Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2CC56A661FE711EEB47576584AD9E6FC.roa
File: 2CC56A661FE711EEB47576584AD9E6FC.roa (raw, json)
Hash identifier: 2NvXdcKZ/rhmaepTEAhZKEgYZGKZImOTORm6/Y8dTW8=
Subject key identifier: D0:81:4E:25:11:FB:62:97:9E:3E:DA:F9:B2:18:4D:10:D2:AE:C5:CE
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0B59
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2CC56A661FE711EEB47576584AD9E6FC.roa
Signing time: Tue 11 Jul 2023 12:33:45 +0000
ROA not before: Tue 11 Jul 2023 12:33:41 +0000
ROA not after: Thu 11 Jul 2024 12:33:41 +0000
asID: 133499
IP address blocks: 161.123.148.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2905 (0xb59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 11 12:33:41 2023 GMT
Not After : Jul 11 12:33:41 2024 GMT
Subject: CN=64ad4c28-50b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b1:4b:4c:14:93:88:c6:8f:44:df:3d:05:25:
40:5f:25:c3:3b:54:d4:73:28:96:67:c0:05:33:6c:
5c:95:a0:00:9b:c0:61:e1:3e:21:c2:45:f2:0b:e9:
04:75:e2:5f:ed:0a:e7:99:ac:d1:cc:af:b3:b7:13:
b5:80:1d:64:0a:5a:e8:6e:51:32:b8:72:b4:f6:ca:
bd:b4:e0:95:bc:e6:53:c8:86:82:55:56:cb:a6:f0:
4f:1f:84:b3:58:2c:44:8e:0b:02:e1:e6:4c:f4:47:
a9:45:10:d3:52:c6:e8:b3:49:b6:b3:b8:d7:55:ea:
5f:d1:f1:0f:66:40:8e:3e:0b:ca:4f:66:01:85:16:
07:d4:76:ae:fd:45:16:6f:d5:dc:46:4a:c6:d7:81:
4e:e1:7e:60:5d:38:c8:ae:2a:09:35:8c:40:f2:46:
db:e8:2f:71:c3:05:2a:0c:08:9f:ed:a6:39:63:ae:
cb:d0:31:a5:a1:05:b3:7d:c1:85:20:40:2b:98:72:
29:50:e5:bd:10:87:60:aa:af:2b:21:34:a9:01:9d:
75:d3:75:be:12:31:88:09:f1:56:59:4d:cc:d3:4b:
44:42:df:cc:7c:9f:9e:54:a9:5b:7f:5e:9a:c2:53:
b3:98:f4:ca:f7:28:40:66:25:39:1a:aa:cb:cc:dd:
e6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:81:4E:25:11:FB:62:97:9E:3E:DA:F9:B2:18:4D:10:D2:AE:C5:CE
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2CC56A661FE711EEB47576584AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.148.0/23
Signature Algorithm: sha256WithRSAEncryption
33:f7:07:e0:ae:05:8b:9f:35:46:66:7d:25:8f:b7:2f:eb:44:
12:af:95:04:97:7b:ae:c3:dc:98:09:35:fc:ab:64:37:a0:dc:
6e:78:16:10:8f:18:80:05:d8:0d:01:91:8c:20:0a:ad:38:1a:
21:c6:3c:88:85:19:52:88:34:95:30:17:68:57:5f:f6:fb:a1:
86:8c:6d:25:c6:00:21:d4:63:ad:e3:b2:8b:19:cb:78:28:ab:
da:bc:07:fd:ac:3c:e3:5c:7a:1b:59:2f:21:34:e3:26:35:7e:
94:2a:d7:f6:6e:47:f1:1f:11:3c:cb:fa:f2:ef:9b:42:b3:32:
db:40:68:f8:3e:ce:de:ec:4a:89:6e:d6:c0:e0:98:23:08:9a:
c6:45:0a:c3:82:77:1b:2a:1a:2b:a1:53:47:55:9f:d0:1b:de:
a2:68:06:e6:62:fd:ba:c2:b3:da:5b:e4:7e:95:d4:98:fc:e8:
05:9f:a5:9a:71:9d:0f:b9:a2:ba:e1:09:b9:0f:3f:38:96:37:
7e:a5:08:85:80:28:1e:36:01:82:b6:3b:35:85:14:08:a5:00:
bb:a1:77:0f:70:7b:80:8d:30:d3:f5:56:bc:89:7d:d2:d4:09:
c8:0d:b0:1c:85:22:2f:59:f5:27:f7:b3:45:ce:e7:5a:e6:f5:
9b:71:09:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 02:53:22 2024 by rpki-client on console-fra.rpki-client.org