Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/F6C74CCC1FE611EEA43705584AD9E6FC.roa
File: F6C74CCC1FE611EEA43705584AD9E6FC.roa (raw, json)
Hash identifier: 64J1eHyyKrBuJ9NaSEmBXUWcnZ6wZESPOhOQ0QyF5Tg=
Subject key identifier: 8C:7D:5C:47:40:24:CA:82:17:95:BB:2B:FC:26:91:38:B5:EB:2E:DE
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0B57
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/F6C74CCC1FE611EEA43705584AD9E6FC.roa
Signing time: Tue 11 Jul 2023 12:32:14 +0000
ROA not before: Tue 11 Jul 2023 12:32:10 +0000
ROA not after: Thu 11 Jul 2024 12:32:10 +0000
asID: 133499
IP address blocks: 161.123.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2903 (0xb57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 11 12:32:10 2023 GMT
Not After : Jul 11 12:32:10 2024 GMT
Subject: CN=64ad4bce-8ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c2:b8:2a:af:41:23:b0:4d:30:4b:e3:18:62:
a3:92:f3:49:b3:76:4a:dc:76:86:7b:21:a0:f9:19:
91:dd:ad:d0:f9:15:5b:ce:cf:84:e3:6f:48:ec:8c:
f2:84:05:ae:a6:42:aa:09:9a:a5:63:ec:dc:1e:8e:
d7:0c:b1:aa:ff:15:57:9c:62:33:9c:f6:40:6c:20:
a7:e3:71:b2:a5:9b:bd:0d:66:1d:27:7a:29:40:72:
b9:51:77:5f:85:e2:e5:cf:78:c6:6d:0d:66:4d:cb:
36:d4:91:87:f5:e9:46:63:d5:91:23:0c:b5:97:9b:
66:74:2a:e8:b9:e9:5e:0e:5c:f9:7e:6a:8c:49:cc:
eb:a4:38:a8:ab:22:fb:9e:0c:40:1e:5d:98:d7:bd:
1b:1a:05:82:30:c1:fb:cc:5f:92:2f:fd:b9:3b:65:
89:86:59:c6:2e:e3:d8:e5:7c:91:00:2a:11:68:aa:
f4:1d:21:1e:98:a2:a4:53:31:93:34:d4:88:56:4b:
12:b3:51:a4:97:c6:74:23:08:1a:1e:8e:c9:4d:e6:
de:6e:c9:83:d8:26:27:ec:c7:df:2b:f9:a3:66:e0:
da:58:9c:63:51:92:7c:ef:5c:fb:d1:50:61:e5:a1:
c8:aa:e9:5a:18:c0:0b:e1:b9:20:80:b0:e3:65:bf:
5b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7D:5C:47:40:24:CA:82:17:95:BB:2B:FC:26:91:38:B5:EB:2E:DE
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/F6C74CCC1FE611EEA43705584AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.71.0/24
Signature Algorithm: sha256WithRSAEncryption
03:84:c7:a0:36:8c:55:c6:57:b9:0e:1b:29:44:0c:3d:69:06:
87:c6:a2:78:3a:2c:3b:b0:26:c6:3f:ad:b6:60:c5:be:73:9b:
ad:ee:1f:c4:f4:26:1c:94:ca:f4:69:43:4b:e8:5a:3b:dd:a9:
04:00:81:49:18:13:16:d8:88:40:fe:77:d4:b6:ec:f5:f8:4b:
58:a1:0f:87:cd:1c:bd:c3:ef:3d:4b:1b:5f:92:f3:e6:2c:5e:
b9:74:b7:38:1a:52:2a:ec:dc:d1:77:27:24:89:ca:96:fb:64:
e1:76:43:18:04:41:bf:75:0a:a3:4e:1b:c4:42:6f:3e:5d:9b:
f9:35:b5:74:ee:c5:a1:4d:ee:3b:23:d9:bd:57:e8:84:ae:a0:
9e:56:b2:ca:56:c5:c5:ab:eb:0e:29:2b:dc:c2:33:5c:7c:a0:
67:da:7b:a7:d5:88:62:f3:af:10:66:b6:f8:f5:65:66:a7:b6:
9a:bd:c7:30:71:2e:6a:83:9b:ba:c3:a0:66:55:4b:68:83:e4:
75:a1:4d:e1:85:71:08:1c:1c:b6:ac:25:df:27:9f:66:cc:2f:
2a:81:db:67:14:50:08:24:cb:b0:3e:05:52:12:15:d0:95:c5:
fc:8b:5f:34:92:f0:c8:c3:e5:26:a2:44:4b:25:2f:91:b3:d6:
7c:ef:30:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:49:28 2024 by rpki-client on console-fra.rpki-client.org