:2f:80:
10:a5:d2:6b:a7:07:1e:9e:c5:39:53:d4:92:74:4e:
a6:72:ad:fe:1a:88:23:6b:ae:98:7d:09:23:8a:c5:
6a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AF:E0:3B:B9:AB:06:6B:F7:4F:4D:3F:B3:66:64:91:BD:F6:F3:3C
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/59D5E0A6D4DE11EE8DEB4E56775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.247.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:73:6e:fa:3f:49:b2:8f:3e:a2:76:bb:1c:3d:0b:6d:a8:2e:
65:53:5f:dc:c4:d4:8a:c2:5e:d3:45:6a:f0:74:48:98:e0:8d:
8a:d6:55:78:81:28:b0:11:80:e4:9b:80:8f:78:85:01:0b:f0:
6e:a5:1b:a8:7c:03:0a:88:a0:7b:1f:07:58:b9:1f:05:1f:25:
01:2e:30:32:16:29:8d:dd:45:27:34:1f:6a:93:30:f9:3d:31:
74:7c:28:c0:e5:b9:70:2b:2c:b9:93:cd:d6:92:98:2c:52:70:
9d:4d:10:eb:59:b7:67:2b:8c:9c:12:41:61:a2:2b:c2:f2:ff:
e7:76:1b:6d:f1:a0:9b:26:08:10:11:59:35:5f:61:0e:ee:be:
6c:1a:ed:09:e3:ee:d4:74:69:f8:a2:63:8a:08:ea:55:2f:8f:
e3:f5:9b:3e:b6:c5:4e:6a:8e:3e:9f:64:eb:fc:09:ee:fd:cc:
13:7a:23:0a:bf:94:7c:05:0d:1b:ad:af:d2:24:18:99:c3:b6:
4f:85:c6:36:ef:46:b4:5b:2a:e0:1d:a5:bf:22:15:2f:59:e2:
2f:26:97:4f:7f:35:74:6f:b8:f6:c3:3a:68:31:a7:b4:84:57:
63:58:fa:3b:2d:80:b9:04:91:70:bc:5c:a0:3a:e1:e3:aa:a3:
f4:59:47:9f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDUkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yNDAyMjYxOTM2MzBaFw0zMDAyMjYxOTM2MzBaMBgxFjAU
BgNVBAMTDTY1ZGNlODQzLTE4YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDTjBMPDmO+cOZM/FhrkpomFwuyP9Pb3aSHv04Ikr3jZ3LX93M8ponKLNte
CCDtfONyNGnVYVWDv0Dr1NgCh7SAKLw7rP+4ESSo+T8kmPfn1VYOeAs7LamqC6yZ
STuHXzCAfXCtLlDGRKIxN4pFwGjy5rSdUpGU60nSGWgjj7SiGOF5wkAXEYvtFmHG
CAUGfxugVkM3K9urw/FnJF7rA7ecRYnM5xPJZr1McSsw8aA+WpyRd2tM0qijM4Um
4YsqQesPiknIcSYcoEtZRWoiolv3FoLlWLsTMNQMSifiF+YvgBCl0munBx6exTlT
1JJ0TqZyrf4aiCNrrph9CSOKxWpRAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUoa/g
O7mrBmv3T00/s2Zkkb328zwwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzU5RDVFMEE2RDRERTExRUU4REVCNEU1Njc3NTQxMkU2LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe/cwDQYJKoZIhvcNAQELBQAD
ggEBAE1zbvo/SbKPPqJ2uxw9C22oLmVTX9zE1IrCXtNFavB0SJjgjYrWVXiBKLAR
gOSbgI94hQEL8G6lG6h8AwqIoHsfB1i5HwUfJQEuMDIWKY3dRSc0H2qTMPk9MXR8
KMDluXArLLmTzdaSmCxScJ1NEOtZt2crjJwSQWGiK8Ly/+d2G23xoJsmCBARWTVf
YQ7uvmwa7Qnj7tR0afiiY4oI6lUvj+P1mz62xU5qjj6fZOv8Ce79zBN6Iwq/lHwF
DRutr9IkGJnDtk+FxjbvRrRbKuAdpb8iFS9Z4i8ml09/NXRvuPbDOmgxp7SEV2NY
+jstgLkEkXC8XKA64eOqo/RZR58=
-----END CERTIFICATE-----
Generated at Sat May 18 04:04:07 2024 by rpki-client on console-ams.rpki-client.org