Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/194EF060D11B11EF88C609B2762E951A.roa
File: 194EF060D11B11EF88C609B2762E951A.roa (raw, json)
Hash identifier: CNKiHUgf56EcUjvPc2w/QdLK9nRsEZ9YSCrax97mhPM=
Subject key identifier: 2B:55:8C:B9:AC:E4:E4:01:D3:EB:39:87:D8:A6:06:C0:BA:45:61:74
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0EC3
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/194EF060D11B11EF88C609B2762E951A.roa
Signing time: Sun 12 Jan 2025 19:26:19 +0000
ROA not before: Sun 12 Jan 2025 19:26:15 +0000
ROA not after: Fri 12 Jan 2035 19:26:15 +0000
asID: 61290
IP address blocks: 161.123.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3779 (0xec3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR
Validity
Not Before: Jan 12 19:26:15 2025 GMT
Not After : Jan 12 19:26:15 2035 GMT
Subject: CN=6784175b-65bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:44:3a:26:72:55:9d:59:bb:5b:2c:96:e2:00:
fa:6b:d9:cb:d4:d9:f1:0c:ec:60:7e:55:06:c8:4e:
de:83:f2:e6:39:16:57:e8:01:cf:3b:1a:e6:ba:c1:
e1:8a:cf:fd:66:72:e6:8e:1d:29:86:f1:66:fc:53:
20:d9:fb:3d:31:c0:02:a9:e9:31:22:db:1a:08:3b:
c3:b4:48:c4:43:69:47:bb:c7:95:a1:43:b0:db:bc:
77:a3:87:95:ca:2c:e9:95:e5:8e:59:6a:ff:47:78:
de:7d:91:bc:6e:6d:dc:0a:02:90:38:55:8f:a9:45:
e4:96:2b:50:0d:7c:b0:23:40:ed:50:77:e4:09:4c:
81:77:6c:9d:f3:0e:6f:52:30:13:1e:19:d1:72:bf:
6a:f9:76:5c:a3:d9:df:1a:e8:f0:e6:c0:e5:b0:2b:
32:72:d8:53:f0:01:be:67:49:f4:6a:1f:ee:4f:5b:
d5:4c:e6:0b:c2:cc:30:ea:4e:9d:d4:9e:ae:a6:ef:
80:f8:eb:13:6e:35:92:26:9e:d8:bc:b8:d1:60:cc:
23:e1:a3:17:0a:fb:b0:47:e6:b5:4e:1b:a3:a5:8d:
6b:6b:84:5e:2a:50:df:93:9d:33:14:39:21:f7:d0:
ed:d0:93:77:9f:07:4a:04:a1:c0:74:e9:a3:ed:3a:
7d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:55:8C:B9:AC:E4:E4:01:D3:EB:39:87:D8:A6:06:C0:BA:45:61:74
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/194EF060D11B11EF88C609B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.241.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:77:3e:1e:85:23:a8:5e:99:14:11:7d:22:77:1c:7e:a9:4d:
d6:bb:f7:cc:02:3b:03:bd:23:f9:04:fa:ef:2e:e3:c4:75:2a:
c0:0f:93:21:75:77:94:de:30:a6:d7:53:0e:57:6b:39:02:11:
e0:4b:f4:53:df:c1:ac:d5:9b:5c:94:e7:1d:31:d9:d0:53:87:
2c:eb:d5:93:cb:ee:2f:51:5c:14:6a:16:7e:f2:cc:d5:61:c1:
2a:ff:21:25:da:f5:f4:25:cd:a4:e5:96:00:dd:96:3a:5e:0a:
f5:60:0c:09:60:36:16:2a:a1:a2:b0:e2:fa:b7:8a:1a:c4:b2:
1b:91:9f:30:31:04:83:28:98:90:00:fa:0d:86:22:01:f5:fa:
ab:0a:29:8b:af:9a:d2:b0:b1:2d:0e:ec:30:1e:9e:d1:1c:31:
14:c9:cf:e8:5e:9d:cc:82:9d:a7:71:35:54:85:2d:82:f4:92:
6a:6d:6a:61:3f:70:13:2f:c2:73:44:06:af:01:d4:92:c0:34:
d3:84:fb:c6:89:c5:12:fe:cf:dd:81:16:a6:d5:20:2e:aa:00:
59:90:b0:5f:13:54:d4:c1:dd:7a:61:6b:f2:4b:d1:9c:4f:4e:
e0:00:aa:38:c4:dc:63:33:0f:3b:4c:9f:46:2a:4f:84:8e:d3:
d1:6e:d1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:42:33 2025 by rpki-client