Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/822785181FE511EEBF276F534AD9E6FC.roa
File: 822785181FE511EEBF276F534AD9E6FC.roa (raw, json)
Hash identifier: E9emZinBwA6kngi3yXzezeivUCj12cV2m7ZXBGSwZJ4=
Subject key identifier: 9D:0C:E0:CC:AB:59:D9:A8:1B:0F:34:64:22:F1:B9:0F:DC:74:2E:01
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0B47
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/822785181FE511EEBF276F534AD9E6FC.roa
Signing time: Tue 11 Jul 2023 12:21:49 +0000
ROA not before: Tue 11 Jul 2023 12:21:45 +0000
ROA not after: Thu 11 Jul 2024 12:21:45 +0000
asID: 133499
IP address blocks: 161.123.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2887 (0xb47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 11 12:21:45 2023 GMT
Not After : Jul 11 12:21:45 2024 GMT
Subject: CN=64ad495d-b1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:1b:e6:23:0b:00:ee:3d:2f:7f:5a:1e:e6:
15:84:2b:76:0f:c5:f7:81:45:15:b0:6a:87:f8:66:
0f:f2:46:4c:73:ba:78:b9:2e:35:a7:74:87:bd:cf:
85:f1:57:bb:f3:63:d8:ef:e8:9b:50:85:75:dd:38:
47:97:e8:91:0a:8b:3c:aa:a8:cc:97:57:3e:d8:cd:
12:ed:0d:44:b8:31:05:4c:7d:84:9a:b4:e2:9a:70:
a1:c8:f9:9f:9a:3b:93:79:7a:4c:d2:f3:6e:81:48:
52:94:c1:b5:35:79:b7:a8:52:22:03:08:04:9f:85:
69:7e:1b:88:71:a4:f2:f6:3b:ee:06:52:11:85:cb:
82:2a:4a:e9:44:f5:5d:81:ea:bb:68:29:d4:cf:07:
27:80:dd:0b:33:6b:09:e4:7c:fb:fc:f8:08:02:bb:
b8:b0:65:7a:61:01:5d:dc:09:d6:57:15:e6:ad:cb:
5f:5a:d9:cb:ac:5e:b3:4c:00:a8:04:64:6d:b5:fb:
8f:48:83:fc:df:fe:35:73:d6:32:6d:4c:10:a7:db:
d4:1d:b7:48:29:c7:e9:8c:16:b4:c4:59:ce:ca:e1:
3a:b4:84:4f:72:b7:f1:ad:b4:1f:77:91:80:b3:d8:
8e:9f:86:8e:3f:7b:1d:e2:33:b7:ed:21:e0:ff:0f:
69:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0C:E0:CC:AB:59:D9:A8:1B:0F:34:64:22:F1:B9:0F:DC:74:2E:01
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/822785181FE511EEBF276F534AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.94.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:1b:b2:f0:4d:79:6d:b6:22:b1:82:80:4f:13:26:0b:4e:87:
9c:34:22:c3:c7:80:34:f6:80:aa:67:d3:77:04:53:15:32:3a:
8b:6f:3f:a4:31:7b:78:4a:59:88:43:9f:be:dc:e2:64:93:b6:
8f:a7:cc:08:f6:b8:aa:ff:cd:11:5d:2d:20:54:81:af:20:fe:
12:68:f8:1a:b0:1e:c4:b7:a4:98:db:4d:b6:2a:43:8e:40:2c:
5b:50:32:69:e7:f7:fa:fe:bb:cc:66:50:ee:c2:75:88:88:ec:
ec:92:38:e3:67:75:63:ed:18:a4:ef:6d:b9:f4:dc:0b:ec:6d:
b6:fe:64:b5:a7:d5:6e:fb:07:4a:31:2f:d7:00:8c:53:42:ad:
ed:88:0d:05:bf:c8:4e:90:b5:5f:45:66:25:4a:f4:90:f6:03:
f5:db:60:7d:8a:a4:4a:14:2c:a1:8e:68:1a:cf:5c:58:bd:6b:
8a:33:af:87:3e:4d:44:cc:15:8b:ec:76:1b:55:5b:cd:2a:75:
a0:ff:b5:2c:cb:d8:60:e9:9a:61:65:63:80:62:0d:c0:cd:bf:
80:15:ff:8d:bf:e0:ff:41:3b:0d:62:f2:11:ef:4a:6b:d1:d7:
1e:4c:0a:74:17:a6:50:8e:35:73:f5:69:30:09:4f:0f:d8:1b:
2a:3e:d2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 02:40:12 2024 by rpki-client on console-ams.rpki-client.org