Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C5243C1E950E11EE9EDAA14ED25BE465.roa
File: C5243C1E950E11EE9EDAA14ED25BE465.roa (raw, json)
Hash identifier: LTf2kXZ6SKE6wi5emjNMF2oATaTBwjHGNTkLqp0TzWM=
Subject key identifier: 1B:71:C7:F5:C7:8A:3F:89:4F:55:F8:DC:CF:56:21:E8:6F:2D:9C:2F
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0CD2
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C5243C1E950E11EE9EDAA14ED25BE465.roa
Signing time: Thu 07 Dec 2023 14:41:56 +0000
ROA not before: Thu 07 Dec 2023 14:41:53 +0000
ROA not after: Thu 07 Dec 2028 14:41:53 +0000
asID: 207990
IP address blocks: 161.123.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3282 (0xcd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Dec 7 14:41:53 2023 GMT
Not After : Dec 7 14:41:53 2028 GMT
Subject: CN=6571d9b4-8b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:40:62:7e:b9:03:c2:cf:01:c3:cf:8f:33:67:
15:7e:9a:c3:3e:fb:aa:6a:80:a6:97:b8:9e:c4:e9:
08:a0:d7:94:e0:ff:17:1d:b7:88:f7:7f:d3:a5:c4:
a5:6d:14:a8:06:05:45:c7:29:3d:95:69:91:96:4e:
42:a9:49:45:b3:14:76:e0:b0:f0:33:48:fd:77:ae:
24:d8:b4:e0:c7:c1:91:4c:63:64:4c:0d:92:c6:1d:
f5:12:80:a5:36:7e:50:df:d9:4f:01:21:8c:31:4f:
8d:81:ec:c5:4d:82:b4:9c:8f:4b:52:8f:2c:ab:3c:
3d:38:96:57:eb:ef:ed:79:23:58:14:75:4f:2e:39:
0a:36:9b:0a:a3:ae:bb:00:e5:e3:85:a8:9e:d6:64:
22:be:2a:f5:da:e7:9a:35:c8:6c:85:a8:ca:75:ec:
82:67:29:33:50:ba:00:22:74:e0:a9:39:7d:36:a6:
92:ff:ec:4a:50:1c:58:00:d2:f6:07:e0:d1:0f:a7:
10:d0:42:cb:c8:e6:d9:fa:12:33:94:d7:5b:99:c9:
28:6d:3a:83:ca:5a:a3:fb:65:0e:1a:c4:d7:f6:43:
6d:ff:c0:93:df:81:8b:9b:f6:dd:25:de:ef:a3:d7:
75:05:5f:9e:7e:41:af:5c:cc:c2:67:0b:87:8f:a6:
7c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:71:C7:F5:C7:8A:3F:89:4F:55:F8:DC:CF:56:21:E8:6F:2D:9C:2F
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C5243C1E950E11EE9EDAA14ED25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.150.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:a9:b5:cd:13:8e:86:ec:3d:43:49:fe:50:81:ef:74:ce:e9:
55:80:2b:e7:fc:d1:ab:7c:c4:d0:e3:3c:af:92:ac:a1:0d:d4:
f9:1a:b0:d3:cc:47:dd:bd:91:49:dc:93:b4:ad:ca:a0:95:0a:
b9:d2:87:9c:49:7d:0e:d4:3d:38:6d:24:b1:52:e1:ae:c3:b7:
2f:03:e6:2f:8b:fe:bd:28:0c:b9:d4:6f:88:8e:5d:0f:76:d2:
18:38:bb:e9:ee:19:36:a3:05:f4:ff:44:6d:44:f4:cf:02:88:
87:a1:8b:18:bb:da:8d:ed:69:c4:e8:79:5a:5b:f9:8a:81:0c:
03:02:3f:d1:0d:c3:66:6a:7f:0c:71:f3:65:06:d3:c1:cf:01:
eb:c7:93:40:e3:cf:06:b2:01:76:46:1c:68:7d:db:2c:58:59:
cc:99:cf:31:74:dc:3d:80:c1:51:be:8a:86:0a:c8:a3:4b:d9:
50:6a:e2:ff:01:c2:e2:eb:9d:85:28:92:b2:9f:aa:f7:ac:d3:
92:51:33:04:5d:64:2a:0d:aa:e7:51:c6:90:14:25:40:6e:19:
1a:c7:8e:98:ff:4a:a3:9b:ce:77:f5:d7:66:97:64:75:57:f4:
70:56:90:30:41:ff:f5:28:6c:f9:fc:95:3a:c3:25:43:23:8d:
e7:82:ae:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:49:28 2024 by rpki-client on console-fra.rpki-client.org