Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/63B43DBEBC7111EEA5AF58B1775412E6.roa
File: 63B43DBEBC7111EEA5AF58B1775412E6.roa (raw, json)
Hash identifier: sVHZUA4yVB0iwEpj6CdPspTnLe8631epif5PqgIHiG0=
Subject key identifier: AE:18:1F:E2:43:3E:EA:AB:45:08:36:F3:62:BA:9D:8D:6F:7D:A9:CF
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0D1E
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/63B43DBEBC7111EEA5AF58B1775412E6.roa
Signing time: Fri 26 Jan 2024 17:36:09 +0000
ROA not before: Fri 26 Jan 2024 17:36:05 +0000
ROA not after: Sat 25 Jan 2025 17:36:05 +0000
asID: 136744
IP address blocks: 161.123.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3358 (0xd1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 26 17:36:05 2024 GMT
Not After : Jan 25 17:36:05 2025 GMT
Subject: CN=65b3ed88-4e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:39:30:04:d8:15:e0:fb:c9:b8:6d:5e:2c:c1:
b3:24:db:09:b8:a1:e3:56:c1:de:cc:81:64:8e:eb:
a2:aa:d1:b7:49:79:a1:58:cd:81:d2:da:b7:2a:1f:
ec:de:d4:ff:b4:1a:6c:b9:c8:7c:17:d8:91:5c:13:
f9:54:ca:d6:8f:da:26:1b:12:69:84:cc:e9:03:50:
d2:58:1a:62:9f:95:84:7b:37:bb:5d:91:30:79:7d:
95:bd:2c:95:08:d0:39:00:25:59:9d:9f:7e:5c:b3:
d7:e9:e7:27:eb:85:f5:2f:c4:66:4d:63:bf:17:7c:
b4:ef:4a:3c:2a:07:cb:34:5f:ba:3c:cd:24:2c:a6:
13:f6:56:a6:31:4d:c5:2e:04:f0:fe:fe:fd:7b:90:
aa:22:df:f2:35:f1:ff:70:09:fe:1f:6c:d7:97:5a:
66:e2:30:e2:71:e1:07:b8:f5:4f:ef:52:fa:dd:6b:
00:21:1d:32:55:d0:5c:6b:ca:8f:46:2b:03:27:0b:
89:25:83:32:c8:7a:98:93:09:a0:2a:b9:e8:35:ce:
ce:30:2b:48:d8:bf:d6:93:57:ba:14:a2:3b:2f:d7:
b5:49:2f:18:06:66:66:3e:46:bc:cb:8b:d2:fd:4b:
25:63:3a:52:b4:b5:71:4c:d7:7f:99:78:b8:11:cd:
55:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:18:1F:E2:43:3E:EA:AB:45:08:36:F3:62:BA:9D:8D:6F:7D:A9:CF
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/63B43DBEBC7111EEA5AF58B1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.0.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:2b:0a:20:6e:58:d6:77:66:78:ba:32:be:31:e4:66:66:8b:
9e:4f:5e:67:02:64:a8:e5:ac:92:da:69:8a:dc:d8:57:f2:09:
b4:a8:2d:81:21:0b:6e:94:ad:c5:72:06:35:35:2e:72:e6:bf:
39:0e:3b:c2:43:09:eb:b5:ca:ac:5e:ed:31:76:75:24:5a:1f:
67:35:ed:0e:db:ed:c8:cc:f9:d1:9d:cc:84:da:12:a6:a2:69:
b3:76:96:43:37:18:1f:8c:e4:15:a3:58:a7:a3:93:5b:7f:7f:
66:9e:3a:b3:c6:01:19:ef:f8:8d:e8:3b:32:42:ce:e6:eb:87:
d6:a0:83:71:e9:29:03:f2:54:c7:de:57:57:41:5e:25:39:8f:
89:58:cd:26:87:c7:2a:2b:40:ca:4a:d8:01:02:d6:69:12:b7:
bc:dc:65:34:20:3c:cb:55:74:5a:c5:11:88:ae:8b:d9:90:37:
89:7c:90:86:82:64:f4:7f:86:1d:ad:77:8e:91:f8:60:ab:5e:
c3:64:0a:f9:e9:40:65:65:13:b7:16:c2:32:d4:3b:da:67:71:
de:13:3f:a4:f0:ad:d1:02:dc:91:74:f5:e4:1a:97:73:da:6f:
9b:b0:75:f9:7b:4f:08:ba:5e:d5:24:c4:ac:92:76:19:d1:7f:
9f:1b:d8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:12:59 2024 by rpki-client on console-ams.rpki-client.org