Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/FBBA56BE950E11EE8E42FE4ED25BE465.roa
File: FBBA56BE950E11EE8E42FE4ED25BE465.roa (raw, json)
Hash identifier: UNju4Ng/KDKaEk05o7M6rA+eJdW/FuftNDhdtoJqfJs=
Subject key identifier: 85:1C:AC:12:37:8C:1B:45:AE:8E:CE:08:AC:C0:F3:C4:C4:6B:73:3C
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0CD4
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/FBBA56BE950E11EE8E42FE4ED25BE465.roa
Signing time: Thu 07 Dec 2023 14:43:28 +0000
ROA not before: Thu 07 Dec 2023 14:43:25 +0000
ROA not after: Thu 07 Dec 2028 14:43:25 +0000
asID: 207990
IP address blocks: 161.123.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3284 (0xcd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Dec 7 14:43:25 2023 GMT
Not After : Dec 7 14:43:25 2028 GMT
Subject: CN=6571da10-bef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:27:18:7b:4f:81:ed:7d:39:94:1e:58:56:b5:
9e:34:ba:be:8d:5c:3e:9f:8c:5d:44:41:81:7a:cf:
85:05:54:22:40:67:d4:ac:10:82:0d:4d:f4:2f:aa:
de:f6:33:d0:16:f2:02:6d:42:f6:b4:ae:e0:5a:a5:
cf:ad:c8:7d:0f:96:d8:0e:37:6c:ec:8d:1b:64:bd:
fd:8f:d3:c6:62:50:7e:a1:54:74:15:70:4f:68:7c:
93:fc:bb:e9:8a:a5:7e:30:d7:da:44:89:7e:26:53:
72:95:28:bc:4b:b2:09:c5:80:1f:83:0a:e3:7d:1a:
01:11:b5:d9:0c:39:ed:70:56:04:8a:15:21:31:63:
27:94:2f:0b:55:fa:1c:10:89:0f:4a:54:c3:ef:c5:
b4:89:97:2a:76:d6:bc:6e:80:a3:09:3b:b4:59:92:
03:3f:3d:dd:14:8f:fa:2d:0b:50:80:04:f2:17:3d:
a1:85:7a:11:65:57:c9:2a:f8:44:78:98:5f:1d:25:
61:ec:60:b8:00:9e:f7:63:aa:8b:e8:0d:40:f0:80:
66:71:f0:31:ee:a2:ce:e5:90:b6:3f:4a:07:7d:e0:
23:c1:40:82:e8:fa:84:56:a2:8f:8b:5b:43:0f:be:
d4:a4:4d:4f:81:6e:54:20:5a:5f:cf:1d:2b:e2:52:
72:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1C:AC:12:37:8C:1B:45:AE:8E:CE:08:AC:C0:F3:C4:C4:6B:73:3C
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/FBBA56BE950E11EE8E42FE4ED25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.55.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:9e:35:ce:0f:ef:72:b9:d4:6f:e8:70:42:7d:87:a3:27:02:
43:16:48:c8:d5:81:ef:ce:be:d2:78:c8:07:87:4f:70:42:4a:
98:1c:95:e3:0c:7f:52:64:ae:4d:e0:80:c0:75:60:05:1d:bd:
eb:68:1c:a3:78:48:f6:f3:a9:91:21:70:84:37:db:4b:08:ad:
d4:46:7a:ea:79:1f:12:e3:8d:80:48:a2:46:d6:ad:47:34:7b:
38:2c:82:c9:4a:64:0b:58:51:e8:64:cf:3e:88:99:35:1d:c7:
5b:bd:fa:a1:04:a5:32:3b:17:d3:b4:bc:ef:17:71:26:db:df:
db:c4:d9:12:a3:e5:46:f0:27:9d:14:a4:1a:4e:11:77:59:1e:
ee:72:67:d9:f9:85:e3:81:11:e2:d9:b0:4b:ba:c5:0a:1f:ec:
30:e1:bc:fb:b2:bb:ae:d6:b3:f2:c8:fe:a6:ca:4f:dc:a4:24:
c8:62:70:d3:81:62:8c:05:88:e5:9f:03:48:8b:9b:22:dc:a4:
f3:03:7f:2b:f2:90:8f:fd:7b:1e:c8:16:6c:18:1c:37:b7:e7:
18:21:3e:59:b7:79:f6:8d:cb:73:5c:19:d9:14:d6:52:26:72:
ce:2c:28:28:df:e2:e5:e8:1c:e4:b6:5c:38:90:1b:b1:b5:07:
b2:fc:4d:33
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDNQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMzEyMDcxNDQzMjVaFw0yODEyMDcxNDQzMjVaMBgxFjAU
BgNVBAMTDTY1NzFkYTEwLWJlZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCpJxh7T4HtfTmUHlhWtZ40ur6NXD6fjF1EQYF6z4UFVCJAZ9SsEIINTfQv
qt72M9AW8gJtQva0ruBapc+tyH0PltgON2zsjRtkvf2P08ZiUH6hVHQVcE9ofJP8
u+mKpX4w19pEiX4mU3KVKLxLsgnFgB+DCuN9GgERtdkMOe1wVgSKFSExYyeULwtV
+hwQiQ9KVMPvxbSJlyp21rxugKMJO7RZkgM/Pd0Uj/otC1CABPIXPaGFehFlV8kq
+ER4mF8dJWHsYLgAnvdjqovoDUDwgGZx8DHuos7lkLY/Sgd94CPBQILo+oRWoo+L
W0MPvtSkTU+BblQgWl/PHSviUnJNAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUhRys
EjeMG0Wujs4IrMDzxMRrczwwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0ZCQkE1NkJFOTUwRTExRUU4RTQyRkU0RUQyNUJFNDY1LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChezcwDQYJKoZIhvcNAQELBQAD
ggEBAGqeNc4P73K51G/ocEJ9h6MnAkMWSMjVge/OvtJ4yAeHT3BCSpgcleMMf1Jk
rk3ggMB1YAUdvetoHKN4SPbzqZEhcIQ320sIrdRGeup5HxLjjYBIokbWrUc0ezgs
gslKZAtYUehkzz6ImTUdx1u9+qEEpTI7F9O0vO8XcSbb39vE2RKj5UbwJ50UpBpO
EXdZHu5yZ9n5heOBEeLZsEu6xQof7DDhvPuyu67Ws/LI/qbKT9ykJMhicNOBYowF
iOWfA0iLmyLcpPMDfyvykI/9ex7IFmwYHDe35xghPlm3efaNy3NcGdkU1lImcs4s
KCjf4uXoHOS2XDiQG7G1B7L8TTM=
-----END CERTIFICATE-----
Generated at Sat May 18 04:04:07 2024 by rpki-client on console-ams.rpki-client.org