Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2F6F4E447CD511EEAC4ECF474AD9E6FC.roa
File: 2F6F4E447CD511EEAC4ECF474AD9E6FC.roa (raw, json)
Hash identifier: 26srpZmRXfyFE1gGbHDpYOz/Xtg27+577atmPLyLm8g=
Subject key identifier: 4E:68:A0:CE:23:95:BC:22:72:AF:C6:DA:EF:52:08:C4:1A:EC:6A:60
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0C8F
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2F6F4E447CD511EEAC4ECF474AD9E6FC.roa
Signing time: Mon 06 Nov 2023 18:49:16 +0000
ROA not before: Mon 06 Nov 2023 18:49:13 +0000
ROA not after: Mon 06 Nov 2028 18:49:13 +0000
asID: 207990
IP address blocks: 161.123.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3215 (0xc8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 6 18:49:13 2023 GMT
Not After : Nov 6 18:49:13 2028 GMT
Subject: CN=6549352c-0747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:05:c3:49:82:5a:1a:5a:75:57:28:68:5a:5b:
d9:c2:d8:87:e8:d5:50:82:d0:02:9e:d7:6d:1b:ec:
f8:33:12:46:c6:11:c7:c2:bf:fd:3d:7f:8c:14:e5:
91:7a:f5:ed:6d:d1:4d:83:fc:dc:84:94:7e:01:8f:
85:31:e6:04:62:45:64:4c:c7:fa:e3:e2:13:fd:9c:
08:8e:d8:69:16:73:5a:8f:06:d7:ec:84:bb:09:3c:
fb:93:d1:cc:96:82:52:c9:26:f9:10:a2:15:3d:b5:
99:79:0e:1e:ad:9e:fc:6b:b4:3d:b2:b3:b2:d3:a2:
71:e0:b0:7a:a7:72:a9:17:95:c3:dc:20:56:a2:2f:
ac:c6:2c:30:16:83:ba:fd:c1:ea:c0:4f:b1:ca:fd:
cc:fa:97:79:b3:6d:8f:5a:16:ff:55:79:40:e8:df:
dd:51:f0:dd:e4:dc:e0:e1:80:43:ba:16:d0:7b:aa:
37:9e:e5:46:ad:fa:2a:a8:7d:3a:53:d9:5a:fb:b7:
c7:f1:ee:2b:16:30:f5:24:0f:87:76:51:a9:79:ba:
52:20:13:be:55:34:67:35:23:56:01:ff:57:f1:74:
75:1f:d7:8c:e6:93:b1:f8:c8:a0:27:50:cd:31:74:
a9:87:93:cb:c3:51:84:ff:5f:ee:4d:ae:a4:86:b4:
ee:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:68:A0:CE:23:95:BC:22:72:AF:C6:DA:EF:52:08:C4:1A:EC:6A:60
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2F6F4E447CD511EEAC4ECF474AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.23.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:41:44:b6:ea:2c:c6:f2:b3:54:ba:43:6b:e9:f2:06:a2:ad:
e9:0a:00:f8:e5:5d:90:48:c4:c4:98:7c:13:e9:a5:cd:10:41:
cf:e5:3a:09:ff:2e:74:cc:c3:6c:91:25:b5:d9:a2:dc:32:ae:
8f:36:b1:6a:dc:02:0a:89:b0:3d:c8:5c:05:91:fe:4b:7f:80:
a6:b7:3c:d9:be:11:8d:a3:72:a2:74:ea:68:6a:bb:fd:81:87:
23:75:b8:4e:01:68:21:34:f0:b7:55:92:80:24:10:0b:3c:8f:
fc:33:7a:34:b8:c9:48:1a:98:f4:00:25:11:f6:79:5f:44:05:
d8:92:d0:d6:43:d3:77:d5:23:aa:b1:1c:7b:a7:2d:94:07:0c:
43:3f:83:a1:4f:dd:b9:9a:f5:19:50:6b:50:09:85:a1:32:a2:
12:ec:4a:1c:51:88:0c:42:b3:b0:fc:c6:70:4a:19:bf:14:87:
26:fa:b4:ae:b5:d3:9c:78:ff:ef:5b:41:d3:fb:cb:90:91:9f:
44:6f:e4:0c:62:50:ec:9f:ed:18:56:ef:79:dc:21:59:5c:d7:
12:72:f6:34:9d:79:90:08:f1:0d:57:ce:ac:75:4e:04:fa:d2:
0b:bd:43:ab:1b:6e:b2:de:59:93:a6:cf:bc:e5:b8:7d:b9:65:
a9:5d:57:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:04:06 2024 by rpki-client on console-ams.rpki-client.org