Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/FE471BAE7CD311EE9B4DB3434AD9E6FC.roa
File: FE471BAE7CD311EE9B4DB3434AD9E6FC.roa (raw, json)
Hash identifier: dI4XHT19YQOn6JzOaM2tVdLJ4vMoeNcfqpNkevnf4hw=
Subject key identifier: C9:CC:78:23:5D:F4:B7:83:11:34:D2:63:D7:E8:95:B2:84:36:A8:7E
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0C71
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/FE471BAE7CD311EE9B4DB3434AD9E6FC.roa
Signing time: Mon 06 Nov 2023 18:40:44 +0000
ROA not before: Mon 06 Nov 2023 18:40:41 +0000
ROA not after: Mon 06 Nov 2028 18:40:41 +0000
asID: 207990
IP address blocks: 161.123.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3185 (0xc71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 6 18:40:41 2023 GMT
Not After : Nov 6 18:40:41 2028 GMT
Subject: CN=6549332c-5e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ee:3b:63:24:a7:02:ad:dd:92:10:ae:ee:0a:
90:85:ac:37:b8:c2:e2:ea:37:cb:a2:ed:73:82:92:
50:c4:ee:e0:8e:f3:8f:b0:dc:e7:6e:f1:f7:0a:93:
a0:e3:10:14:4b:88:05:db:35:ba:94:35:64:99:43:
94:d1:5d:08:e0:bd:8a:76:4b:17:36:c3:e1:86:28:
f3:af:67:b6:6a:b8:46:0e:b3:84:58:86:81:9d:0e:
58:56:06:42:20:0c:e9:c0:db:6d:fe:d7:08:a0:6d:
af:f5:32:25:5e:7c:a7:50:30:1a:74:56:e4:ef:dd:
c9:ef:7e:c0:c1:b2:68:9b:be:e6:16:21:c7:01:64:
c0:a7:5c:9d:4f:44:97:73:dd:a2:79:e7:fb:1e:69:
2f:45:20:22:a1:0b:ad:c5:7b:57:26:48:d4:30:45:
90:34:a8:6d:4d:8c:e6:11:a6:85:53:5f:a2:20:4f:
20:85:49:83:7a:11:4f:39:d9:3f:32:88:1c:45:fd:
ea:c9:aa:75:f5:77:15:3c:ea:38:06:33:8d:bd:08:
b6:01:64:44:35:7f:fe:23:f9:fb:79:bf:02:5d:a9:
43:e3:3c:a7:03:e6:a5:6f:5e:0c:1b:41:38:bf:69:
9c:81:a5:36:be:8c:ce:e1:e7:dc:c3:c9:ea:f5:d3:
15:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CC:78:23:5D:F4:B7:83:11:34:D2:63:D7:E8:95:B2:84:36:A8:7E
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/FE471BAE7CD311EE9B4DB3434AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.11.0/24
Signature Algorithm: sha256WithRSAEncryption
31:2a:11:27:9b:4b:b5:c9:a5:90:91:9e:c7:68:2a:e5:c6:4a:
71:73:4e:d4:97:66:05:88:ea:1e:50:c2:ed:62:5a:26:e8:ee:
3b:3e:89:47:d1:4f:32:c7:07:74:46:d0:78:b3:8f:cd:33:3d:
10:d2:da:8b:19:8b:ec:4a:1e:05:ea:20:21:ca:f3:7a:73:b5:
0a:a1:91:0a:48:44:83:9a:60:46:c8:3e:d0:9c:98:de:4d:46:
29:70:7f:98:25:af:1c:e8:22:33:bf:35:3f:9a:b8:71:d9:7e:
c9:05:bf:cc:dd:a6:63:ab:1f:c8:a5:5f:86:da:3c:65:94:5b:
8d:73:77:60:3c:f7:17:ee:54:35:d5:3d:46:59:44:3b:74:cb:
ef:93:9c:4a:d7:c4:a5:ad:30:5e:a2:02:35:35:81:ee:b6:22:
93:07:ee:cc:8b:b5:77:b0:22:01:cb:61:5a:6b:05:6e:5e:8e:
a3:cf:d8:fb:13:ae:8c:7a:e4:d3:ef:ec:cd:25:f0:41:7b:8a:
65:67:2b:21:76:66:0b:4a:ec:60:56:cc:3c:3a:b6:5e:85:9a:
81:8b:3c:90:1f:1f:40:02:38:8d:cd:64:b1:68:75:72:41:2c:
2c:b8:72:99:05:f8:8a:19:1d:05:45:c9:e1:19:0c:50:f2:e0:
bf:ec:a2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:04:07 2024 by rpki-client on console-ams.rpki-client.org