Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C933D4561FE611EE93A26C574AD9E6FC.roa
File: C933D4561FE611EE93A26C574AD9E6FC.roa (raw, json)
Hash identifier: T7NNtn7QTHwZjSPMn9DesNNz1u5HjsSOhhN8DNRUK4E=
Subject key identifier: EC:87:ED:C4:A0:7D:D7:B1:49:B5:20:7E:DF:4A:FB:55:38:96:FD:7A
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0B55
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C933D4561FE611EE93A26C574AD9E6FC.roa
Signing time: Tue 11 Jul 2023 12:30:57 +0000
ROA not before: Tue 11 Jul 2023 12:30:54 +0000
ROA not after: Thu 11 Jul 2024 12:30:54 +0000
asID: 133499
IP address blocks: 161.123.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2901 (0xb55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 11 12:30:54 2023 GMT
Not After : Jul 11 12:30:54 2024 GMT
Subject: CN=64ad4b81-418e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:05:0f:29:03:19:13:45:e1:f3:72:8e:29:b7:
7c:54:bc:78:82:c3:e2:db:7a:2c:c8:24:11:56:49:
39:01:1d:52:9b:ef:82:83:a6:36:3e:40:e6:9b:53:
3c:e6:e3:b1:ee:0c:47:d4:1e:14:85:ab:63:65:a9:
61:5b:f2:a8:0a:68:10:c3:b9:e2:34:0f:98:c1:45:
82:59:6f:12:35:f8:80:61:c7:86:cb:86:88:0c:8d:
74:96:f7:8d:fa:d9:bc:bc:bf:ee:44:85:c9:5b:6b:
99:70:06:96:e7:cd:dc:7b:3c:3f:c9:bd:85:d1:a2:
ab:4c:58:b9:2c:fe:16:3e:3e:be:c3:c3:bd:0e:8e:
6c:d3:94:bd:c8:7f:a8:0f:02:d0:fd:a1:62:6c:4b:
71:6d:3e:5f:e1:81:34:4b:5d:06:ba:bc:45:22:b5:
ad:89:7d:a4:8a:b1:24:3d:1c:63:07:e2:d6:37:f8:
73:d8:0c:b9:30:83:17:49:70:29:91:49:8c:b3:54:
b9:36:5e:98:c4:4e:41:b8:0c:d9:c7:10:5f:cf:c7:
86:ae:a9:13:df:8d:ae:1e:b7:69:2e:56:89:bc:91:
72:00:e6:ac:a9:94:2d:b2:da:6b:f5:02:85:f2:c4:
17:10:c8:2d:ce:33:e1:98:15:d6:7e:41:7e:79:7d:
0d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:87:ED:C4:A0:7D:D7:B1:49:B5:20:7E:DF:4A:FB:55:38:96:FD:7A
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C933D4561FE611EE93A26C574AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.94.0/23
Signature Algorithm: sha256WithRSAEncryption
32:00:84:68:99:81:25:5d:1d:5c:6a:56:2a:50:79:9a:7d:a1:
e3:96:ce:f2:86:39:ec:54:eb:fe:75:5a:fd:84:bd:f4:ff:be:
d1:dc:35:43:2c:8b:e6:bd:cc:0e:d7:7d:64:6d:49:e3:48:97:
ab:77:5d:00:a5:e6:1f:8e:30:22:d7:43:1d:4e:ea:29:17:3b:
0a:65:a3:46:11:6e:ab:98:b4:ab:9b:1e:5e:a3:1a:fd:eb:be:
9f:3d:89:62:0f:5d:1c:70:c8:cc:29:01:01:27:ac:96:25:9c:
c6:36:74:a1:14:96:23:ef:36:83:ae:c5:b9:5c:42:6a:b1:19:
86:d9:86:f0:48:2f:3c:40:e4:d2:8e:da:e6:f1:38:f4:2e:77:
97:9c:75:39:d7:d3:27:a2:cc:d8:d5:c9:e4:63:7e:16:43:b5:
44:2a:75:4c:0d:9d:55:2f:74:90:7d:df:b3:1e:90:f5:46:0a:
71:f2:48:58:9b:be:b2:5c:3e:61:59:d9:0b:f3:ec:a5:5a:0b:
41:b7:ed:2e:95:45:38:22:76:94:14:7a:54:19:9d:e6:50:3c:
a8:83:be:0d:c2:b5:3c:c5:e2:13:d5:39:89:68:8c:3f:a0:01:
2c:cc:99:1d:03:b9:bc:7f:6f:e1:67:e6:da:6f:77:69:ba:d2:
fe:28:b2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 02:53:22 2024 by rpki-client on console-fra.rpki-client.org