Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/FDF284167CD511EEB35B4A4A4AD9E6FC.roa
File: FDF284167CD511EEB35B4A4A4AD9E6FC.roa (raw, json)
Hash identifier: Mwx2eZdpAARtvruLIOQZNnZXJ3X1+J9dEA18rJcv/N4=
Subject key identifier: 50:CC:39:77:48:02:69:CC:78:2A:3C:09:6C:70:D4:6E:AE:DC:60:55
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0CA5
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/FDF284167CD511EEB35B4A4A4AD9E6FC.roa
Signing time: Mon 06 Nov 2023 18:55:03 +0000
ROA not before: Mon 06 Nov 2023 18:54:59 +0000
ROA not after: Mon 06 Nov 2028 18:54:59 +0000
asID: 207990
IP address blocks: 161.123.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3237 (0xca5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 6 18:54:59 2023 GMT
Not After : Nov 6 18:54:59 2028 GMT
Subject: CN=65493686-fee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f7:c3:67:6b:77:4e:de:46:4c:cb:26:ba:3c:
3d:f6:1f:88:42:c6:b8:40:d1:21:51:65:b1:48:2c:
02:18:f7:f2:b8:68:0e:7a:23:69:82:d7:9d:e9:d8:
12:09:9e:49:39:c5:2d:f4:cc:93:ec:d1:85:ce:a3:
b9:00:84:29:b4:0b:4a:34:81:5b:5a:3e:05:eb:c6:
b0:11:ca:5b:8f:ba:b8:c8:aa:24:b0:50:1e:d5:97:
64:a9:ca:d1:38:ca:42:ae:ca:9a:92:50:34:96:15:
93:16:c5:38:0e:42:57:19:85:72:cf:6b:92:cd:bf:
ae:9a:86:55:d3:19:47:ab:98:f4:82:77:f8:fa:03:
db:a3:a8:a4:fd:97:47:77:f5:b7:4f:0e:d6:53:df:
a8:bd:e7:4f:73:93:58:94:3b:88:21:bc:01:16:63:
fe:a1:31:ce:3a:e4:90:82:a4:34:6b:f0:f1:53:98:
c1:9a:9f:13:9b:e9:78:ff:c9:2b:51:6c:6b:11:3e:
3a:7c:5f:0c:b4:b2:fe:23:46:ad:d5:b4:c8:30:ac:
2f:a5:65:e8:a8:13:9f:75:3b:7a:84:de:94:61:b8:
ee:bd:9b:e7:c1:19:26:2d:fe:21:78:80:ad:85:0d:
7d:a1:48:d6:ae:bd:31:41:17:42:31:49:b1:67:81:
cf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CC:39:77:48:02:69:CC:78:2A:3C:09:6C:70:D4:6E:AE:DC:60:55
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/FDF284167CD511EEB35B4A4A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.244.0/23
Signature Algorithm: sha256WithRSAEncryption
40:8a:96:80:42:8c:60:d1:30:3a:8a:92:51:6e:b1:79:a8:d4:
06:7e:15:c3:62:05:b2:49:ab:05:4a:58:3b:2b:38:43:9e:f2:
14:7e:28:07:25:cd:27:6a:8e:74:97:cb:c2:58:d7:94:1a:0f:
2d:56:d5:40:4c:5e:57:eb:d3:c2:e8:52:2b:2a:7a:94:f2:a2:
47:8a:95:37:73:61:78:28:09:17:7f:50:56:2b:1c:f7:c5:5f:
5b:08:78:69:8a:1c:56:88:49:00:9a:39:9f:bc:64:a7:65:92:
f6:aa:0c:a3:7e:e6:d2:40:54:ad:57:95:1e:60:38:ea:75:01:
58:73:f1:64:a4:24:1e:68:52:40:ab:c6:c8:e0:29:4f:f4:b1:
d2:c7:c6:62:e7:15:9c:9e:1d:cf:00:66:fa:84:f8:87:a7:2b:
92:28:79:a3:9c:82:c3:ec:70:6a:df:04:f2:be:bf:62:0d:ec:
0e:25:a8:9f:b9:d3:6b:65:39:8b:0f:ba:b0:14:05:ee:70:b8:
93:b1:3a:e4:35:5a:fc:8b:ea:66:60:ab:81:db:71:51:5d:00:
e0:e7:15:9e:65:a6:86:ec:91:b4:07:4f:22:8b:06:e9:11:90:
52:c9:24:a0:70:95:03:fb:d4:f5:02:10:69:fc:f4:b7:b0:07:
1e:86:c2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:04:07 2024 by rpki-client on console-ams.rpki-client.org