Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/65E452B43DBD11EEBD8E062C4AD9E6FC.roa
File: 65E452B43DBD11EEBD8E062C4AD9E6FC.roa (raw, json)
Hash identifier: FE2wBmjbReD8zxkuNXwaX9GvrM2TYpL/e1iy68o/Vqw=
Subject key identifier: 72:F7:7C:54:D2:9C:75:44:F6:B3:04:24:57:6D:CB:30:A5:11:16:4D
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0BAA
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/65E452B43DBD11EEBD8E062C4AD9E6FC.roa
Signing time: Fri 18 Aug 2023 11:50:16 +0000
ROA not before: Fri 18 Aug 2023 11:50:13 +0000
ROA not after: Sun 18 Aug 2024 11:50:13 +0000
asID: 203020
IP address blocks: 161.123.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2986 (0xbaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Aug 18 11:50:13 2023 GMT
Not After : Aug 18 11:50:13 2024 GMT
Subject: CN=64df5af8-f36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:06:7e:5b:01:e2:29:e5:5a:dd:04:45:78:
2c:0c:77:e5:fb:7b:1c:c6:30:54:49:dd:4f:86:02:
32:f4:bc:e1:d9:90:17:5a:80:1f:d7:fb:1f:28:c6:
bc:4e:b1:ba:ac:1b:b4:19:66:11:67:00:d1:db:cb:
a8:8f:a6:24:58:68:8b:cd:32:6e:50:c5:df:4f:ac:
c0:80:d5:51:1f:af:47:95:a5:74:af:12:75:5d:22:
68:8a:7c:81:d3:d3:d8:5f:be:bb:bc:47:3d:6f:59:
ab:2e:35:86:0f:70:c0:f6:23:d2:0f:61:06:d5:cc:
4e:39:f6:d5:16:19:56:f5:33:6e:f4:01:0f:ca:a2:
98:60:ea:5d:df:98:6c:cf:69:e5:3d:19:4d:fd:f4:
08:4e:d6:de:56:81:12:25:da:6e:17:b0:a2:3c:be:
27:51:8d:38:ce:bf:f3:0b:27:07:ee:cc:f0:9b:c6:
d5:92:e4:30:c5:6e:d2:07:49:c7:c8:b6:1d:c1:58:
db:70:f5:9d:ea:12:47:81:2b:8a:40:b5:5a:47:7b:
b2:40:ad:cb:a1:85:ea:5b:24:af:90:8c:5d:25:f4:
30:d6:eb:06:21:5e:1d:48:00:74:15:6f:f2:93:62:
7c:94:1a:d5:51:e1:8d:19:71:e5:5f:05:b0:ba:df:
4f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F7:7C:54:D2:9C:75:44:F6:B3:04:24:57:6D:CB:30:A5:11:16:4D
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/65E452B43DBD11EEBD8E062C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.240.0/24
Signature Algorithm: sha256WithRSAEncryption
01:1e:04:56:5b:35:e7:db:e2:60:08:ab:68:5e:9c:75:b4:2c:
d9:f4:b1:2e:71:aa:5c:92:b8:0f:58:76:31:bd:cc:55:b7:58:
9e:f4:ee:f8:d4:45:f7:d8:65:55:c7:d2:1e:63:c1:48:ba:91:
2b:33:ab:8a:f1:47:e1:ae:c5:1b:4a:51:02:cc:f2:ad:61:2e:
b8:18:64:2d:0c:47:a2:f1:9d:63:3f:4c:64:82:43:6c:c9:b4:
01:d9:d4:31:d4:ec:93:db:f6:34:78:e4:83:5f:91:e9:0c:7b:
e8:49:2b:52:d4:06:2f:44:73:79:6e:81:3f:05:25:82:80:68:
73:1a:a5:3f:1f:f5:0f:48:ab:59:10:8f:3b:94:be:76:ad:7e:
28:f9:3a:14:8b:d4:d2:78:67:43:db:5e:fa:8d:9f:a3:a8:1e:
a1:c9:f4:4b:43:dc:7e:9c:61:bf:3a:ed:f3:07:b6:f9:1a:77:
92:30:b0:c5:8a:3b:4b:3e:0d:33:64:e2:79:07:f1:c9:08:4f:
ab:e1:fc:2f:88:9f:d9:30:eb:af:71:48:f0:2c:97:d8:05:45:
1f:7d:76:a5:d2:86:05:59:fd:76:00:94:24:f6:43:da:c2:22:
5d:bf:6f:3e:d3:b6:d8:2a:37:97:a9:31:87:e0:f3:81:23:59:
a8:0a:b7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:49:28 2024 by rpki-client on console-fra.rpki-client.org