Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B3C904481FE511EEABA002544AD9E6FC.roa
File: B3C904481FE511EEABA002544AD9E6FC.roa (raw, json)
Hash identifier: SLRACrqG3zjvGbSbKFap1TKooDMy86rJabEtGmJTMqo=
Subject key identifier: 6D:FC:E3:F6:8B:7B:8D:B3:84:22:5A:4A:18:E6:F5:57:46:0E:64:65
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0B49
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B3C904481FE511EEABA002544AD9E6FC.roa
Signing time: Tue 11 Jul 2023 12:23:12 +0000
ROA not before: Wed 12 Jul 2023 12:23:09 +0000
ROA not after: Fri 12 Jul 2024 12:23:09 +0000
asID: 133499
IP address blocks: 161.123.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2889 (0xb49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 12 12:23:09 2023 GMT
Not After : Jul 12 12:23:09 2024 GMT
Subject: CN=64ad49b0-ed7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2b:37:89:c4:90:79:23:7a:9b:48:3d:3e:66:
e0:51:04:3f:01:d6:9b:00:f6:ae:59:9b:98:50:2e:
4c:4c:46:6e:c6:3e:92:d5:30:dc:ad:2a:f1:8b:2e:
e5:2f:66:a4:de:51:0c:32:8f:b9:34:4c:a3:6b:e2:
55:70:1a:22:f9:e0:34:45:dd:1b:c7:59:84:f3:8a:
db:a9:4d:22:4a:58:87:73:c9:bb:f1:f4:1c:7a:4f:
08:8e:95:c8:ec:6a:a1:98:6f:8b:3b:46:13:45:f5:
f5:82:ef:c3:f4:f8:bb:52:e8:cb:72:b4:49:fa:6f:
56:73:81:dd:49:a8:60:7f:b4:dd:79:e2:2e:c8:43:
4d:46:4d:a5:7f:2f:6e:ab:ea:54:e8:54:cc:16:f8:
d8:2d:b7:51:8b:af:1c:e4:67:25:99:ce:6a:d6:53:
09:50:c0:80:4a:62:ff:2c:2e:f0:c8:c6:8b:5f:2c:
55:af:5d:9f:bc:f0:1c:da:b0:3d:a0:9e:f6:8d:4b:
c1:ef:dd:62:a2:3e:48:85:92:d0:0c:db:12:c5:25:
94:89:5b:e0:aa:97:c0:6f:c1:19:9f:ea:ed:5d:dc:
dc:65:08:b7:53:3a:9f:62:f7:f8:a1:1b:7e:10:53:
10:e4:4e:19:8a:f4:07:a7:7e:d6:19:60:50:8f:62:
e7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FC:E3:F6:8B:7B:8D:B3:84:22:5A:4A:18:E6:F5:57:46:0E:64:65
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B3C904481FE511EEABA002544AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.196.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e7:b8:06:7c:38:ed:44:a4:bb:f3:67:80:78:a2:75:58:26:
c8:c1:3d:8c:65:e9:af:23:e5:ab:36:71:e4:f7:8e:ea:49:e0:
b4:8e:88:b1:c7:9b:63:5e:94:e3:3b:86:f7:37:29:6b:99:c7:
03:77:14:bc:93:64:11:fe:12:74:31:f6:82:c4:bc:eb:fb:50:
3a:9d:73:a6:20:a0:bd:bf:8b:a4:bb:58:02:3e:29:06:a6:79:
dd:fd:42:1f:ed:f4:5d:9a:91:d0:78:cb:cb:82:dc:86:20:d1:
8d:0a:42:71:a1:e6:2b:ef:2b:37:3a:38:7b:83:6e:65:4a:31:
59:08:4d:2c:2f:1e:3d:80:42:81:f9:15:78:cc:bf:11:ce:00:
19:6b:02:c2:f5:78:6a:3e:5d:cb:e9:90:10:02:68:f3:29:9c:
d7:84:03:8d:0d:4c:13:99:5e:b0:0d:8f:54:ab:5b:4d:ff:c9:
4d:0f:31:6b:13:b0:e2:bf:e0:14:ef:fb:8e:d7:ee:46:87:da:
79:b1:2c:29:1d:0f:b4:d9:d8:0b:c9:fa:4d:b5:ae:82:e5:f8:
42:13:4b:32:9b:bc:7b:19:a3:c9:0e:14:6c:39:a8:c5:e9:23:
86:48:ab:f5:1a:b2:75:2a:93:25:27:5a:09:84:d9:f6:7f:a4:
7a:3b:19:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:04:07 2024 by rpki-client on console-ams.rpki-client.org