Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/219E2C925DE811EEB14513354AD9E6FC.roa
File: 219E2C925DE811EEB14513354AD9E6FC.roa (raw, json)
Hash identifier: 4iLqvMW/JPiec/VR4jh2Tbs2STDcTsWhFbH+WqLFtN4=
Subject key identifier: 56:04:5A:87:A5:AB:EE:62:06:24:C2:99:89:9A:BB:CF:B2:9C:19:FD
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0C37
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/219E2C925DE811EEB14513354AD9E6FC.roa
Signing time: Thu 28 Sep 2023 10:16:47 +0000
ROA not before: Thu 28 Sep 2023 10:16:44 +0000
ROA not after: Fri 28 Sep 2029 10:16:44 +0000
asID: 133499
IP address blocks: 161.123.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3127 (0xc37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 28 10:16:44 2023 GMT
Not After : Sep 28 10:16:44 2029 GMT
Subject: CN=6515528f-8997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c3:85:3c:28:06:1c:71:ca:f0:a8:b6:36:81:
eb:f9:9b:8c:92:e3:88:40:96:ab:6f:e5:d4:b2:a3:
c7:11:d4:81:ea:37:22:bd:c9:4e:c6:27:81:6a:4b:
26:b7:4c:ed:a5:04:3c:d0:8b:46:71:3c:26:99:01:
9c:b3:5c:c1:0e:d0:d2:83:48:1c:fa:66:68:3f:3d:
e2:12:4b:79:14:88:0f:8f:37:1a:2f:ec:29:c8:58:
27:c3:61:b2:40:bc:18:30:08:78:5f:60:dd:ab:91:
8f:0a:f7:5f:d0:3d:56:a0:2d:1b:14:91:8e:9a:b0:
66:fa:98:2a:43:d5:a2:65:bc:0d:10:e5:ff:3d:51:
0a:59:27:38:73:e9:3a:55:f8:c4:67:e3:18:83:a3:
3e:28:52:7c:58:88:82:27:3d:d0:a5:8b:49:8c:f7:
fb:dd:85:af:e5:c7:5f:78:bc:98:7f:6e:cc:09:1a:
f0:d2:8f:44:11:ba:7a:cd:2d:65:a7:b3:cd:5d:25:
43:08:a0:6d:68:03:05:f9:99:9a:ae:31:ad:00:49:
44:4d:c7:92:d3:df:ed:43:41:55:e7:0e:5f:93:cc:
92:37:8d:43:29:f7:b2:3f:05:8b:98:85:50:97:d4:
ca:37:2c:55:15:1c:e0:d9:64:7d:8e:14:73:f3:ae:
b2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:04:5A:87:A5:AB:EE:62:06:24:C2:99:89:9A:BB:CF:B2:9C:19:FD
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/219E2C925DE811EEB14513354AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a6:52:7d:ba:3e:8d:da:12:93:80:f9:c5:7e:b5:0b:20:1a:19:
42:af:a2:18:3c:2e:3f:6d:6e:94:a8:fd:da:c1:b4:85:c6:e7:
ae:7c:d8:cc:39:19:eb:13:60:d4:4d:8a:b2:82:16:8a:39:5f:
d6:5e:94:44:ec:c9:b9:f1:a5:79:06:ca:ad:93:9b:4d:28:b3:
ac:5d:b8:13:1e:3f:b6:24:49:70:3a:c4:d8:d2:31:3e:a5:72:
99:75:d9:38:a5:76:a8:20:6e:e4:30:45:f8:38:e2:17:94:e8:
b5:1e:b8:d1:d1:14:34:a2:a9:d8:f0:c7:50:98:d0:6a:46:03:
16:c0:45:98:56:09:68:75:ae:83:f2:69:c3:06:d0:ac:87:51:
64:2a:dc:63:8a:19:12:82:bb:d8:01:1b:92:67:30:61:8e:fa:
a1:28:6d:76:d6:5d:42:a3:49:c4:1c:26:fd:db:4a:b5:46:2a:
72:0a:b8:75:12:49:43:27:d6:a0:ee:d8:1c:42:98:09:ae:46:
b3:36:17:8c:bb:39:17:89:13:ff:7a:9b:8e:6a:e1:1b:e4:85:
cf:55:41:6f:c1:62:a5:8d:77:7a:37:9b:c2:2d:71:54:1d:60:
37:5c:50:77:96:4b:9a:b0:f3:9f:07:cb:19:10:d8:79:0e:e2:
1b:51:7b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:19 2024 by rpki-client on console-fra.rpki-client.org