Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3B8DD7BE7CD411EEB84069444AD9E6FC.roa
File: 3B8DD7BE7CD411EEB84069444AD9E6FC.roa (raw, json)
Hash identifier: lzg1H/wkmugXBePgICiSCN7zEP8E7cdyFX0RCxOduBg=
Subject key identifier: F9:B1:79:35:8B:68:2D:B7:07:19:59:13:AF:30:D5:27:95:9D:9B:E4
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0C75
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3B8DD7BE7CD411EEB84069444AD9E6FC.roa
Signing time: Mon 06 Nov 2023 18:42:27 +0000
ROA not before: Mon 06 Nov 2023 18:42:24 +0000
ROA not after: Mon 06 Nov 2028 18:42:24 +0000
asID: 207990
IP address blocks: 161.123.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3189 (0xc75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 6 18:42:24 2023 GMT
Not After : Nov 6 18:42:24 2028 GMT
Subject: CN=65493393-f367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:84:68:7a:4a:b5:a1:65:5c:a5:be:8a:39:b5:
80:c6:3c:13:3a:78:eb:17:49:78:d0:f5:b1:df:a7:
a0:f8:ca:32:1d:89:5f:f7:7c:2f:e5:6a:f2:14:56:
ef:2e:80:17:d7:3c:17:77:e5:90:aa:12:89:58:50:
be:e9:90:6d:94:5e:10:1a:ae:58:0f:3f:2c:21:3b:
2a:e4:c9:fe:f6:72:cf:37:fb:de:90:15:84:69:40:
a3:80:42:a4:ac:c2:88:53:69:3d:7b:41:27:73:a9:
37:53:0d:57:b0:be:61:96:6b:a0:79:48:7b:b0:0f:
a9:42:39:f2:fb:8d:09:70:a5:94:30:ad:6d:4e:f7:
fe:c2:cb:f2:5d:92:5e:75:60:b2:2d:79:4d:b7:f2:
ef:92:cb:8d:82:40:62:d8:43:2a:da:11:73:5d:6f:
f2:e6:5d:3c:8c:ee:bd:7e:19:d3:05:1b:61:5f:be:
90:5d:33:7d:9c:4c:a9:d5:d5:df:ba:99:30:5b:1d:
eb:be:9e:33:c0:31:27:38:e9:94:5d:23:90:50:28:
48:06:29:fc:86:63:9b:14:22:e9:7b:9d:43:cc:35:
72:b6:b6:ea:0d:2b:8f:e9:c8:7e:3c:96:f0:63:a7:
ba:15:1d:0f:d5:12:c4:17:67:7f:3e:69:98:fa:2a:
83:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B1:79:35:8B:68:2D:B7:07:19:59:13:AF:30:D5:27:95:9D:9B:E4
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3B8DD7BE7CD411EEB84069444AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.9.0/24
Signature Algorithm: sha256WithRSAEncryption
99:41:1d:5a:9d:94:21:4b:01:60:f1:05:03:54:4a:4a:22:11:
45:f9:cc:b4:ae:02:20:a7:1b:70:9c:bf:e9:89:7a:e5:30:c1:
2c:c1:b8:31:05:99:99:ad:2e:c9:01:23:bb:35:bd:23:e6:c6:
cd:58:16:63:ba:68:f8:1c:d6:85:1c:83:84:ab:47:09:ec:a4:
45:d8:55:a5:00:b6:fa:3a:38:ad:65:1b:c5:be:d9:c2:da:0f:
4f:a0:da:2c:af:a3:2d:9f:2b:88:54:c8:0b:be:aa:1b:6a:ea:
09:79:88:71:7c:fd:09:91:42:e1:7b:b0:05:89:41:92:64:35:
ae:e3:5d:45:87:ba:2f:e6:66:4e:30:2e:53:51:16:71:9b:0b:
32:06:8b:1f:56:e6:cb:80:57:1b:56:05:75:57:62:93:2a:59:
4e:30:cf:9d:04:fb:3d:12:fb:de:16:76:80:ca:ec:86:cf:c3:
c3:46:22:76:47:8c:96:21:a1:e5:34:37:65:56:32:3f:83:15:
44:c0:9e:33:45:0e:00:4a:35:07:c8:ae:df:3d:b9:27:00:0d:
0b:0f:af:7c:98:8a:19:2e:f0:2f:15:8a:fe:d9:3b:0c:2b:cc:
3e:bc:c2:2c:9c:38:95:f8:5b:f8:77:15:85:29:8c:e7:aa:3d:
33:4e:aa:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:33 2024 by rpki-client on console-ams.rpki-client.org