Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/965FB31812FE11EF92AAAD2D017001B1.roa
File: 965FB31812FE11EF92AAAD2D017001B1.roa (raw, json)
Hash identifier: QvGdbYOfCVj/QZHKNNpADTYiTv81E9FL6PKr7zGxplo=
Subject key identifier: 1C:30:5E:B7:FC:DB:4D:F8:79:A3:BF:3E:D5:FD:CE:45:9D:D9:58:0E
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0DAB
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/965FB31812FE11EF92AAAD2D017001B1.roa
Signing time: Wed 15 May 2024 21:03:33 +0000
ROA not before: Wed 15 May 2024 21:03:29 +0000
ROA not after: Wed 15 May 2030 21:03:29 +0000
asID: 136557
IP address blocks: 161.123.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3499 (0xdab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: May 15 21:03:29 2024 GMT
Not After : May 15 21:03:29 2030 GMT
Subject: CN=66452324-e5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fe:41:65:77:27:55:53:1e:63:ff:44:9a:aa:
fa:81:38:b0:6b:60:59:12:fe:de:22:82:ca:3a:af:
c2:15:79:ac:0f:f5:1c:28:16:86:b9:4a:29:1b:6b:
d0:46:13:e0:c8:b6:fc:ea:44:3c:fd:e1:87:3d:fc:
8e:32:3f:b6:91:91:99:17:b7:b7:21:68:0e:46:63:
6e:91:e4:50:9c:7d:ae:f7:3c:24:07:76:02:1c:9a:
1e:29:ed:0f:31:1e:73:4d:50:4f:5d:2f:a1:f7:3c:
42:cc:4a:82:66:96:2a:c9:76:88:2c:87:10:a5:0d:
ca:97:98:f2:fb:5f:c3:5d:41:a6:22:67:6d:37:e0:
3c:67:08:f6:f5:7d:18:1e:e2:00:2b:26:3c:de:eb:
44:7d:8d:14:b1:3f:4d:c5:16:2f:53:d7:ad:18:83:
a8:2f:13:58:b5:e3:16:21:d2:5c:07:95:40:49:de:
b1:55:18:74:d7:f0:7f:4b:93:43:a0:ce:2a:e8:34:
77:3e:15:86:9d:ac:37:c1:12:28:94:8c:f7:40:70:
63:50:a3:1c:f4:47:07:7e:b9:76:2c:07:99:f9:a4:
b3:47:9c:04:2e:ae:3a:2f:b0:41:6a:1f:76:77:e7:
9a:e8:f9:8f:b8:13:d7:44:d6:5d:36:39:7b:ef:7d:
af:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:30:5E:B7:FC:DB:4D:F8:79:A3:BF:3E:D5:FD:CE:45:9D:D9:58:0E
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/965FB31812FE11EF92AAAD2D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.240.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c4:fa:82:ca:e9:17:75:05:30:af:23:1a:a6:50:d1:6b:5e:
8f:eb:19:c8:52:f5:17:d2:45:1f:0c:41:bf:55:cc:45:fb:43:
9d:e3:25:7e:c8:1e:80:81:da:69:4e:b9:b3:a4:cc:da:37:a3:
92:6f:73:c6:33:2f:29:24:56:4f:31:8e:1e:0d:46:03:35:77:
54:f9:b9:3a:ed:1e:8f:e8:5f:c6:6c:a1:96:f1:29:54:a3:76:
86:3e:04:ec:3a:5c:ea:d1:2c:29:70:33:6e:25:92:65:cc:19:
4f:b6:74:63:7c:90:00:da:c6:b6:6a:39:a5:ec:09:95:44:a6:
56:db:46:83:8e:06:3c:2e:06:18:67:60:61:ab:27:46:32:21:
d0:a7:dc:bb:82:30:d1:67:1e:f3:c4:e0:c0:89:a3:f9:9d:0d:
3b:92:9d:1f:27:9d:b3:f9:7e:a2:34:6f:ea:71:ad:2b:21:4e:
76:7d:bc:ff:d4:42:74:67:0b:3a:82:83:94:7f:a1:bf:0b:0a:
da:7e:6a:21:79:44:8f:e1:ac:00:ff:a6:1f:b3:44:7e:f3:a3:
f4:b8:13:7a:da:8f:71:76:3f:d0:1c:25:b0:c2:cc:60:e6:74:
e2:37:31:1b:42:fe:5d:79:ff:ef:35:43:e1:f3:aa:14:cf:45:
65:03:fb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:20 2024 by rpki-client on console-fra.rpki-client.org