Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8AB2D1147CD411EEBFC199454AD9E6FC.roa
File: 8AB2D1147CD411EEBFC199454AD9E6FC.roa (raw, json)
Hash identifier: 0FlJrbrwNCbNt30SYjodcWMOxWObRA+egHDEaz+i/t4=
Subject key identifier: 13:7F:91:DE:26:67:EF:FC:27:71:D3:C2:F6:61:5F:02:54:13:17:EC
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0C7D
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8AB2D1147CD411EEBFC199454AD9E6FC.roa
Signing time: Mon 06 Nov 2023 18:44:40 +0000
ROA not before: Mon 06 Nov 2023 18:44:36 +0000
ROA not after: Mon 06 Nov 2028 18:44:36 +0000
asID: 207990
IP address blocks: 161.123.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3197 (0xc7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 6 18:44:36 2023 GMT
Not After : Nov 6 18:44:36 2028 GMT
Subject: CN=65493418-4052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7e:91:8a:c3:5a:8f:97:78:1d:f5:af:99:3d:
32:5b:53:24:c1:cf:c9:fe:e8:ed:e4:75:b6:1d:ee:
20:13:f3:d5:35:42:14:d1:e4:44:f7:67:df:90:8c:
85:75:57:af:bd:48:15:3d:4c:ba:4a:98:64:41:8b:
0a:7e:f4:c6:b0:88:4e:9e:2d:ca:91:7d:8e:c0:b5:
b6:b9:bf:31:46:29:90:b2:4b:60:dc:4c:af:95:dd:
1d:4c:98:3d:36:bd:e3:30:24:94:1a:3a:48:f4:6b:
f3:d1:45:b6:0f:70:a1:51:38:57:50:b9:4e:ea:ab:
63:95:c0:cc:16:5a:6d:1f:67:01:01:97:17:b6:4a:
d6:cd:db:0e:0d:88:a1:7b:17:9c:c9:23:2f:dc:b3:
7d:b9:a2:75:e1:ec:f1:f1:b7:45:ed:ab:3c:80:81:
4a:5e:f4:3a:b4:4b:43:10:25:9b:3f:11:31:d1:11:
00:4d:45:c8:7d:92:ad:cd:b9:68:eb:01:3c:fb:f7:
99:4b:62:8f:cf:39:f5:51:a3:31:9e:3b:a8:a2:5a:
01:22:88:75:98:a5:3b:cc:32:6f:ba:71:af:0a:68:
fb:86:d9:9a:6a:3c:19:80:2d:a7:00:4f:41:60:9e:
88:dd:7f:9b:9e:b6:de:0f:f2:74:e4:db:07:5a:9f:
72:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7F:91:DE:26:67:EF:FC:27:71:D3:C2:F6:61:5F:02:54:13:17:EC
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8AB2D1147CD411EEBFC199454AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.14.0/24
Signature Algorithm: sha256WithRSAEncryption
77:32:81:60:91:56:82:cf:c1:b6:98:72:48:c5:4b:77:52:4d:
2d:28:5c:f0:bf:98:22:6d:be:8f:87:65:71:6f:80:d7:d3:b1:
62:2d:01:59:fb:f4:1a:18:e5:2a:f9:7e:0e:8f:62:db:9d:3a:
87:ae:9d:0f:94:45:8c:80:bc:08:df:d7:aa:22:44:7b:4b:20:
08:3d:cd:d2:22:2b:73:e0:5a:99:7b:1e:02:84:3e:a2:13:ea:
d0:ed:7f:9a:e9:45:5c:0c:45:c3:61:35:85:e6:7a:e7:85:c3:
a3:82:0e:4e:fe:51:0d:20:36:31:80:ba:b1:80:3d:b1:63:d6:
f5:e7:ca:17:32:d5:3c:f0:57:fa:41:ac:86:8d:70:9e:a6:74:
be:3d:1e:80:d9:0b:8c:ab:29:1b:bd:f9:97:60:00:49:18:9c:
45:cd:bb:98:95:ee:a8:2b:86:a0:c3:b8:a7:9a:2c:e6:4a:a4:
51:2c:90:6f:50:96:fc:4b:34:38:97:2e:17:42:70:2a:0d:8e:
fe:55:6c:99:15:aa:0d:cf:d6:c3:a2:0b:fc:72:37:6c:37:aa:
f7:2a:53:61:c4:ca:3c:cb:e6:bd:e1:e9:c5:f4:29:86:8d:0f:
bc:77:98:c5:9c:4d:0d:66:99:cd:bc:24:19:e6:70:6b:7d:df:
62:7b:a0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:04:07 2024 by rpki-client on console-ams.rpki-client.org