Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/F5B5BA127CD411EEAEECCB464AD9E6FC.roa
File: F5B5BA127CD411EEAEECCB464AD9E6FC.roa (raw, json)
Hash identifier: h8KwWv2btKjuZ+kiCgOwqJEXrXzFQviL8NElbMEKtmk=
Subject key identifier: 54:85:49:F8:82:EA:2B:78:28:57:59:52:AB:1C:3F:FF:5D:16:4E:A6
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0C89
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/F5B5BA127CD411EEAEECCB464AD9E6FC.roa
Signing time: Mon 06 Nov 2023 18:47:39 +0000
ROA not before: Mon 06 Nov 2023 18:47:36 +0000
ROA not after: Mon 06 Nov 2028 18:47:36 +0000
asID: 207990
IP address blocks: 161.123.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3209 (0xc89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 6 18:47:36 2023 GMT
Not After : Nov 6 18:47:36 2028 GMT
Subject: CN=654934cb-afc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:44:a9:c6:d3:8c:f6:79:87:1a:0b:f6:47:43:
45:a7:4e:78:49:d3:d1:7e:f8:de:41:78:d7:47:24:
a8:1d:60:78:4d:4d:02:7f:92:3f:a3:36:bd:a1:29:
2a:e0:29:00:60:46:2c:d7:3f:b2:55:69:8a:65:fa:
ff:36:0b:bc:a8:90:df:3c:38:98:a3:ad:6d:d3:83:
36:c2:bd:36:24:24:1d:c6:a6:ba:21:80:d5:56:2a:
bd:05:32:56:30:3b:bd:bb:68:20:66:cc:02:90:dd:
0a:a2:e4:a5:35:e7:57:e1:16:ff:a4:9f:4f:65:d3:
28:e0:04:de:f4:d1:a5:0c:d7:9b:e0:c0:88:eb:81:
68:37:91:04:76:a5:59:a1:f2:5f:f1:3b:12:dc:73:
6c:77:cb:99:7d:ff:b5:a3:84:e3:0b:25:fb:b0:0f:
aa:8b:82:6b:24:cb:73:2a:29:74:83:e9:31:fe:3f:
e1:ca:6f:34:1a:64:50:77:c0:ca:04:3e:96:2f:fe:
99:81:f8:22:35:4e:21:34:c0:92:ba:9d:15:aa:dc:
f7:75:8a:30:36:46:32:d7:1a:7b:a3:30:37:43:11:
83:9f:ef:7b:b1:de:2d:7f:39:ea:29:2a:bf:ab:83:
df:79:c5:f5:78:10:8b:3b:4b:4b:91:b8:52:5f:bb:
9a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:85:49:F8:82:EA:2B:78:28:57:59:52:AB:1C:3F:FF:5D:16:4E:A6
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/F5B5BA127CD411EEAEECCB464AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.20.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ef:43:9e:69:e9:85:43:fd:b8:77:3c:ea:67:b8:7d:91:13:
4c:39:86:4a:61:02:58:36:f2:ee:ac:a5:b2:3e:03:09:1f:29:
d2:fe:eb:c4:92:c7:51:b2:7d:dd:ff:60:4d:ea:c2:d4:6e:07:
73:77:51:8b:13:06:cb:56:37:de:28:2f:5e:9f:82:d4:1d:b7:
0a:b9:27:4b:c1:61:35:59:dd:48:2d:02:c6:7d:88:28:43:01:
b5:38:36:4b:1e:79:91:64:66:93:ac:fd:3f:db:cd:3d:45:7e:
8a:55:92:30:70:7f:b1:af:58:df:cc:5f:c2:1d:5b:28:e0:1a:
ea:25:cb:54:59:22:f7:c3:e3:58:db:61:84:cf:2d:8f:06:87:
0f:d4:ac:58:22:35:14:79:30:23:ad:06:1c:40:8a:47:58:69:
eb:ce:d1:29:d9:37:2b:9c:75:0a:30:ba:56:b7:9c:fa:ef:51:
09:60:75:76:bd:61:3e:e3:78:e0:60:7d:89:c1:a7:5a:5f:24:
bd:aa:0c:01:42:96:af:9b:02:23:a4:f2:bf:eb:40:f5:c8:a9:
d1:4e:e0:1f:63:5a:9d:53:e6:85:90:95:0b:d7:91:fd:31:d0:
ad:c3:60:da:8d:92:f7:42:d4:c9:f2:48:83:f2:2d:51:89:e5:
a3:ab:b1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:49:28 2024 by rpki-client on console-fra.rpki-client.org