Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E3CF632E1FE711EEA958915A4AD9E6FC.roa
File: E3CF632E1FE711EEA958915A4AD9E6FC.roa (raw, json)
Hash identifier: JwT7XZWVNU/3GtLZKX41e4/niKpgdj6dyrxyEKteh24=
Subject key identifier: 43:0B:F5:0C:F6:41:78:28:91:26:F7:5B:53:04:C5:13:DB:9E:C0:CE
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0B5F
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E3CF632E1FE711EEA958915A4AD9E6FC.roa
Signing time: Tue 11 Jul 2023 12:38:52 +0000
ROA not before: Tue 11 Jul 2023 12:38:48 +0000
ROA not after: Thu 11 Jul 2024 12:38:48 +0000
asID: 133499
IP address blocks: 161.123.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2911 (0xb5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 11 12:38:48 2023 GMT
Not After : Jul 11 12:38:48 2024 GMT
Subject: CN=64ad4d5b-fcbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:11:3e:ad:11:6a:36:bb:83:24:73:bf:a4:fa:
d2:fc:d1:be:42:cc:50:2e:ef:09:06:56:48:f4:e3:
d3:c0:5b:8e:5f:57:82:fb:76:db:78:13:6b:76:b6:
d8:ba:e0:7e:1b:2d:1e:50:0c:64:dc:76:88:fb:8e:
be:fd:e8:a4:58:37:66:c6:47:5e:73:67:0e:91:cc:
ba:cc:6f:86:fc:28:d0:3f:4e:50:53:e0:5e:19:77:
1a:9c:5d:53:99:ec:c5:ed:ab:64:48:3e:c6:10:58:
b1:79:b9:19:9d:3b:c1:17:ab:56:d7:ff:20:90:be:
66:c1:c2:50:91:2e:a1:95:d2:f2:e4:53:98:17:80:
c2:86:df:83:b3:78:72:6e:3f:b4:57:9a:94:87:75:
c3:0f:7e:86:80:b5:64:80:9b:6d:53:00:1a:53:e9:
eb:44:d5:7e:20:1c:1f:66:9f:71:28:ee:11:07:7b:
f5:95:1e:f7:bc:a4:91:cb:08:86:12:a7:b1:ee:c1:
e4:40:55:25:dd:c7:42:a3:4b:98:31:05:34:1d:7b:
db:95:e9:2a:b6:1f:5d:60:ac:9f:74:2e:8f:f3:86:
8d:ae:1d:f2:85:0f:be:92:b9:2f:2c:c2:77:58:08:
bb:3f:95:b1:15:46:6a:6d:c4:b8:05:65:cc:43:c6:
f9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0B:F5:0C:F6:41:78:28:91:26:F7:5B:53:04:C5:13:DB:9E:C0:CE
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E3CF632E1FE711EEA958915A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.199.0/24
Signature Algorithm: sha256WithRSAEncryption
58:fe:ab:9b:6c:df:1f:e3:1b:22:31:a4:a0:d4:c3:a1:06:e6:
53:ee:43:74:1e:a9:11:38:dc:67:4d:21:a9:d0:bd:28:a5:c8:
75:9a:9f:01:98:9b:10:0b:c4:0d:e9:09:ea:6b:69:e3:82:79:
9d:c4:f9:be:c4:e2:9c:96:5b:dd:ce:b0:7d:9e:3e:1e:c3:7a:
43:fb:a7:bb:6d:ab:df:09:19:bd:6d:2f:cb:35:de:88:4f:f5:
04:4a:1c:f6:ed:3c:b5:c4:75:68:96:a1:86:07:82:c4:84:d7:
93:e6:e8:47:3d:2a:d1:73:7e:f3:7f:86:c2:7d:d9:de:32:07:
be:ce:d3:4c:b1:e6:bb:4a:39:b9:f9:ec:db:6c:d2:2c:da:93:
34:f2:fe:74:90:26:59:9f:1b:80:54:1e:2e:f2:9d:c9:1c:23:
62:3f:38:a6:62:c0:4e:e8:15:d3:55:23:69:93:2e:52:03:9f:
96:d6:c0:54:76:21:c3:ec:b8:7d:4a:f0:dc:74:08:5a:be:30:
e8:9a:98:03:90:1a:19:b2:61:be:52:64:19:ba:db:9c:66:9a:
5a:4b:38:19:09:cd:66:22:65:0c:cd:8e:97:f9:04:c9:4a:9b:
6f:20:8e:90:07:11:ed:53:c6:89:2f:b5:23:f6:09:0c:c6:28:
ab:da:b7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:49:28 2024 by rpki-client on console-fra.rpki-client.org