Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/93519212950F11EE80863250D25BE465.roa
File: 93519212950F11EE80863250D25BE465.roa (raw, json)
Hash identifier: 7CHFhc2FgVa1U2IUJpnH7a8QLoNpb4atatOBzOkwLPQ=
Subject key identifier: AA:15:E8:38:91:C6:57:43:8F:EE:E0:4F:06:5D:FC:B3:3A:0A:7A:8C
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0CDA
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/93519212950F11EE80863250D25BE465.roa
Signing time: Thu 07 Dec 2023 14:47:42 +0000
ROA not before: Thu 07 Dec 2023 14:47:39 +0000
ROA not after: Thu 07 Dec 2028 14:47:39 +0000
asID: 207990
IP address blocks: 161.123.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3290 (0xcda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Dec 7 14:47:39 2023 GMT
Not After : Dec 7 14:47:39 2028 GMT
Subject: CN=6571db0e-63c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3c:ca:3e:00:2c:fb:0a:83:da:68:61:6c:24:
34:d9:91:1e:99:70:da:cb:76:9c:ee:72:88:d0:8e:
5d:ba:47:9a:b6:9b:dd:95:af:05:eb:b9:a0:03:7b:
94:7a:f6:74:51:68:33:df:a4:0d:3f:ea:81:58:c7:
f1:38:94:29:49:07:f9:ba:d1:e1:52:17:77:81:c2:
a2:de:38:aa:05:4c:9c:89:5e:02:6b:0a:35:c1:e2:
b0:68:a6:03:e3:36:6a:7c:5f:45:72:65:78:48:de:
a0:d7:a8:9c:74:80:6a:c8:d5:af:dc:e3:02:78:76:
92:98:58:6d:73:50:7d:fa:05:2b:18:a5:cb:0e:99:
f2:22:72:97:a8:8a:3c:f3:cf:7a:e4:15:09:af:46:
de:00:06:7c:3b:73:da:ab:29:61:36:84:89:90:27:
87:d9:b6:22:39:98:42:5e:50:5c:9e:96:e2:c2:35:
c0:6e:f0:d7:76:a0:e4:9e:f8:27:cd:a4:c1:74:45:
2c:ef:80:84:cf:b1:23:64:38:87:e6:c6:22:34:3b:
c3:ef:16:67:75:cb:6d:f3:19:cd:a0:5b:5c:cf:78:
aa:aa:6b:17:92:65:ff:b4:2e:6e:0c:1c:52:c7:b1:
18:77:27:29:3c:bd:00:74:32:96:ed:90:0b:f9:8e:
d6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:15:E8:38:91:C6:57:43:8F:EE:E0:4F:06:5D:FC:B3:3A:0A:7A:8C
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/93519212950F11EE80863250D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.247.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:32:71:c6:b3:37:50:89:75:bd:cb:0a:eb:b8:dd:6b:71:f5:
6f:3c:77:e6:dd:96:71:f5:0b:69:6f:20:ed:24:cb:0b:b1:7b:
fe:b1:df:32:34:70:e8:ca:56:f9:36:5a:64:19:c9:97:98:38:
db:f9:0a:7d:d6:a4:c9:41:61:b4:fe:38:0a:42:19:4b:b3:41:
ac:96:be:96:80:f2:5a:ed:44:b5:8b:30:1d:f1:ce:de:94:8c:
a5:7f:b2:f4:e7:8b:63:37:9b:dc:2f:1e:32:b7:70:d7:e9:a7:
bd:2d:23:a3:bb:00:17:d9:0b:6e:77:b1:fd:96:cf:ee:b0:84:
e6:63:35:84:2a:33:df:e9:f3:24:7b:af:8d:1e:62:cc:74:e8:
91:ef:01:c9:44:a3:99:51:48:70:51:95:e3:ed:4d:e9:a7:9a:
4e:5f:eb:06:2c:7b:10:f2:30:c5:7d:bf:32:f3:c3:35:42:4f:
46:06:11:0e:d7:04:c5:60:96:20:4b:5f:b9:93:c0:50:48:6c:
8f:57:42:e6:a1:4d:34:46:41:33:3b:b0:42:b8:ef:fd:75:90:
81:5e:8e:52:d8:3c:aa:da:80:60:d7:30:62:41:50:02:dd:28:
eb:84:6a:be:cd:00:52:b6:de:8f:9b:f1:c7:d1:93:3b:8c:2f:
64:a0:8b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:04:07 2024 by rpki-client on console-ams.rpki-client.org