Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B49B8CC62D3A11EEA6F87D7B4AD9E6FC.roa
File: B49B8CC62D3A11EEA6F87D7B4AD9E6FC.roa (raw, json)
Hash identifier: sbRum+AGYr423T3OlxJyzap73O6OhJdPnNXlidpB6WY=
Subject key identifier: C9:0B:B5:CA:DD:47:21:39:0D:5B:9E:3F:77:56:AB:11:54:10:A9:F1
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0B72
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B49B8CC62D3A11EEA6F87D7B4AD9E6FC.roa
Signing time: Fri 28 Jul 2023 11:34:26 +0000
ROA not before: Fri 28 Jul 2023 11:34:20 +0000
ROA not after: Sun 28 Jul 2024 11:34:20 +0000
asID: 207990
IP address blocks: 161.123.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2930 (0xb72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 28 11:34:20 2023 GMT
Not After : Jul 28 11:34:20 2024 GMT
Subject: CN=64c3a7c2-4c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0c:13:6d:34:45:bc:46:10:66:3c:28:fa:ad:
49:23:16:96:27:75:4a:bc:17:a6:9d:67:06:87:12:
76:b7:5c:2c:6c:c1:64:74:35:d8:d3:ac:16:21:f3:
93:21:f3:b6:fc:f1:a5:5f:a6:69:05:27:a2:91:5f:
de:2f:1e:42:8d:3e:a3:74:f4:88:b3:f9:fb:81:00:
d8:8b:d3:04:20:36:13:c2:67:60:b4:8f:bd:2d:44:
32:0a:e8:1c:23:a0:75:af:43:fb:88:e6:48:b3:bb:
ae:ff:98:63:5a:df:c7:d6:f8:08:b1:77:22:6e:08:
94:62:1b:5e:50:38:64:1a:12:3f:8d:c8:b5:88:d4:
1e:4e:a9:75:e5:62:65:76:cf:01:09:fe:4a:90:71:
6a:72:8e:84:d2:bc:63:34:56:05:28:27:2f:db:f0:
4f:11:c7:21:46:80:f3:09:1e:8e:44:4e:d5:48:28:
a7:30:15:7a:9c:13:df:58:e7:dc:ac:b7:3e:a3:33:
2f:12:9e:3e:3e:33:e6:ef:30:f5:37:c1:4a:ed:a3:
c2:04:ec:65:54:b7:ee:ed:c2:a7:52:12:bf:a8:2c:
27:8c:bd:ca:00:03:10:12:f8:08:7b:d1:9f:f8:ff:
5e:4e:66:7b:9b:86:0e:85:a8:61:54:0e:d4:e9:e1:
c7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0B:B5:CA:DD:47:21:39:0D:5B:9E:3F:77:56:AB:11:54:10:A9:F1
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B49B8CC62D3A11EEA6F87D7B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.193.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e2:66:9a:32:4a:73:86:24:fb:b6:48:1a:b6:d3:03:aa:62:
2a:b7:dd:37:c3:67:0c:a0:6a:f7:af:e5:e6:78:9a:5c:ea:e7:
af:5b:db:fa:b7:26:be:54:3e:4d:2c:67:03:73:af:ff:d0:1e:
67:29:99:08:bf:64:e1:ee:02:ce:64:de:6b:f4:cd:85:08:87:
c8:f1:e5:c3:b4:b7:ac:72:8e:1d:1e:95:6f:cc:40:4d:c8:f7:
cf:6f:b0:7c:04:8b:53:52:59:53:6d:1f:52:57:98:87:fe:fa:
52:3a:33:08:21:d0:4f:b9:9d:98:32:20:7b:68:37:e6:ad:c8:
42:44:93:af:bf:a9:57:ab:d9:bc:30:e1:44:68:3f:2b:7e:aa:
05:78:2c:0f:76:23:c4:67:d1:84:4c:39:c1:e3:51:a5:d8:12:
b7:9f:73:17:51:9f:67:ba:c2:a4:97:98:8d:96:ef:e6:38:0d:
10:1f:19:2a:2c:a6:f9:9e:2a:b8:46:84:7a:9b:16:8f:0d:c7:
6d:62:63:88:a8:c1:02:54:36:61:6d:a4:94:11:1b:19:7c:ae:
1b:92:bb:fd:a1:d1:17:70:e3:d7:bb:e5:3d:a2:bb:e2:ff:dc:
c0:b3:3f:7f:19:dd:cc:b3:e7:48:68:0b:1b:08:a2:53:b3:f4:
62:f8:25:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:04:07 2024 by rpki-client on console-ams.rpki-client.org