Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/92D7AA4E7CD511EEBE0EC7484AD9E6FC.roa
File: 92D7AA4E7CD511EEBE0EC7484AD9E6FC.roa (raw, json)
Hash identifier: /KWGjUC+iZUaQz+8/NRJYjHsX2N7QI3fqe38Gyyj1xY=
Subject key identifier: 09:C8:54:99:7E:13:DF:0F:C0:C3:C6:15:BC:BF:B1:E9:78:99:11:34
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0C99
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/92D7AA4E7CD511EEBE0EC7484AD9E6FC.roa
Signing time: Mon 06 Nov 2023 18:52:03 +0000
ROA not before: Mon 06 Nov 2023 18:52:00 +0000
ROA not after: Mon 06 Nov 2028 18:52:00 +0000
asID: 207990
IP address blocks: 161.123.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3225 (0xc99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 6 18:52:00 2023 GMT
Not After : Nov 6 18:52:00 2028 GMT
Subject: CN=654935d3-09e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:02:91:39:65:59:9a:b2:33:53:85:68:00:1a:
ec:ed:e4:5e:0c:21:37:b0:f0:12:a1:56:9d:b9:75:
b3:6d:3e:ba:0a:f0:77:77:11:5c:fd:dd:ae:c3:3b:
d9:30:31:75:6c:7a:ce:f8:3b:04:72:08:69:63:07:
58:da:a2:0b:f3:e0:44:a7:3a:b7:e9:a7:55:64:f7:
cd:59:25:62:d2:fd:31:76:d1:9e:c4:13:05:3e:37:
35:d4:04:09:2a:a5:ec:68:e1:84:c9:c5:c1:c1:83:
93:3c:1a:7b:63:ee:ba:e2:01:9d:f3:94:22:04:c8:
a8:69:fc:32:0e:30:a0:e0:7a:63:a2:86:6d:c5:1c:
da:44:1b:1b:19:8f:2d:dc:ad:27:2c:f8:3e:73:45:
da:a4:d6:ba:a8:23:21:1b:a9:1f:ce:d7:6d:03:12:
e7:dd:29:01:8d:94:2a:69:03:b6:54:a8:a9:fc:1f:
14:21:53:88:84:90:7e:e5:d8:51:18:06:b0:3f:b5:
bc:36:af:d0:31:96:a7:02:91:d2:a5:fc:1f:c6:21:
aa:92:e6:2a:6d:7c:66:f7:5c:ad:b5:c0:b2:ef:19:
7e:25:7f:1b:16:d1:dc:c9:d3:1a:99:e2:21:fb:c0:
8e:13:d8:eb:58:f4:d7:f2:36:2d:a1:9f:c3:fa:cf:
6e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C8:54:99:7E:13:DF:0F:C0:C3:C6:15:BC:BF:B1:E9:78:99:11:34
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/92D7AA4E7CD511EEBE0EC7484AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.46.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:a8:c7:ad:a2:08:66:e0:4b:04:c0:52:db:83:6b:a8:ca:2a:
e6:ff:45:2e:b1:21:be:e4:46:07:a8:97:7d:cc:86:67:c2:30:
b3:b4:75:67:aa:8d:5f:46:85:78:6e:50:e9:2e:4f:2b:74:f4:
80:c3:08:84:a6:69:ea:fa:6c:f3:3b:50:ae:23:b8:2c:a0:bf:
cc:74:ee:5e:2d:b7:f6:ed:16:21:bd:27:5d:47:73:e7:42:50:
c6:02:f1:d5:dd:1c:e0:1f:de:af:87:40:c2:f7:49:b7:3f:f2:
10:76:91:9b:fc:9c:2c:29:e1:86:c3:fc:e7:2f:6c:3a:52:9c:
53:73:4a:4e:2b:32:fb:5b:bb:c9:e6:31:36:07:9b:18:17:eb:
76:59:5d:fc:8b:72:6a:d6:8b:64:ae:b1:f9:04:7f:11:7a:50:
ee:e5:3b:88:83:4d:9e:ea:4b:4e:01:cc:cb:f5:73:12:a5:66:
19:d6:66:54:04:67:6e:ad:d2:aa:cc:bf:c8:ce:44:d8:c9:49:
39:8f:e2:c1:84:6b:3b:81:cd:4d:bc:dc:86:06:72:76:5f:93:
79:29:5b:3e:7d:b3:19:91:d1:fc:71:28:da:54:31:61:a6:5c:
94:d9:34:b9:dc:23:36:93:43:b9:ea:4e:b3:4d:80:3d:35:15:
f6:97:0f:de
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDJkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMzExMDYxODUyMDBaFw0yODExMDYxODUyMDBaMBgxFjAU
BgNVBAMTDTY1NDkzNWQzLTA5ZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCbApE5ZVmasjNThWgAGuzt5F4MITew8BKhVp25dbNtProK8Hd3EVz93a7D
O9kwMXVses74OwRyCGljB1jaogvz4ESnOrfpp1Vk981ZJWLS/TF20Z7EEwU+NzXU
BAkqpexo4YTJxcHBg5M8Gntj7rriAZ3zlCIEyKhp/DIOMKDgemOihm3FHNpEGxsZ
jy3crScs+D5zRdqk1rqoIyEbqR/O120DEufdKQGNlCppA7ZUqKn8HxQhU4iEkH7l
2FEYBrA/tbw2r9AxlqcCkdKl/B/GIaqS5iptfGb3XK21wLLvGX4lfxsW0dzJ0xqZ
4iH7wI4T2OtY9NfyNi2hn8P6z26XAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUCchU
mX4T3w/Aw8YVvL+x6XiZETQwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzkyRDdBQTRFN0NENTExRUVCRTBFQzc0ODRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChey4wDQYJKoZIhvcNAQELBQAD
ggEBAIuox62iCGbgSwTAUtuDa6jKKub/RS6xIb7kRgeol33MhmfCMLO0dWeqjV9G
hXhuUOkuTyt09IDDCISmaer6bPM7UK4juCygv8x07l4tt/btFiG9J11Hc+dCUMYC
8dXdHOAf3q+HQML3Sbc/8hB2kZv8nCwp4YbD/OcvbDpSnFNzSk4rMvtbu8nmMTYH
mxgX63ZZXfyLcmrWi2SusfkEfxF6UO7lO4iDTZ7qS04BzMv1cxKlZhnWZlQEZ26t
0qrMv8jORNjJSTmP4sGEazuBzU283IYGcnZfk3kpWz59sxmR0fxxKNpUMWGmXJTZ
NLncIzaTQ7nqTrNNgD01FfaXD94=
-----END CERTIFICATE-----
Generated at Sat May 18 03:49:28 2024 by rpki-client on console-fra.rpki-client.org