Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/52BC884A7CD411EEA9A1C4444AD9E6FC.roa
File: 52BC884A7CD411EEA9A1C4444AD9E6FC.roa (raw, json)
Hash identifier: mAMH/KdyglD8jL+GVp8oJgALZNwKUEWiIXmLRkqbPt0=
Subject key identifier: 98:2D:B1:BA:E8:FB:AB:1E:56:F2:2B:BB:63:83:50:06:2D:7B:88:C2
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0C77
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/52BC884A7CD411EEA9A1C4444AD9E6FC.roa
Signing time: Mon 06 Nov 2023 18:43:06 +0000
ROA not before: Mon 06 Nov 2023 18:43:03 +0000
ROA not after: Mon 06 Nov 2028 18:43:03 +0000
asID: 207990
IP address blocks: 161.123.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3191 (0xc77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 6 18:43:03 2023 GMT
Not After : Nov 6 18:43:03 2028 GMT
Subject: CN=654933ba-1dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:fa:2a:61:80:55:f6:fb:b9:e4:a5:cf:c9:
7f:d4:25:ae:0c:f7:fc:0e:79:50:16:8b:ec:4d:de:
98:a2:9d:cd:f2:27:ab:5a:2e:88:65:c5:1e:14:45:
da:6e:1c:ad:bb:63:06:23:e7:0e:d1:f2:4b:05:13:
ce:82:69:0d:9d:fb:4a:4e:c0:2f:6e:fc:80:6b:f4:
8a:04:03:a5:eb:1f:2b:e7:4f:0e:91:c7:4f:14:a0:
3f:7f:e9:65:af:2f:0c:7b:ee:bf:3a:07:68:d4:f7:
f7:1f:6f:47:5b:61:61:9e:d1:1a:cf:ae:70:7f:f1:
08:93:dc:71:1a:71:bc:1b:0a:f0:4d:8d:54:f4:ca:
f5:0c:94:97:61:f0:86:f2:bc:3c:0e:c9:f9:13:a8:
fe:f8:61:ff:14:93:df:34:d5:34:b6:d2:1c:01:b2:
77:26:ad:a2:31:60:aa:b0:43:4a:b5:22:7c:a5:d0:
ec:65:bc:76:98:6f:aa:21:57:76:63:1f:f3:ba:9d:
51:1b:00:8d:22:96:b1:dd:ba:0d:8b:c4:e2:b7:b5:
02:92:a0:2e:c2:97:0a:2f:fc:5d:ad:14:f0:aa:4b:
3c:b6:22:ef:cf:42:dd:64:1e:07:3a:a7:09:92:3a:
9e:79:1d:fc:c8:fa:39:cc:2e:c6:c9:6f:16:b5:7d:
c9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2D:B1:BA:E8:FB:AB:1E:56:F2:2B:BB:63:83:50:06:2D:7B:88:C2
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/52BC884A7CD411EEA9A1C4444AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.10.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:07:ae:a9:15:41:d6:2a:31:e0:50:0c:f8:a1:0b:ed:ee:16:
a8:74:69:4f:6e:30:21:73:76:6b:c1:4c:d6:1c:84:98:b9:16:
bd:3f:e3:98:13:16:50:45:88:c5:41:33:40:97:23:c4:ff:e4:
4d:f3:91:ff:4f:3a:8f:4a:b1:b7:65:50:80:9f:a3:80:29:16:
86:08:30:cb:51:9b:78:14:1d:a0:92:51:1a:0b:4a:e1:9d:4a:
42:f5:15:8c:26:a4:f8:8a:a4:b5:32:6e:6c:34:a3:ed:83:d9:
f4:c2:6e:8b:cc:b2:50:32:76:70:55:c1:ea:c5:05:98:bd:0b:
71:a5:55:85:fc:4f:f4:59:28:f5:68:d6:b5:1c:6f:65:94:47:
15:f8:fa:e1:60:ab:6f:f1:35:7d:4c:5a:94:14:a3:49:e1:8e:
96:c7:da:69:75:00:f1:eb:d4:61:a3:30:f2:ab:28:8a:37:c6:
9e:35:51:96:63:fb:35:df:cb:f3:92:64:ed:1b:9f:a3:d9:10:
86:b6:ca:fe:76:74:7e:c8:db:a4:30:a2:1d:8d:31:74:9a:2a:
47:b1:8a:eb:dc:d1:26:12:2b:fc:77:15:e7:f9:ab:a6:6b:34:
18:52:43:9a:78:c2:f5:42:41:b7:2a:48:3b:87:f0:1a:54:1f:
1b:9f:b5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:33 2024 by rpki-client on console-ams.rpki-client.org