Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/81209B807CD511EEBBC2AA484AD9E6FC.roa
File: 81209B807CD511EEBBC2AA484AD9E6FC.roa (raw, json)
Hash identifier: m12oAzV/AslNTdXzl5IHzIH+fKc+PAqFNCpes9CF7DA=
Subject key identifier: 6F:BD:D8:6D:FF:C1:FB:38:0E:1E:26:3E:82:64:72:E6:04:42:6D:A1
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0C97
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/81209B807CD511EEBBC2AA484AD9E6FC.roa
Signing time: Mon 06 Nov 2023 18:51:33 +0000
ROA not before: Mon 06 Nov 2023 18:51:30 +0000
ROA not after: Mon 06 Nov 2028 18:51:30 +0000
asID: 207990
IP address blocks: 161.123.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3223 (0xc97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 6 18:51:30 2023 GMT
Not After : Nov 6 18:51:30 2028 GMT
Subject: CN=654935b5-5fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:27:6f:c5:a6:81:fc:17:2c:78:5e:b3:72:69:
af:76:7f:8b:58:97:58:95:47:5c:c4:eb:79:5b:c4:
41:69:0a:ed:d8:e2:ef:6b:5b:3b:73:45:54:28:2a:
63:78:bb:9f:c5:aa:dd:23:31:64:1a:aa:30:e2:62:
8f:41:43:86:06:2e:8c:8c:e2:51:3d:ba:69:13:44:
39:8a:f7:81:a7:05:85:85:05:64:39:b5:42:47:d5:
65:b9:18:bf:75:f6:8f:c0:f4:b7:12:2f:be:36:c3:
4c:4d:1a:4e:65:f8:70:ba:f1:98:5c:5c:eb:e9:96:
85:94:55:09:a3:db:1f:84:56:75:a8:b3:8b:07:87:
cb:a3:8f:76:ae:91:50:90:1d:7c:1d:6f:93:71:c3:
b3:ac:b3:06:42:f6:f9:45:1d:41:28:75:62:7b:11:
fd:9f:71:33:dc:21:bb:2e:61:36:b2:e4:aa:63:c7:
cc:c1:16:3b:2f:24:89:fe:53:b8:27:ba:65:f6:e3:
5f:bd:b9:be:ac:74:24:32:86:6d:c1:f9:2c:82:12:
ee:b5:bb:95:14:5b:0e:95:ae:97:14:8e:4d:8a:79:
33:1b:13:9c:14:42:d4:42:26:cc:a7:ec:ea:e3:4b:
bb:1f:29:8f:9a:a0:3d:3c:22:2a:8a:62:63:93:13:
9f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BD:D8:6D:FF:C1:FB:38:0E:1E:26:3E:82:64:72:E6:04:42:6D:A1
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/81209B807CD511EEBBC2AA484AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.45.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:b3:d6:5c:ca:2d:5c:7b:e4:82:f7:bd:b3:82:cc:34:1a:62:
eb:99:fd:d6:f2:e9:23:1f:37:75:70:4b:37:d8:83:88:46:ad:
d8:5a:00:ed:ce:3d:3d:0a:ca:66:0b:f9:37:d1:27:1f:1d:9c:
0d:29:fd:01:97:9a:67:5a:34:3c:f0:8e:54:71:34:db:d5:10:
21:56:f8:ca:04:fd:b3:7e:cf:d3:13:ad:35:9a:52:89:61:42:
f5:13:20:7b:c2:bf:29:07:00:12:ac:b3:e3:a5:09:f0:e8:ed:
63:92:f3:5b:3b:f3:d3:ac:45:5f:a0:d2:f2:b5:3b:0f:06:28:
c3:fb:b9:af:41:17:e0:5d:34:55:a4:a6:31:cd:ff:d6:ca:be:
53:6b:f1:8e:f7:86:d2:9b:ad:ad:db:c9:3a:85:d0:8c:8e:2c:
98:dc:bc:7e:d3:94:f0:7a:d8:e7:9b:80:d1:27:76:76:cd:ab:
fa:06:90:9b:88:2d:a2:1a:29:cc:61:98:c5:26:4e:da:e8:6c:
17:2c:15:f7:41:b6:3b:02:f4:b5:fb:8f:35:53:a5:49:8b:e4:
68:fe:7e:76:a7:b6:6b:51:05:76:e4:e8:89:d2:7a:e4:a4:a3:
0f:d3:90:77:3b:84:eb:cb:92:32:e0:e5:5f:8c:c9:58:4d:22:
1a:f0:85:09
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDJcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMzExMDYxODUxMzBaFw0yODExMDYxODUxMzBaMBgxFjAU
BgNVBAMTDTY1NDkzNWI1LTVmZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBJ2/FpoH8Fyx4XrNyaa92f4tYl1iVR1zE63lbxEFpCu3Y4u9rWztzRVQo
KmN4u5/Fqt0jMWQaqjDiYo9BQ4YGLoyM4lE9umkTRDmK94GnBYWFBWQ5tUJH1WW5
GL919o/A9LcSL742w0xNGk5l+HC68ZhcXOvploWUVQmj2x+EVnWos4sHh8ujj3au
kVCQHXwdb5Nxw7OsswZC9vlFHUEodWJ7Ef2fcTPcIbsuYTay5Kpjx8zBFjsvJIn+
U7gnumX241+9ub6sdCQyhm3B+SyCEu61u5UUWw6VrpcUjk2KeTMbE5wUQtRCJsyn
7OrjS7sfKY+aoD08IiqKYmOTE5+3AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUb73Y
bf/B+zgOHiY+gmRy5gRCbaEwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzgxMjA5QjgwN0NENTExRUVCQkMyQUE0ODRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChey0wDQYJKoZIhvcNAQELBQAD
ggEBAK2z1lzKLVx75IL3vbOCzDQaYuuZ/dby6SMfN3VwSzfYg4hGrdhaAO3OPT0K
ymYL+TfRJx8dnA0p/QGXmmdaNDzwjlRxNNvVECFW+MoE/bN+z9MTrTWaUolhQvUT
IHvCvykHABKss+OlCfDo7WOS81s789OsRV+g0vK1Ow8GKMP7ua9BF+BdNFWkpjHN
/9bKvlNr8Y73htKbra3byTqF0IyOLJjcvH7TlPB62OebgNEndnbNq/oGkJuILaIa
KcxhmMUmTtrobBcsFfdBtjsC9LX7jzVTpUmL5Gj+fnantmtRBXbk6InSeuSkow/T
kHc7hOvLkjLg5V+MyVhNIhrwhQk=
-----END CERTIFICATE-----
Generated at Sat May 18 04:04:07 2024 by rpki-client on console-ams.rpki-client.org