Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5E987060E6CA11EE96A53E6C775412E6.roa
File: 5E987060E6CA11EE96A53E6C775412E6.roa (raw, json)
Hash identifier: epxcOVCpaIAn8CkKYNycTbVLdkD4Mw6KfgGbnOA7cmY=
Subject key identifier: BF:DB:78:72:A7:D3:4D:6E:2D:5D:C0:B1:3E:69:15:FC:91:AF:7A:CF
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0D68
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5E987060E6CA11EE96A53E6C775412E6.roa
Signing time: Wed 20 Mar 2024 14:58:54 +0000
ROA not before: Wed 20 Mar 2024 14:58:51 +0000
ROA not after: Sun 21 Apr 2024 14:58:51 +0000
asID: 216440
IP address blocks: 161.123.0.0/16 maxlen: 20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Apr 2024 14:58:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3432 (0xd68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Mar 20 14:58:51 2024 GMT
Not After : Apr 21 14:58:51 2024 GMT
Subject: CN=65faf9ae-bc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:9c:b4:c1:4e:6f:45:2c:c2:3a:9b:53:0a:
f8:52:64:94:49:6a:a4:7f:6f:84:94:e2:56:71:55:
1e:c5:d0:38:dc:a1:0c:a7:5e:f4:f6:58:67:68:58:
28:77:24:e4:e8:05:d5:f5:10:86:56:39:1f:9e:f8:
b6:27:73:4d:09:4c:9c:d3:74:c2:14:cf:e0:be:82:
b1:ac:7f:d6:43:8f:a6:7d:ae:82:67:51:ef:9a:da:
9e:3a:46:f6:3b:fc:94:a6:71:dc:d7:0c:11:03:b9:
5e:36:5f:6a:50:8f:07:e3:fd:5b:f5:2d:52:ca:d1:
70:01:9f:45:3a:99:16:a1:42:24:7c:f4:08:cb:f6:
b7:2a:b6:85:6c:b6:5f:2c:c6:d8:bb:80:ce:52:14:
1e:7a:71:71:a3:ae:d1:f0:29:f2:12:56:e3:95:91:
71:2f:bc:0a:0c:6b:cb:23:ae:3f:2a:f4:a7:7e:3f:
17:c2:af:d1:67:e5:81:f7:fc:91:99:de:3f:d4:11:
83:ec:8c:b6:42:5c:64:d2:07:51:23:59:b8:a7:d6:
fb:3c:1a:fc:60:97:37:35:43:e2:1b:22:50:ce:bf:
f7:87:9f:18:af:57:f5:25:a8:c5:27:be:02:f0:b1:
7e:5a:10:31:4e:0f:f3:6b:87:2a:39:08:d4:9a:84:
98:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DB:78:72:A7:D3:4D:6E:2D:5D:C0:B1:3E:69:15:FC:91:AF:7A:CF
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5E987060E6CA11EE96A53E6C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.0.0/16
Signature Algorithm: sha256WithRSAEncryption
86:73:65:ea:54:30:c0:9c:98:a9:cf:ab:bd:77:9b:0a:b4:41:
6e:7f:8f:d6:e8:c2:ba:cf:93:91:cb:df:a6:a3:68:58:37:1c:
48:48:7c:a5:5c:fe:92:e4:e6:44:8c:bf:08:a8:22:6a:3f:df:
07:62:ad:49:4b:51:c3:5a:7c:97:60:7f:8d:73:ec:a5:b1:1e:
cc:1e:06:33:27:5d:ec:42:a4:92:20:cf:a1:eb:bf:c9:a5:b4:
83:d6:61:f8:de:0e:8e:0d:d0:35:dd:b9:56:ea:94:9e:fb:70:
2e:31:9e:f3:8e:40:2a:fc:0b:b5:a5:0a:f0:dd:b5:20:f9:93:
f0:f4:79:a9:51:a5:3a:48:8e:a8:2c:6a:4e:df:51:f4:b3:1b:
98:6e:02:65:dd:39:2c:b6:4f:db:df:a3:0e:b6:57:6b:92:3d:
e7:89:50:7c:28:14:ee:42:30:22:2b:1f:1e:dc:c3:58:e0:d1:
fc:9d:4e:49:f1:05:fa:e0:82:6c:30:3e:15:3b:aa:7b:07:f1:
8a:66:84:3a:81:21:c5:26:93:26:a5:fd:a3:a2:03:e2:26:d1:
0a:a7:d4:49:75:95:6a:05:69:d8:62:c5:7a:09:41:18:04:91:
2a:89:d0:86:19:a2:69:2a:d6:70:eb:13:41:d4:76:7b:21:6a:
96:0d:ea:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:41 2024 by rpki-client on console-fra.rpki-client.org