Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6947E9BA7CD411EEB2AEF8444AD9E6FC.roa
File: 6947E9BA7CD411EEB2AEF8444AD9E6FC.roa (raw, json)
Hash identifier: Jgh3ZL05l//cXvK6NeRyF1DRCoh+hJvi27sZ8KPPwH8=
Subject key identifier: 7D:7C:C2:04:AF:50:55:8B:CD:F4:C0:AF:09:82:81:E8:0C:30:B3:66
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0C79
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6947E9BA7CD411EEB2AEF8444AD9E6FC.roa
Signing time: Mon 06 Nov 2023 18:43:44 +0000
ROA not before: Mon 06 Nov 2023 18:43:40 +0000
ROA not after: Mon 06 Nov 2028 18:43:40 +0000
asID: 207990
IP address blocks: 161.123.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3193 (0xc79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 6 18:43:40 2023 GMT
Not After : Nov 6 18:43:40 2028 GMT
Subject: CN=654933e0-80b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a6:95:18:47:de:a1:56:42:47:59:43:76:7e:
26:bf:21:10:28:3e:70:05:e0:9a:2c:9f:2d:02:1b:
c2:05:43:00:e5:a6:3f:d8:95:2b:ce:37:59:b1:10:
dd:a0:d5:f8:69:e2:5e:67:e2:ae:c5:b5:4d:8c:8e:
05:dd:5e:33:47:c0:85:81:cc:64:ca:73:32:e4:9c:
bd:37:44:d2:08:94:34:04:19:45:5a:4b:a3:5a:f1:
a9:4c:6e:ae:8e:12:9a:d0:b2:e6:c1:b1:c2:05:d9:
85:46:a4:5c:9d:f4:6c:30:32:58:40:bf:45:45:c6:
ba:9c:bc:ca:b6:4b:4f:bd:72:47:7d:72:a6:e5:0e:
fe:52:1c:b2:ab:27:90:06:14:fc:be:18:2f:3f:6e:
5d:be:a2:b8:6e:80:d2:10:51:f1:71:de:7e:14:89:
8e:65:52:eb:5a:ec:81:63:7c:ee:ad:b9:7e:59:2b:
58:3f:40:96:08:d9:97:f0:70:f9:6a:6d:a4:29:d4:
93:0e:e8:7e:f7:0b:2a:4d:21:e3:b0:99:ee:a7:00:
7b:95:c3:92:8d:4c:c8:87:f1:ae:d1:0a:3d:2b:18:
1f:1b:59:06:b5:20:e9:b0:5b:d5:cf:1e:24:e4:c3:
f9:e6:ef:ae:a8:c5:61:13:09:7e:69:a7:63:d9:db:
a9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7C:C2:04:AF:50:55:8B:CD:F4:C0:AF:09:82:81:E8:0C:30:B3:66
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6947E9BA7CD411EEB2AEF8444AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.12.0/24
Signature Algorithm: sha256WithRSAEncryption
60:2c:3c:1d:18:e5:a2:7a:a5:16:fb:2d:b4:09:46:71:7d:9d:
ec:ec:7d:ff:00:48:ea:0a:30:24:3e:66:91:d2:b5:27:03:95:
32:c2:d3:36:fb:fa:a6:dd:c8:e3:13:5a:e6:64:ab:3f:24:8f:
64:88:6b:5c:26:22:34:80:9c:3f:ad:6f:41:3d:55:3a:d8:5e:
a2:8d:41:d7:3e:d8:e5:26:64:a8:c5:ae:e3:ed:0d:1d:d5:e9:
7c:1e:4e:d5:c3:64:cb:d4:a3:45:90:81:cb:13:f3:81:81:a1:
a0:d7:98:bc:2d:84:7a:9e:d7:5f:52:ba:64:64:f7:98:68:3c:
33:52:10:51:47:90:5b:25:c1:40:8a:96:41:ff:4c:6a:48:db:
76:ca:68:67:a0:4f:e1:bc:9b:07:3c:56:64:4a:07:2a:9c:38:
8e:32:b9:26:af:04:75:3f:8a:c8:1a:ff:13:bc:be:40:2d:28:
58:ae:4d:e1:eb:56:f2:7e:07:80:6f:a9:ba:fd:28:b9:a6:9e:
6f:e1:65:15:ef:33:a4:7a:65:dd:b6:44:7c:75:69:e5:16:f5:
5f:92:92:93:24:07:e8:93:93:cd:58:21:4e:2a:70:b9:03:21:
73:39:85:ff:08:14:a3:d1:0a:85:66:5a:c2:44:89:3f:04:e3:
d8:fb:a5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:49:28 2024 by rpki-client on console-fra.rpki-client.org