Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/347815A012FE11EFACCBE528017001B1.roa
File: 347815A012FE11EFACCBE528017001B1.roa (raw, json)
Hash identifier: 2KoepLN40DUsK2k0d6HokzAnHJYs7ZQpfoLvQlaDs5Q=
Subject key identifier: EE:23:C5:A7:CF:17:5B:F1:4A:64:64:D3:7D:4F:E0:F2:9C:F4:DD:62
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0DA7
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/347815A012FE11EFACCBE528017001B1.roa
Signing time: Wed 15 May 2024 21:00:48 +0000
ROA not before: Wed 15 May 2024 21:00:45 +0000
ROA not after: Wed 15 May 2030 21:00:45 +0000
asID: 136557
IP address blocks: 161.123.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3495 (0xda7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: May 15 21:00:45 2024 GMT
Not After : May 15 21:00:45 2030 GMT
Subject: CN=66452280-8252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c2:43:c4:67:a0:3a:85:ba:aa:71:4a:f1:23:
d8:93:09:a0:91:c5:8f:18:cb:af:03:53:07:ab:dd:
21:57:f6:86:77:b3:53:3d:7e:e9:35:ed:d7:a9:c6:
ba:dd:22:da:6d:e2:8f:b3:24:7c:a6:9a:39:76:60:
dd:54:45:38:9f:54:ef:50:6c:bb:2f:f7:bb:b0:4a:
cb:dc:97:a6:2a:c3:7e:aa:c6:cd:47:fe:1a:06:c3:
21:c0:02:57:ec:c3:1e:46:5b:a8:39:af:88:f6:62:
a1:a4:7b:bc:70:90:3c:95:19:31:d1:e2:34:6b:96:
bc:fd:dc:fd:f9:43:da:ff:de:61:d9:30:e2:f2:26:
35:22:bc:58:72:79:c9:90:61:70:82:ab:f7:a9:23:
a8:c4:61:05:27:d1:d1:f6:7e:0b:01:d1:b9:cb:29:
78:68:2f:36:5d:82:b7:69:c3:95:da:d4:d7:aa:7f:
1a:88:f2:e7:58:eb:94:50:60:8d:db:b9:c1:0c:fe:
cd:ea:f2:4c:27:c1:c2:c8:7a:a0:d2:d7:d1:5b:62:
92:ee:9a:6e:d0:ac:72:ff:58:82:18:7e:23:41:9f:
98:07:6f:70:e0:3f:6c:03:52:79:0e:77:8e:eb:9b:
c2:a7:c6:7b:14:ac:50:cd:af:9b:cd:57:79:ff:eb:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:23:C5:A7:CF:17:5B:F1:4A:64:64:D3:7D:4F:E0:F2:9C:F4:DD:62
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/347815A012FE11EFACCBE528017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.192.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:85:87:3e:19:6a:0d:f4:e1:ae:90:94:9d:4d:64:a1:e9:4e:
23:05:48:1d:6f:72:21:59:dd:f3:4c:91:5f:11:c4:4c:2d:50:
99:d9:88:b0:9e:bc:ef:6a:af:2e:00:06:e1:69:5d:f7:81:44:
9f:42:ff:d0:1e:aa:68:da:6f:df:15:ea:93:16:4b:0e:99:8d:
df:f1:ad:60:b7:39:42:37:af:9c:0c:d1:1b:7b:02:f1:08:73:
08:b8:77:73:af:16:3a:b2:d3:55:ca:09:ce:0f:25:da:be:4c:
f1:f1:c0:67:c4:38:a7:b7:7c:e1:8e:91:58:fb:ef:aa:b4:1d:
c1:5d:0a:77:20:ee:be:e3:3d:d6:77:84:1a:7d:40:1d:f3:33:
16:e7:4a:10:d4:f1:c3:59:f4:f7:fb:3f:42:17:df:09:ae:94:
aa:06:08:3f:8b:a6:8c:dd:56:bc:a4:e4:92:f8:48:c5:1e:37:
af:2a:dd:03:f7:ab:2d:16:70:e6:87:d5:d3:db:71:b2:6a:dc:
a8:23:01:b0:5d:cb:48:d1:a8:37:1d:e3:1e:ae:50:b2:73:26:
1d:9f:f6:77:56:8f:12:0a:4e:b1:5d:33:ea:0d:13:ee:fc:8b:
78:b6:06:8a:4b:55:65:8e:53:50:38:94:88:cb:27:60:0f:9a:
bc:35:6c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:19 2024 by rpki-client on console-fra.rpki-client.org