Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AFDADB9E7CD411EEBC1AFA454AD9E6FC.roa
File: AFDADB9E7CD411EEBC1AFA454AD9E6FC.roa (raw, json)
Hash identifier: 5si19w80R4e16sAxO7+JGqyL+S1Lzn4Phb0/Y/o7hlY=
Subject key identifier: 50:18:5B:85:60:4F:A8:4A:DB:3C:B7:B5:D0:E8:10:1C:B5:8B:B9:E7
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0C81
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AFDADB9E7CD411EEBC1AFA454AD9E6FC.roa
Signing time: Mon 06 Nov 2023 18:45:42 +0000
ROA not before: Mon 06 Nov 2023 18:45:39 +0000
ROA not after: Mon 06 Nov 2028 18:45:39 +0000
asID: 207990
IP address blocks: 161.123.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3201 (0xc81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 6 18:45:39 2023 GMT
Not After : Nov 6 18:45:39 2028 GMT
Subject: CN=65493456-0528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a6:0d:c1:cf:37:fa:e2:4a:ce:3e:44:56:10:
42:8a:2d:7e:a5:6d:a0:3f:5d:d6:d3:ee:1a:22:66:
eb:1f:78:c3:47:d9:b3:4b:4a:78:90:5c:59:02:2e:
04:4c:11:ac:6b:27:5d:66:37:f5:9a:99:c9:21:d1:
8e:ba:17:95:02:c4:61:0f:de:b4:d5:3e:95:19:5c:
c3:4b:3a:6e:69:70:31:31:23:b9:de:55:fd:58:9d:
e4:66:1e:8c:70:92:9b:52:f3:f6:ff:d3:a3:ce:94:
a2:3c:03:0a:d7:94:0a:87:6d:8b:60:c8:f7:06:6b:
fc:eb:cd:e1:5b:0f:f6:47:c2:10:e8:ca:de:13:ed:
47:97:a3:95:35:f8:02:6b:f0:07:3e:28:3b:c7:5e:
f6:b5:de:ca:81:b4:86:47:70:13:8b:ce:e0:ca:53:
4b:95:c4:aa:01:4b:27:be:75:83:18:63:fc:55:4b:
d5:52:d3:3c:18:f6:19:cc:85:2c:75:5d:3b:ab:dd:
a8:44:39:96:13:d7:e0:cc:83:14:bd:b3:0f:4a:0b:
bd:5b:b7:45:87:22:82:11:fb:c5:b5:40:8f:1d:e4:
da:0b:da:ee:a5:e9:86:5e:50:d8:ed:bb:1a:7d:08:
6b:5c:cf:80:73:21:12:cf:b1:f9:e6:c8:0d:76:b5:
3e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:18:5B:85:60:4F:A8:4A:DB:3C:B7:B5:D0:E8:10:1C:B5:8B:B9:E7
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AFDADB9E7CD411EEBC1AFA454AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.16.0/24
Signature Algorithm: sha256WithRSAEncryption
72:12:2e:18:fe:0d:5d:26:97:29:2c:da:96:b5:8b:42:00:ed:
3c:91:38:88:88:53:7e:b3:4b:8d:dd:a2:2b:07:60:30:61:e0:
6a:d2:94:4d:09:ed:d9:e0:6f:74:58:52:07:36:a0:c9:53:45:
b9:dc:e6:6d:76:a1:57:4e:d4:2c:35:c5:61:56:b2:98:04:34:
09:c7:80:91:7b:cb:ee:ca:3d:7a:7f:7c:ed:21:2a:f5:83:b2:
38:2c:41:20:d1:00:66:24:2f:e5:82:23:99:86:8e:37:6d:15:
1a:3a:1a:b8:c9:c5:35:be:46:77:85:2c:7a:46:61:ce:3b:cf:
ad:c9:4b:cc:b1:35:39:5a:67:8e:eb:8d:d4:81:14:22:3b:99:
33:15:13:9a:c2:fb:97:d4:16:4a:02:3a:95:5d:2d:01:e6:69:
4c:cb:fc:3b:e5:5d:ba:2c:50:6b:ac:c7:c8:e7:51:50:04:69:
b0:f5:ae:b8:55:85:ed:52:6b:1a:0d:40:28:18:67:07:05:21:
73:34:d9:05:00:91:51:55:c9:eb:72:a7:03:74:01:4b:00:8a:
81:4c:62:91:81:3e:fc:1f:46:50:d4:dc:c6:63:17:3c:3c:7f:
ee:a6:2c:7d:a1:0f:bc:0e:25:6f:53:77:b1:af:f0:43:48:1a:
e0:7e:f6:2f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDIEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMzExMDYxODQ1MzlaFw0yODExMDYxODQ1MzlaMBgxFjAU
BgNVBAMTDTY1NDkzNDU2LTA1MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDZpg3Bzzf64krOPkRWEEKKLX6lbaA/XdbT7hoiZusfeMNH2bNLSniQXFkC
LgRMEaxrJ11mN/Wamckh0Y66F5UCxGEP3rTVPpUZXMNLOm5pcDExI7neVf1YneRm
HoxwkptS8/b/06POlKI8AwrXlAqHbYtgyPcGa/zrzeFbD/ZHwhDoyt4T7UeXo5U1
+AJr8Ac+KDvHXva13sqBtIZHcBOLzuDKU0uVxKoBSye+dYMYY/xVS9VS0zwY9hnM
hSx1XTur3ahEOZYT1+DMgxS9sw9KC71bt0WHIoIR+8W1QI8d5NoL2u6l6YZeUNjt
uxp9CGtcz4BzIRLPsfnmyA12tT4vAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUUBhb
hWBPqErbPLe10OgQHLWLuecwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0FGREFEQjlFN0NENDExRUVCQzFBRkE0NTRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChexAwDQYJKoZIhvcNAQELBQAD
ggEBAHISLhj+DV0mlyks2pa1i0IA7TyROIiIU36zS43doisHYDBh4GrSlE0J7dng
b3RYUgc2oMlTRbnc5m12oVdO1Cw1xWFWspgENAnHgJF7y+7KPXp/fO0hKvWDsjgs
QSDRAGYkL+WCI5mGjjdtFRo6GrjJxTW+RneFLHpGYc47z63JS8yxNTlaZ47rjdSB
FCI7mTMVE5rC+5fUFkoCOpVdLQHmaUzL/DvlXbosUGusx8jnUVAEabD1rrhVhe1S
axoNQCgYZwcFIXM02QUAkVFVyetypwN0AUsAioFMYpGBPvwfRlDU3MZjFzw8f+6m
LH2hD7wOJW9Td7Gv8ENIGuB+9i8=
-----END CERTIFICATE-----
Generated at Fri May 24 02:40:12 2024 by rpki-client on console-ams.rpki-client.org