Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/24DCBEE81CC811EE8606CB5B4AD9E6FC.roa
File: 24DCBEE81CC811EE8606CB5B4AD9E6FC.roa (raw, json)
Hash identifier: OYl5hdFGaujS4gjrLvsYVk7zOfJ//FCg+6pLg/IOgQM=
Subject key identifier: C5:DC:36:39:31:FE:60:13:9B:FD:76:39:2D:E3:B8:D1:84:59:A1:58
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0B3D
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/24DCBEE81CC811EE8606CB5B4AD9E6FC.roa
Signing time: Fri 07 Jul 2023 13:14:03 +0000
ROA not before: Fri 07 Jul 2023 13:13:59 +0000
ROA not after: Sun 07 Jul 2024 13:13:59 +0000
asID: 8100
IP address blocks: 161.123.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2877 (0xb3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 7 13:13:59 2023 GMT
Not After : Jul 7 13:13:59 2024 GMT
Subject: CN=64a80f9b-2fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:80:f1:3d:85:c2:5e:b5:eb:9e:7b:a5:ff:72:
30:21:bd:d2:89:4e:57:a3:fa:90:f1:ae:ef:8f:a8:
5f:45:65:f0:f9:35:fa:b4:42:a6:4f:e2:70:82:3f:
f1:1d:15:a6:bb:42:03:24:77:bf:29:b9:32:cd:48:
5b:86:f8:95:07:28:e2:b4:f5:d7:92:5c:51:bf:17:
35:10:b6:c3:59:9f:aa:9a:99:38:64:2b:e5:08:19:
9f:dd:14:55:4d:03:08:39:47:99:9f:52:f6:78:04:
e4:67:e6:d8:25:82:53:81:60:fd:55:86:33:d7:07:
6d:86:25:80:ac:02:a0:ad:5c:39:5a:8f:20:42:c1:
61:8b:a9:3c:6b:23:8d:96:c2:61:80:c4:ff:09:ad:
c3:a6:e0:eb:82:5b:66:35:2f:21:83:db:00:ea:45:
9e:09:84:96:38:ce:b5:3d:ba:b7:d8:80:28:44:5b:
b0:91:ca:d9:7f:52:4a:03:c5:95:28:eb:83:76:cf:
7b:ad:c5:99:df:6c:0f:2d:18:4b:54:54:a0:de:21:
b3:27:69:25:6d:27:a6:e6:13:a2:16:01:4b:9e:56:
6c:2b:da:9e:c0:e8:13:0d:2a:87:52:14:05:d2:39:
c6:ad:78:13:25:ec:3f:6f:a6:ed:61:09:ad:1b:b6:
a3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DC:36:39:31:FE:60:13:9B:FD:76:39:2D:E3:B8:D1:84:59:A1:58
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/24DCBEE81CC811EE8606CB5B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.35.0/24
Signature Algorithm: sha256WithRSAEncryption
28:f0:8d:38:6c:ce:21:b8:e1:c7:06:dd:15:71:8b:b0:3f:3f:
02:2b:bf:34:f9:30:fe:14:27:97:14:45:44:cd:81:52:73:cb:
e0:42:c3:00:be:77:18:1c:1c:54:4e:ee:0a:0d:b9:4c:95:ff:
33:c6:6a:4d:3c:87:c2:00:dc:7c:93:64:92:bf:27:5e:d4:03:
44:80:4c:36:a6:45:e8:9f:de:4a:d6:df:38:ea:79:57:5d:b3:
b0:90:46:fa:18:31:76:30:17:96:21:21:d6:6e:4f:53:ff:70:
c0:5b:1f:16:93:d7:1c:a7:9b:f9:62:fb:8b:03:5d:dd:92:04:
59:65:b4:f9:84:cf:d0:c4:58:d7:34:6c:d1:64:7f:40:c7:d6:
2d:14:55:95:fa:43:e4:16:0f:1f:d8:61:f6:a9:8c:57:fc:41:
a1:d1:c9:17:67:17:7f:98:5d:4e:cd:e1:57:f5:8d:c5:ce:67:
46:c3:79:94:70:83:75:09:27:16:bb:a4:9f:83:24:8b:c0:cd:
00:a5:df:4c:88:e8:74:12:8e:c4:31:ab:11:4f:e7:b1:56:22:
54:e7:5c:9b:12:aa:18:a3:91:87:8d:4b:d2:54:60:ee:05:ae:
90:4c:60:9a:61:f1:c9:2a:09:69:ac:c5:83:04:11:54:3b:e4:
9b:42:bf:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:04:30 2024 by rpki-client on console-fra.rpki-client.org