Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/56183EDE5CFA11EE8EAF2A3F4AD9E6FC.roa
File: 56183EDE5CFA11EE8EAF2A3F4AD9E6FC.roa (raw, json)
Hash identifier: Myyzc9aaoZdEVHDYrDK0q0GnmyMOsEszfGfL6jVT7rM=
Subject key identifier: 42:77:33:DA:26:BC:3F:37:50:2D:67:C8:08:DC:E7:A1:70:BC:9A:02
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0C03
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/56183EDE5CFA11EE8EAF2A3F4AD9E6FC.roa
Signing time: Wed 27 Sep 2023 05:54:35 +0000
ROA not before: Wed 27 Sep 2023 05:54:32 +0000
ROA not after: Thu 28 Sep 2028 05:54:32 +0000
asID: 212738
IP address blocks: 161.123.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3075 (0xc03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 27 05:54:32 2023 GMT
Not After : Sep 28 05:54:32 2028 GMT
Subject: CN=6513c39b-0c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:45:10:4f:14:ed:b5:eb:e1:eb:7c:48:3f:38:
15:84:6a:75:4a:ec:0e:cf:93:7e:bf:eb:ee:ef:5e:
46:99:92:1b:44:22:50:e5:de:9c:89:5c:85:a7:be:
f8:a1:0b:33:c6:44:1d:8f:7c:7b:eb:40:67:97:dd:
9b:47:1d:22:75:e9:c2:69:10:4e:28:b7:be:02:3e:
30:58:f2:43:7d:af:ec:80:7d:5c:7e:87:ff:26:2f:
04:f7:bb:97:8d:47:e7:84:bc:e4:97:7f:46:07:69:
ac:fd:77:91:0c:14:b4:c3:31:64:03:cb:88:3d:77:
14:8c:8a:23:a8:f1:3a:25:6d:38:25:ef:5b:40:0b:
a5:8a:04:d1:ab:c7:97:07:64:f3:60:30:5a:6e:a5:
3a:fc:87:a5:86:fc:76:87:95:84:2f:48:0c:f3:d1:
62:f0:a2:65:c6:7e:7b:f0:62:f5:3a:70:85:ef:3e:
47:76:a8:b2:32:4f:43:67:62:5e:bd:b4:37:8b:4c:
d2:f4:b0:fe:bd:bf:c2:ab:1e:7f:90:cb:82:6f:0e:
66:e9:94:f2:d2:ec:42:59:19:ff:b3:ce:cd:09:bf:
2e:18:9a:4c:6a:41:52:03:df:11:2c:11:5f:7d:57:
43:48:8a:42:62:93:40:db:0e:4d:ed:4b:69:72:50:
06:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:77:33:DA:26:BC:3F:37:50:2D:67:C8:08:DC:E7:A1:70:BC:9A:02
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/56183EDE5CFA11EE8EAF2A3F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.236.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:dd:f4:bb:9e:72:22:e4:fb:8a:39:05:b9:60:82:62:b4:d5:
d0:a7:6c:a3:de:b3:ab:98:30:ee:63:30:65:b0:dc:55:8e:4a:
d5:12:37:4d:96:47:ab:a2:c5:36:a7:24:95:6b:91:68:7a:47:
f0:39:77:59:43:6a:d8:c0:8a:8e:c3:b3:26:2e:1a:12:a2:47:
ea:7a:35:bd:75:02:42:9a:85:7d:2c:1c:4b:0b:43:dc:0f:3f:
04:f4:d3:47:f1:8f:77:e1:2f:73:0c:45:c6:33:f5:15:bd:16:
5b:be:e6:28:bc:2e:c3:ca:d5:7a:5b:1f:c0:a3:87:25:00:71:
52:e0:e6:c5:c1:ce:6e:dc:96:71:cc:40:7e:b5:aa:fa:87:8b:
ab:28:76:55:94:9a:18:43:cd:9c:a5:00:33:c8:14:c8:48:7a:
3d:36:ee:c4:cb:67:64:9b:53:c0:2a:eb:dd:1b:13:ac:ae:f4:
e6:0d:b4:b6:41:6e:53:77:e3:40:07:d1:ed:9b:51:14:19:44:
e5:23:35:eb:8a:3c:63:4f:52:4b:f9:fb:15:19:01:83:d5:c9:
bf:67:27:ed:95:0e:d8:2c:10:7f:96:e8:ed:46:f1:d8:fb:ed:
9a:6e:9d:eb:f3:5e:19:97:7a:c1:48:46:24:37:97:5a:5b:9a:
3a:08:97:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:33 2024 by rpki-client on console-ams.rpki-client.org