Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1852860CF93D11EDAE9CF8894AD9E6FC.roa
File: 1852860CF93D11EDAE9CF8894AD9E6FC.roa (raw, json)
Hash identifier: rY+18DEVbzzv7mWQuc+hTodJZYkS0ipxo1/UCKsqOVw=
Subject key identifier: 23:76:67:DA:74:3F:E2:38:9C:60:61:C6:6A:16:D1:39:10:49:EE:9B
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0AD0
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1852860CF93D11EDAE9CF8894AD9E6FC.roa
Signing time: Tue 23 May 2023 07:40:31 +0000
ROA not before: Tue 23 May 2023 07:40:28 +0000
ROA not after: Thu 23 May 2024 07:40:28 +0000
asID: 133499
IP address blocks: 161.123.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2768 (0xad0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: May 23 07:40:28 2023 GMT
Not After : May 23 07:40:28 2024 GMT
Subject: CN=646c6def-dc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:79:9d:6e:3e:23:a7:d8:9a:4f:1c:c7:df:c8:
a2:94:98:81:06:48:13:aa:53:55:f3:93:ec:f7:1c:
60:de:82:b5:1a:38:c2:ac:23:3b:7e:2e:27:a2:ae:
5c:46:f3:51:e0:4f:c9:62:fe:7e:16:74:7c:c3:a7:
cb:db:fe:48:51:1c:1c:7a:bd:3b:54:57:b4:9f:f4:
1a:66:d4:40:dc:26:5d:92:1f:24:1a:f7:4c:f1:87:
11:9d:9b:e3:6d:cc:9c:c9:17:fc:01:bf:cc:84:14:
7b:46:f7:e2:00:cc:25:04:96:33:bf:d9:24:09:28:
de:9d:42:32:b7:69:b8:07:cc:d4:92:f2:f8:79:07:
db:8d:b0:68:5e:6c:24:4f:41:28:3a:f6:2f:fc:65:
84:e8:c9:38:01:b4:d7:ef:ef:e0:2f:85:34:0e:4b:
c6:e5:0c:ff:2a:f3:64:38:65:ea:5e:89:84:64:30:
f1:86:a5:77:f9:d1:fe:e9:d2:c1:28:03:d5:47:3b:
cb:6e:3e:2d:fd:da:88:2b:34:9d:b0:9f:61:91:81:
85:fd:f3:0f:1b:3c:4a:fa:50:13:72:ac:da:dd:a9:
e6:62:f9:4d:b0:1b:fc:1a:50:2e:86:b8:0b:67:9d:
4f:a5:bf:38:0c:6f:c7:91:bc:29:45:8c:92:29:aa:
79:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:76:67:DA:74:3F:E2:38:9C:60:61:C6:6A:16:D1:39:10:49:EE:9B
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1852860CF93D11EDAE9CF8894AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.140.0/22
Signature Algorithm: sha256WithRSAEncryption
65:ff:90:9f:d6:33:ad:79:9a:f2:11:a7:67:a5:a5:10:d7:dd:
75:32:d1:65:15:7e:a1:ae:48:9f:96:db:55:85:9d:66:db:b2:
9b:02:88:9c:f8:4c:5d:51:ee:79:66:5b:a9:5b:8b:2c:86:d3:
3d:d0:1f:4d:18:19:9f:f5:6f:3b:16:ce:7f:54:dc:b8:0b:25:
e9:8b:06:2f:e3:c0:36:14:13:b6:2e:61:f3:e0:28:a2:a9:f3:
7c:ff:0c:2d:ad:8f:c0:2e:96:2b:7a:2a:5a:80:7e:5d:36:7a:
0e:96:19:da:3a:90:17:9a:68:a5:2d:d7:33:b0:72:3a:2f:8c:
95:e0:a3:98:08:76:7f:77:7c:91:25:1f:5f:10:6f:39:ef:9e:
7a:3d:79:ff:5e:de:d9:44:e2:2d:0a:b3:eb:16:71:5e:51:99:
17:14:0e:c8:fa:91:fd:f7:91:d7:19:67:a5:6d:a3:7c:33:91:
5e:7e:05:1f:d3:39:a5:3a:85:25:89:14:c5:28:45:b3:6b:3a:
3b:17:cf:ad:71:23:73:c7:2a:36:0c:0a:51:a8:0d:c2:10:9d:
75:28:42:81:c2:40:ee:32:2e:13:24:c8:66:22:9c:07:06:7f:
ff:65:06:e0:a6:4e:92:fc:e3:72:6e:12:1a:36:af:93:33:0a:
cc:09:93:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:49:28 2024 by rpki-client on console-fra.rpki-client.org