Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D115AD9A5DE711EE9D4430344AD9E6FC.roa
File: D115AD9A5DE711EE9D4430344AD9E6FC.roa (raw, json)
Hash identifier: e4iV4wxGzKhPf+mLX6ureW74rMjr+F9iPO+eJcULr8Y=
Subject key identifier: 8E:2B:6E:8F:0C:23:4E:0C:82:14:36:89:8B:40:44:BE:18:AF:C3:C0
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0C31
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D115AD9A5DE711EE9D4430344AD9E6FC.roa
Signing time: Thu 28 Sep 2023 10:14:32 +0000
ROA not before: Thu 28 Sep 2023 10:14:29 +0000
ROA not after: Fri 28 Sep 2029 10:14:29 +0000
asID: 203999
IP address blocks: 161.123.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3121 (0xc31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 28 10:14:29 2023 GMT
Not After : Sep 28 10:14:29 2029 GMT
Subject: CN=65155208-ca91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8f:b7:ae:07:74:b0:1b:37:be:5a:b6:cd:a4:
ce:aa:e0:e1:7e:f0:ee:94:4a:55:39:30:34:48:79:
96:4f:b1:f6:e2:d4:3d:26:c2:a0:cf:ed:70:82:5b:
f1:cf:f6:98:0e:fb:4f:b3:e9:08:42:a4:24:e1:f0:
f1:0f:0a:15:a9:35:c1:13:c3:60:2f:e9:32:cb:31:
79:6b:c2:5e:3c:22:48:2d:96:d1:d9:9b:1d:64:23:
3a:e9:68:3d:96:2d:d0:12:eb:ab:53:5e:64:08:91:
a2:22:f8:9c:e4:09:2b:ca:31:35:8a:3c:cc:4a:9f:
35:d1:1e:59:50:eb:a5:50:ce:16:ea:47:36:d9:fb:
fc:a0:30:9f:6f:09:44:7d:d5:f8:6d:8b:4f:2d:09:
b4:36:9a:5a:2f:ca:05:3a:4e:c7:d7:9a:c0:2b:74:
80:a8:14:8d:14:b4:a0:e8:e5:c6:0e:b6:b7:88:92:
76:da:f2:fe:32:74:a9:4b:ff:cd:ef:54:11:ff:04:
5d:6d:76:8b:e9:2b:68:52:ee:fc:30:c5:36:47:33:
22:80:c3:71:43:f9:63:7e:71:a4:d6:66:50:e3:a6:
b5:e5:8b:96:16:38:b2:59:4d:1f:cb:b2:d1:33:01:
94:b8:bd:63:8b:a8:1b:e4:cd:90:1d:55:37:ea:b1:
5c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2B:6E:8F:0C:23:4E:0C:82:14:36:89:8B:40:44:BE:18:AF:C3:C0
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D115AD9A5DE711EE9D4430344AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.0.0/16
Signature Algorithm: sha256WithRSAEncryption
82:bb:ca:b2:de:69:df:03:95:8c:95:11:64:be:47:b0:d2:9d:
f3:ac:85:a5:4e:c1:97:8e:a9:2e:e2:6c:e0:4d:9e:1b:6e:8b:
45:89:c0:db:ec:11:bb:e4:85:4d:d6:06:2f:ed:c2:d9:a3:3a:
2a:1b:f9:38:50:89:3c:17:00:b0:f2:19:9c:f8:7a:8b:5e:d1:
b6:1e:69:8b:ef:c9:2a:9c:a6:cb:02:c2:cd:30:e6:e5:c1:32:
bb:e7:6f:0e:26:8b:26:05:fa:ec:ed:5f:0f:72:60:5a:68:34:
bb:50:96:b0:92:e6:7c:e3:3b:b4:74:f6:3b:7f:d6:92:cd:cc:
9a:5b:bd:d2:24:f0:a6:f3:d1:ac:2b:fe:b9:c6:8e:47:85:c7:
3a:ba:56:99:e9:5b:56:19:92:db:57:cc:70:4c:73:ae:e4:91:
82:e2:07:0b:09:f8:f5:dc:ed:b4:a0:22:7f:a3:f3:27:3d:97:
c1:20:36:ba:8b:fb:21:35:0e:da:5f:2c:96:c8:39:0c:f1:ac:
aa:fd:32:ae:b5:f0:3f:53:12:d6:7c:1d:28:a2:66:58:fa:2d:
c0:6a:05:f8:f7:7a:a5:49:97:3a:0a:02:e6:50:ef:e7:96:71:
b1:b3:7b:70:a1:28:ad:4b:92:01:38:17:3f:f9:ca:a3:c8:59:
41:d8:40:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:04:07 2024 by rpki-client on console-ams.rpki-client.org