Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0C050B68404B11EEBC315D3E4AD9E6FC.roa
File: 0C050B68404B11EEBC315D3E4AD9E6FC.roa (raw, json)
Hash identifier: qovLAK1aAhWA4NxGP2zFfEK54fl3GPIG9TqmeHVs8zs=
Subject key identifier: F4:4E:74:CA:8B:23:F3:25:D6:A5:53:C3:39:1C:3D:30:A8:65:0E:3E
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0BBB
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0C050B68404B11EEBC315D3E4AD9E6FC.roa
Signing time: Mon 21 Aug 2023 17:49:16 +0000
ROA not before: Mon 21 Aug 2023 17:49:13 +0000
ROA not after: Wed 21 Aug 2024 17:49:13 +0000
asID: 207990
IP address blocks: 161.123.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3003 (0xbbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Aug 21 17:49:13 2023 GMT
Not After : Aug 21 17:49:13 2024 GMT
Subject: CN=64e3a39c-cc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:13:5f:6d:44:82:0e:c8:7a:ea:ae:9a:0e:
da:58:2d:8f:41:6d:e4:82:44:bc:18:f9:8a:c4:de:
10:4f:15:c5:0f:de:28:1d:ba:52:88:08:c9:a2:9a:
c5:8a:29:db:ad:e6:66:b6:e0:20:7d:ed:f7:e3:b8:
7f:d8:19:6e:43:55:e9:f9:02:03:c4:e1:1a:3c:e0:
2c:8a:67:95:06:3f:bb:49:60:86:af:c1:76:7b:dd:
5e:f5:ed:6c:99:04:65:a4:3a:b0:47:c5:95:61:0d:
58:ea:a4:12:7d:81:5f:93:80:f6:e4:ec:2c:b6:7b:
56:50:ee:23:d4:f5:3b:77:19:ab:58:3c:65:5b:4d:
d9:ed:a3:68:3c:db:ae:17:e5:b7:cc:19:f9:84:9f:
89:53:7e:c4:9b:16:2d:69:27:32:e7:5f:56:6e:13:
11:87:ec:be:13:63:c8:90:ed:7a:27:1a:8a:f5:63:
1f:3f:53:0e:37:0d:1b:f5:27:ff:41:26:cf:84:81:
69:b0:3d:f9:1f:15:cb:93:ae:b1:7f:9b:97:80:d2:
dc:c0:ad:da:f6:4c:5c:8f:bf:ff:65:09:d2:3b:e9:
2a:ae:e2:49:1b:a3:9b:46:16:18:e4:ac:73:0c:4a:
da:08:de:6c:28:61:f8:04:b4:23:60:cf:6e:2e:4c:
a9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4E:74:CA:8B:23:F3:25:D6:A5:53:C3:39:1C:3D:30:A8:65:0E:3E
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0C050B68404B11EEBC315D3E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.248.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:08:d2:1d:b4:83:a0:98:c5:19:59:d0:1e:77:5e:7b:ab:e4:
26:dc:16:a9:0a:83:b8:17:db:90:62:1d:a3:ca:88:84:56:1b:
a2:c0:95:db:25:f6:20:ad:cd:59:b8:53:0b:17:06:df:27:14:
44:59:74:7b:90:2a:fd:85:e2:55:7c:1a:c9:7e:65:a6:8a:7b:
c5:b9:99:23:97:08:c4:5e:9c:b8:71:91:8b:7e:35:cc:d0:32:
8c:a4:58:64:e7:ca:6e:7d:01:31:e6:c1:14:cf:cb:73:aa:ab:
c3:5d:2e:83:be:c2:ea:39:48:c7:c9:73:b5:ba:d1:27:63:5b:
8b:d8:6d:f4:d3:73:85:fa:32:7a:58:94:22:af:9e:34:46:ed:
51:10:6d:5d:5e:81:00:d1:51:b1:d3:10:f4:5b:34:02:a1:32:
76:18:a0:aa:09:33:0f:62:5a:f7:9c:c9:96:92:a0:9e:e1:bb:
33:3e:28:12:72:45:d2:6f:4f:df:3e:97:30:cd:3b:e6:5c:dd:
08:67:0a:6d:37:23:b7:eb:f3:98:7d:43:8f:90:91:7b:b2:2d:
ea:8f:cc:64:48:f9:c8:40:f4:17:6b:28:72:2f:52:94:fd:f8:
f3:6b:1c:2e:2f:61:6d:73:f7:fc:1d:60:86:f8:c2:ef:21:fe:
d6:06:f8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:49:28 2024 by rpki-client on console-fra.rpki-client.org