Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/72AEF940C7F611EE9B4C16A8775412E6.roa
File: 72AEF940C7F611EE9B4C16A8775412E6.roa (raw, json)
Hash identifier: 8cL6krzrq3TMBqpOk9xO5dobPNCiftRdnqcLAJBiii0=
Subject key identifier: 33:C1:D8:15:5C:5B:AA:B8:5D:CC:24:7F:2D:74:C0:AC:6A:E2:4A:2D
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0D32
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/72AEF940C7F611EE9B4C16A8775412E6.roa
Signing time: Sat 10 Feb 2024 09:26:21 +0000
ROA not before: Sat 10 Feb 2024 09:26:16 +0000
ROA not after: Mon 10 Feb 2031 09:26:16 +0000
asID: 50028
IP address blocks: 161.123.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3378 (0xd32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 10 09:26:16 2024 GMT
Not After : Feb 10 09:26:16 2031 GMT
Subject: CN=65c7413c-f5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:67:78:09:18:70:a3:78:ae:8f:5d:27:cc:93:
92:8e:21:a8:ca:1c:84:bb:f9:a3:4b:ca:f0:dc:3a:
ba:10:0d:8b:8d:76:cb:ab:83:f9:eb:38:a1:5d:ab:
aa:c2:2b:1f:c3:10:d5:32:95:77:42:65:78:0e:35:
c0:61:5b:d0:f7:8b:52:6b:40:d1:b2:05:06:d4:be:
dc:8a:51:3a:31:39:90:33:aa:76:9e:90:35:bd:37:
94:e0:9a:e6:9c:b2:c6:9a:b5:3a:ee:e3:75:bc:2d:
da:38:f9:ff:05:00:3f:e2:9a:01:75:cd:c1:24:80:
db:d7:ed:73:6d:ac:c1:30:50:54:c8:31:f0:b9:11:
a2:6e:8e:ec:69:15:f9:14:8b:77:01:7a:1f:a1:aa:
19:14:04:ca:84:10:de:c6:f1:65:02:3b:0a:cf:47:
03:0e:bb:39:14:2d:c8:9e:60:c2:f3:b3:48:04:a9:
a5:f2:62:3b:c0:0a:89:ad:84:26:7c:b9:f0:da:d0:
21:7c:e4:8c:e0:e7:dd:bc:64:79:c7:3f:50:d3:7b:
dd:03:70:0f:33:f0:35:27:7c:17:c8:98:8f:5d:e6:
c5:1f:c7:1b:d7:c0:ff:e6:ca:ae:2b:5b:f3:ba:c1:
ff:40:c6:21:f0:72:58:b2:be:15:a6:cf:53:e9:5a:
4f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C1:D8:15:5C:5B:AA:B8:5D:CC:24:7F:2D:74:C0:AC:6A:E2:4A:2D
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/72AEF940C7F611EE9B4C16A8775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.197.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:00:dc:a7:c5:23:d8:6a:f9:1c:69:22:bb:3f:d2:5c:bb:02:
00:12:5c:4e:11:0d:5f:43:6b:ad:34:07:94:72:31:d0:86:16:
c6:ea:85:d2:13:c2:6d:9c:fe:0a:0c:e5:59:67:57:6b:05:fc:
b7:19:3c:28:40:67:04:68:52:8f:8a:05:a5:aa:5e:f1:29:ec:
3c:fa:f4:dc:ef:d2:bd:2c:e8:37:51:38:94:b4:40:8b:1e:4d:
28:bc:ad:ea:d6:b3:70:a4:f0:51:a7:0c:02:b9:da:2a:5e:53:
5f:f4:15:ec:67:e0:b3:59:84:4a:86:b1:d2:50:1e:01:eb:4a:
f2:29:a3:48:85:19:cb:f3:40:39:69:c4:4c:3b:de:2b:bd:00:
41:c8:e6:3e:84:a5:40:a7:25:79:b5:20:f7:54:6e:db:b7:7c:
ec:5b:fd:28:74:4c:64:2b:3f:bb:5d:45:e3:bb:4b:27:a8:08:
2b:c8:dd:e5:f1:a4:c9:51:1c:16:47:86:05:24:1e:97:3e:fa:
14:4d:7f:17:f7:18:c7:28:39:82:e0:01:1b:4a:d7:3a:e4:d1:
3b:88:92:5e:1e:d7:2a:ec:29:63:f9:c9:d3:1a:f8:7a:73:78:
4f:ea:39:a0:a4:46:d6:5e:5d:f4:92:a4:e0:a8:1c:2d:80:ae:
38:4f:5d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:49:28 2024 by rpki-client on console-fra.rpki-client.org