Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E60C0CE27CD411EE9448A6464AD9E6FC.roa
File: E60C0CE27CD411EE9448A6464AD9E6FC.roa (raw, json)
Hash identifier: t1Y+n0kYXuelx4ZdcbOrZp5bED5lNNg5H34z56d9iNs=
Subject key identifier: 41:0E:29:A1:D5:57:89:BC:F0:62:01:90:6B:EC:4E:79:D4:B0:0F:55
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0C87
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E60C0CE27CD411EE9448A6464AD9E6FC.roa
Signing time: Mon 06 Nov 2023 18:47:13 +0000
ROA not before: Mon 06 Nov 2023 18:47:10 +0000
ROA not after: Mon 06 Nov 2028 18:47:10 +0000
asID: 207990
IP address blocks: 161.123.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3207 (0xc87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 6 18:47:10 2023 GMT
Not After : Nov 6 18:47:10 2028 GMT
Subject: CN=654934b1-3f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:52:ef:0c:ea:e6:58:a1:26:ba:be:c0:78:12:
db:94:ad:c2:b9:4a:e3:9c:e5:ed:41:dc:52:1d:4e:
d7:33:ff:68:1c:35:32:08:07:33:a4:38:4a:f3:23:
9a:bc:75:5f:d5:e0:01:d3:54:34:fc:90:7d:20:b4:
6e:57:f2:ed:8e:ea:7c:88:fb:ef:60:61:42:b1:c7:
02:c5:01:42:ca:72:bb:15:0a:81:bf:aa:ef:ae:91:
7f:ec:ee:ef:e4:52:b2:11:03:1b:8c:77:72:ef:23:
24:d8:00:27:1a:04:7a:64:ca:a9:e6:6c:a7:b8:e6:
e8:bf:ba:6c:37:fb:b4:7e:c1:70:d9:5e:4b:41:56:
52:ad:b5:81:d4:41:d2:27:b6:f7:79:db:89:e9:3b:
4e:42:1b:d4:08:9e:1c:1d:a8:8d:8d:65:bd:32:f8:
ae:1b:d9:e8:0b:48:5b:4a:04:d1:fd:95:c7:8b:a4:
0f:fc:a5:4a:d1:96:14:5e:21:05:4a:ed:15:19:9c:
61:ba:f4:ef:03:eb:8a:0e:a0:81:e9:1d:d2:0e:9c:
82:3d:95:48:49:a6:62:87:c5:fa:32:c6:f0:db:b2:
a1:80:8c:c6:ec:71:56:7e:97:fc:78:93:8e:e9:00:
80:4b:01:da:d9:ae:66:c0:6f:d4:93:75:6b:57:d9:
1d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0E:29:A1:D5:57:89:BC:F0:62:01:90:6B:EC:4E:79:D4:B0:0F:55
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E60C0CE27CD411EE9448A6464AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.19.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:f8:e8:a1:57:3b:3e:e3:0a:bb:ec:ba:03:4a:44:81:fe:82:
f5:5d:d9:55:31:f3:81:24:3c:65:63:da:04:b9:1a:dd:1c:75:
bd:b8:42:65:64:ae:76:fb:6c:35:23:fb:21:55:99:10:b0:53:
7c:e3:d4:f1:f5:3b:72:cb:04:4b:5e:c2:e1:a8:66:3d:78:e8:
02:f1:75:51:cb:6b:b0:c8:28:c7:71:a4:ce:6b:6c:06:b0:b9:
b2:96:ac:11:de:0b:94:e5:52:73:76:bd:e8:86:f5:9e:c2:f4:
45:7d:9d:fa:c8:b6:ad:78:27:52:d7:0e:df:e7:cf:f3:39:e5:
0c:b6:33:7a:67:90:d0:36:71:83:3c:5f:b2:22:d4:79:ef:1d:
a7:96:88:d1:08:3f:81:a7:e7:d9:2d:b2:e2:0a:bc:f1:6d:12:
41:26:75:91:e9:c7:1d:fe:b3:85:07:d8:7e:37:8c:33:fe:b9:
40:1d:da:a6:d9:84:ff:af:67:89:32:c4:3b:97:ba:b7:dd:62:
8b:be:d3:0d:3a:a2:5f:63:0f:f0:c4:81:a8:41:54:4b:ac:02:
ba:ea:90:a3:b5:c3:93:54:56:e9:95:7c:dd:c6:22:4f:b2:8c:
c4:2f:2f:a0:fa:1b:2d:5d:4c:62:54:7e:e7:9e:a5:a8:7a:3a:
ac:17:93:19
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDIcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMzExMDYxODQ3MTBaFw0yODExMDYxODQ3MTBaMBgxFjAU
BgNVBAMTDTY1NDkzNGIxLTNmMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEUu8M6uZYoSa6vsB4EtuUrcK5SuOc5e1B3FIdTtcz/2gcNTIIBzOkOErz
I5q8dV/V4AHTVDT8kH0gtG5X8u2O6nyI++9gYUKxxwLFAULKcrsVCoG/qu+ukX/s
7u/kUrIRAxuMd3LvIyTYACcaBHpkyqnmbKe45ui/umw3+7R+wXDZXktBVlKttYHU
QdIntvd524npO05CG9QInhwdqI2NZb0y+K4b2egLSFtKBNH9lceLpA/8pUrRlhRe
IQVK7RUZnGG69O8D64oOoIHpHdIOnII9lUhJpmKHxfoyxvDbsqGAjMbscVZ+l/x4
k47pAIBLAdrZrmbAb9STdWtX2R3rAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUQQ4p
odVXibzwYgGQa+xOedSwD1UwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0U2MEMwQ0UyN0NENDExRUU5NDQ4QTY0NjRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChexMwDQYJKoZIhvcNAQELBQAD
ggEBAJv46KFXOz7jCrvsugNKRIH+gvVd2VUx84EkPGVj2gS5Gt0cdb24QmVkrnb7
bDUj+yFVmRCwU3zj1PH1O3LLBEtewuGoZj146ALxdVHLa7DIKMdxpM5rbAawubKW
rBHeC5TlUnN2veiG9Z7C9EV9nfrItq14J1LXDt/nz/M55Qy2M3pnkNA2cYM8X7Ii
1HnvHaeWiNEIP4Gn59ktsuIKvPFtEkEmdZHpxx3+s4UH2H43jDP+uUAd2qbZhP+v
Z4kyxDuXurfdYou+0w06ol9jD/DEgahBVEusArrqkKO1w5NUVumVfN3GIk+yjMQv
L6D6Gy1dTGJUfueepah6OqwXkxk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:20 2024 by rpki-client on console-fra.rpki-client.org