Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8FB619F41FE711EEBBFAC1594AD9E6FC.roa
File: 8FB619F41FE711EEBBFAC1594AD9E6FC.roa (raw, json)
Hash identifier: x0vVdvWFrNCYjVkHAU3R3g6MqW+VKnXA9JmP99UWwag=
Subject key identifier: D3:09:E9:81:8D:6E:20:BA:0F:08:9E:4C:F6:86:22:0C:D3:EF:11:F4
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0B5D
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8FB619F41FE711EEBBFAC1594AD9E6FC.roa
Signing time: Tue 11 Jul 2023 12:36:30 +0000
ROA not before: Tue 11 Jul 2023 12:36:27 +0000
ROA not after: Thu 11 Jul 2024 12:36:27 +0000
asID: 133499
IP address blocks: 161.123.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2909 (0xb5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 11 12:36:27 2023 GMT
Not After : Jul 11 12:36:27 2024 GMT
Subject: CN=64ad4cce-1034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:94:2a:d3:62:d4:0c:49:15:a7:7b:ba:2f:ef:
72:e4:f6:88:99:ab:ff:93:4a:d2:50:df:0f:4f:39:
79:61:9e:03:1c:db:42:f9:68:87:47:61:91:d6:cd:
f6:57:34:c9:13:1f:77:c1:9f:8b:36:f5:f2:c0:bc:
d4:1d:b2:70:42:af:9f:04:01:56:ef:6a:88:70:e3:
8e:50:c7:e0:5e:b6:b0:e4:d1:3e:8a:12:46:bf:c7:
b1:0c:04:c7:e2:59:f0:7a:0c:b7:38:b0:85:91:d9:
67:83:17:a7:77:3b:42:2e:f4:bc:58:f6:0e:5b:8a:
b6:47:8d:2a:62:20:30:d6:c1:29:eb:10:36:aa:9d:
4b:7a:13:98:80:af:eb:cb:43:9e:8c:2a:a4:3c:1a:
a3:bf:63:30:87:e9:7f:55:75:86:65:6f:b4:7b:84:
81:b0:fd:7e:7b:68:22:90:d9:d5:26:8e:be:cf:7f:
c3:83:6b:49:01:e1:9c:0c:1a:53:c3:59:11:13:a1:
7b:c1:6d:bb:70:16:7c:7a:06:85:2e:a2:86:1b:45:
d9:9f:cc:e8:94:3d:96:a0:bb:77:22:16:8c:fb:da:
3f:62:b9:44:9d:4c:ea:0c:df:02:7d:c7:da:21:bc:
5c:20:96:7f:c4:35:0d:b5:c4:4a:20:9c:7f:75:c3:
e2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:09:E9:81:8D:6E:20:BA:0F:08:9E:4C:F6:86:22:0C:D3:EF:11:F4
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8FB619F41FE711EEBBFAC1594AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.67.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:e0:51:37:74:3b:67:67:28:ce:87:8f:3b:ef:29:6d:3a:df:
25:c6:d6:95:71:cd:e0:c2:8e:4d:eb:1d:43:b4:35:74:3f:35:
54:25:45:4e:22:ba:d4:e8:92:72:b7:1c:69:f7:3f:24:88:3d:
7e:2f:98:c0:b0:fb:64:60:4b:e7:36:ae:a7:09:e2:50:43:60:
31:74:1c:13:9a:f6:fb:b8:dc:16:ba:5c:f4:b3:58:69:63:9b:
29:57:98:e9:d7:ee:57:c4:bb:86:9a:5d:b4:3f:6c:88:9b:0d:
6b:e9:05:b6:c9:e9:86:42:ed:a9:6b:ce:bb:54:45:a2:ce:44:
b6:41:d6:34:e8:f3:89:3f:44:83:85:51:00:36:27:da:ef:76:
97:96:9e:96:be:ce:73:d2:fb:c5:31:ca:08:7b:6a:f8:a8:7f:
18:5a:13:ee:64:7f:02:38:d0:5c:81:20:0b:9e:69:b9:05:97:
48:47:d3:fd:99:10:08:1c:59:28:af:6d:32:23:5f:14:f1:12:
3f:aa:b4:08:ff:68:5c:5d:54:58:56:b2:23:9e:1f:c1:c4:6c:
ae:d7:13:06:f9:75:54:7a:65:96:7f:10:11:3c:e1:b7:a2:56:
9f:42:fa:3a:4b:9a:e6:fa:6f:64:85:71:03:71:a0:26:6d:b2:
5e:58:c4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 02:53:22 2024 by rpki-client on console-fra.rpki-client.org