Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CBA6C2387CD511EEA69F83494AD9E6FC.roa
File: CBA6C2387CD511EEA69F83494AD9E6FC.roa (raw, json)
Hash identifier: u7yfzAfipKiZXnKzTjc5eX1kAYvSK6xPPOOcdzuMEps=
Subject key identifier: BC:42:3E:73:EF:FB:D4:BB:DB:B0:2C:3E:31:28:4F:64:B7:62:CD:88
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0C9F
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CBA6C2387CD511EEA69F83494AD9E6FC.roa
Signing time: Mon 06 Nov 2023 18:53:38 +0000
ROA not before: Mon 06 Nov 2023 18:53:35 +0000
ROA not after: Mon 06 Nov 2028 18:53:35 +0000
asID: 207990
IP address blocks: 161.123.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3231 (0xc9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 6 18:53:35 2023 GMT
Not After : Nov 6 18:53:35 2028 GMT
Subject: CN=65493632-c1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:d1:14:df:2c:8a:98:74:78:34:a4:fc:8c:
3c:27:ee:b7:c8:de:c9:1d:4c:44:6b:3d:e8:eb:3e:
c2:12:bb:40:9f:9f:d9:ee:98:21:4d:4f:00:d3:c4:
ab:50:e6:d5:3e:78:b5:c1:e2:1e:90:1f:7a:1b:77:
42:68:33:e0:e8:e1:ed:8c:07:bb:71:e6:8c:27:bd:
fa:d9:ed:ed:59:21:a6:eb:bc:ad:5f:e5:09:c8:72:
bd:4f:04:4a:2f:bf:b2:6c:45:bb:bb:14:97:77:8b:
0c:c5:b2:87:27:39:3a:bd:e0:d0:24:97:3b:56:7a:
0c:10:f2:01:0f:f1:03:e1:2d:92:10:c1:1c:d3:0b:
33:93:fc:58:5d:05:5d:43:82:92:cd:f2:c2:8b:93:
99:30:7d:52:dd:93:a7:63:d7:4c:14:17:94:48:2f:
bd:df:92:cd:69:45:1e:e8:3a:04:20:1f:f6:70:b2:
d9:32:74:fa:36:4f:ba:a4:22:96:35:40:ce:34:b2:
c8:de:d1:d8:87:d6:39:7c:93:24:f0:75:d2:db:da:
77:26:68:2e:2d:e7:fc:01:90:57:d9:24:b7:b9:61:
e6:cb:6e:ba:fc:77:c3:c1:5a:c1:cd:19:19:85:70:
d2:48:04:f8:ea:6e:db:ef:ae:1b:3e:b7:16:13:56:
f7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:42:3E:73:EF:FB:D4:BB:DB:B0:2C:3E:31:28:4F:64:B7:62:CD:88
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CBA6C2387CD511EEA69F83494AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.49.0/24
Signature Algorithm: sha256WithRSAEncryption
36:cc:af:c8:a3:39:66:6d:04:29:71:bb:16:9b:8f:e2:b0:07:
05:d2:64:0a:ce:04:c4:d7:fe:0f:92:38:5c:e6:fc:c3:61:db:
77:34:78:bb:4e:57:6f:19:ea:64:f4:79:e0:11:6a:31:5e:ea:
19:d9:af:d6:78:8f:32:9c:0e:53:c7:98:cb:7b:99:7f:89:ca:
98:40:ed:b6:6a:70:1c:fe:65:37:c6:96:ae:f7:3c:fe:8a:b3:
c9:93:b1:6a:3a:76:43:02:c0:70:9f:d7:2e:56:ec:2a:e1:ef:
38:22:38:d8:7a:46:92:3f:fa:f5:80:a6:b6:f9:98:c3:7b:2e:
01:a9:50:a2:10:53:1b:70:c4:d4:4e:ba:b2:34:2d:6e:08:ca:
62:89:54:2c:b2:59:8a:fe:c4:70:83:81:d6:a1:7d:04:25:e5:
61:1d:3d:8e:e9:00:25:a6:ad:5c:b8:ad:90:65:c0:89:dd:ff:
3a:d5:1e:8e:5b:b6:bf:18:8e:bc:43:70:13:c5:c0:aa:8b:7c:
42:9c:b0:08:a5:ef:5c:39:9c:9b:7e:4f:7b:cf:d8:4b:2e:5e:
cb:bc:d7:35:09:50:54:ba:bf:f5:28:f5:4a:67:81:93:d4:20:
b9:5b:d8:3e:66:77:70:89:61:82:6f:f1:d7:82:c7:68:5a:26:
58:73:a7:93
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDJ8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMzExMDYxODUzMzVaFw0yODExMDYxODUzMzVaMBgxFjAU
BgNVBAMTDTY1NDkzNjMyLWMxY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHOdEU3yyKmHR4NKT8jDwn7rfI3skdTERrPejrPsISu0Cfn9numCFNTwDT
xKtQ5tU+eLXB4h6QH3obd0JoM+Do4e2MB7tx5ownvfrZ7e1ZIabrvK1f5QnIcr1P
BEovv7JsRbu7FJd3iwzFsocnOTq94NAklztWegwQ8gEP8QPhLZIQwRzTCzOT/Fhd
BV1DgpLN8sKLk5kwfVLdk6dj10wUF5RIL73fks1pRR7oOgQgH/ZwstkydPo2T7qk
IpY1QM40ssje0diH1jl8kyTwddLb2ncmaC4t5/wBkFfZJLe5YebLbrr8d8PBWsHN
GRmFcNJIBPjqbtvvrhs+txYTVve9AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUvEI+
c+/71LvbsCw+MShPZLdizYgwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0NCQTZDMjM4N0NENTExRUVBNjlGODM0OTRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChezEwDQYJKoZIhvcNAQELBQAD
ggEBADbMr8ijOWZtBClxuxabj+KwBwXSZArOBMTX/g+SOFzm/MNh23c0eLtOV28Z
6mT0eeARajFe6hnZr9Z4jzKcDlPHmMt7mX+JyphA7bZqcBz+ZTfGlq73PP6Ks8mT
sWo6dkMCwHCf1y5W7Crh7zgiONh6RpI/+vWAprb5mMN7LgGpUKIQUxtwxNROurI0
LW4IymKJVCyyWYr+xHCDgdahfQQl5WEdPY7pACWmrVy4rZBlwInd/zrVHo5btr8Y
jrxDcBPFwKqLfEKcsAil71w5nJt+T3vP2EsuXsu81zUJUFS6v/Uo9UpngZPUILlb
2D5md3CJYYJv8deCx2haJlhzp5M=
-----END CERTIFICATE-----
Generated at Sun Jun 2 03:41:00 2024 by rpki-client on console-ams.rpki-client.org