Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/05C7C2CE7CD511EE911814474AD9E6FC.roa
File: 05C7C2CE7CD511EE911814474AD9E6FC.roa (raw, json)
Hash identifier: YhUox+AF58zSLsz6tBNwSniyH3ff5r1UUXhF5cuMm/Q=
Subject key identifier: 86:CC:44:97:FE:AF:5F:3C:F3:4B:96:F6:0E:25:E9:B3:DE:03:4B:40
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0C8B
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/05C7C2CE7CD511EE911814474AD9E6FC.roa
Signing time: Mon 06 Nov 2023 18:48:06 +0000
ROA not before: Mon 06 Nov 2023 18:48:03 +0000
ROA not after: Mon 06 Nov 2028 18:48:03 +0000
asID: 207990
IP address blocks: 161.123.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3211 (0xc8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 6 18:48:03 2023 GMT
Not After : Nov 6 18:48:03 2028 GMT
Subject: CN=654934e6-df89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7c:96:20:10:0e:90:87:89:be:b6:6e:38:a7:
1a:7b:00:af:ab:d9:1e:d2:6c:2f:cc:f3:f8:ed:34:
21:8d:76:78:e3:be:06:c8:90:1c:63:39:8a:a8:c7:
fc:17:b0:81:f9:f8:ac:3c:9a:85:63:db:2b:09:de:
0c:06:8e:43:eb:19:57:af:7d:0f:d7:01:c0:09:6a:
28:13:06:ae:8b:c7:00:0f:c7:16:b5:63:ef:2d:66:
4e:77:c7:c0:09:a3:bf:2e:d4:15:55:c9:08:55:3f:
0e:cd:7c:a0:33:64:57:24:f2:87:f8:5b:3d:d9:01:
1e:ba:24:71:b5:05:a6:bc:fb:98:95:6e:f5:9d:71:
21:4c:10:36:f2:54:00:e7:32:78:44:ec:f8:7f:d2:
85:09:30:9e:6b:13:ce:4e:4c:33:af:23:ad:f5:f5:
41:05:79:d5:9b:ee:00:2a:36:9a:2a:e7:a0:3a:f3:
7b:23:f2:df:b1:41:d5:d6:71:f8:e7:bc:91:a8:eb:
22:0e:f4:5a:47:c1:b5:72:c5:e9:9f:ea:8a:25:f5:
f0:9a:1c:e7:68:0f:0b:61:5f:93:88:85:09:d0:7d:
bc:5a:95:21:4c:e1:10:22:e0:d4:83:78:e4:2f:59:
d2:52:d0:48:b2:c6:e3:79:c8:64:fc:52:ec:54:56:
37:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CC:44:97:FE:AF:5F:3C:F3:4B:96:F6:0E:25:E9:B3:DE:03:4B:40
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/05C7C2CE7CD511EE911814474AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.21.0/24
Signature Algorithm: sha256WithRSAEncryption
57:c9:fb:fc:d1:78:7b:d4:f3:aa:87:9e:aa:01:c2:a6:12:9f:
9d:d6:04:94:ce:db:e0:17:07:45:6f:e3:6c:e0:fc:02:d6:e4:
f3:89:0c:22:b7:c8:03:e4:26:b9:ec:00:80:27:8c:29:ca:e1:
6f:33:47:94:c5:67:73:df:64:1f:ce:00:9e:4f:b5:28:67:c5:
cb:45:03:46:15:60:a2:13:3c:6b:47:48:65:9d:4f:c3:2c:84:
63:49:64:0b:c6:4e:03:eb:40:d9:88:2f:c9:66:c5:32:ee:89:
64:58:4b:bd:f8:85:ef:d4:c7:53:6b:ea:a7:03:81:a2:f8:18:
cd:0d:bf:0e:3c:b7:b4:ec:db:f7:99:a4:e2:22:f1:ec:d7:ea:
f6:34:6e:52:89:0f:bf:45:2e:4f:74:c9:47:61:3e:09:13:ba:
26:eb:24:7a:ba:3d:36:60:08:43:2f:64:88:e1:63:18:b4:fa:
a4:59:4e:3c:fb:4a:c6:ea:a4:14:74:13:c5:22:63:aa:ae:40:
d9:41:51:35:ba:c4:19:bc:24:90:53:c4:75:c8:e2:91:b2:84:
1f:a4:7c:2f:04:87:0a:8c:fe:1c:e1:d2:69:f6:59:d0:2a:6d:
25:6c:5b:fc:6a:6b:c7:13:f7:34:c1:d8:09:9c:03:7c:59:08:
16:a7:65:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 02:40:12 2024 by rpki-client on console-ams.rpki-client.org