Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9CE1DFBA7CD411EEA247D8454AD9E6FC.roa
File: 9CE1DFBA7CD411EEA247D8454AD9E6FC.roa (raw, json)
Hash identifier: 34CjFmmyHYXA2zksZigDiHVi5Ak+VH/HrUOrNXkD50U=
Subject key identifier: EF:AB:B0:08:9C:83:1D:FD:6D:7D:6A:FD:F6:FF:04:C4:60:46:15:28
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0C7F
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9CE1DFBA7CD411EEA247D8454AD9E6FC.roa
Signing time: Mon 06 Nov 2023 18:45:10 +0000
ROA not before: Mon 06 Nov 2023 18:45:07 +0000
ROA not after: Mon 06 Nov 2028 18:45:07 +0000
asID: 207990
IP address blocks: 161.123.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3199 (0xc7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 6 18:45:07 2023 GMT
Not After : Nov 6 18:45:07 2028 GMT
Subject: CN=65493436-01c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:be:3a:28:33:84:b3:07:8c:1b:8e:d0:51:97:
4b:e1:72:9a:44:49:ce:e8:68:10:8a:2b:31:ac:7e:
a2:eb:72:65:ea:6e:29:55:7a:cf:03:69:37:40:85:
69:1d:45:66:17:70:a7:c9:a1:31:a0:de:41:1f:3a:
61:fa:3b:8d:b9:23:95:8f:ec:71:f3:b8:04:f5:c5:
c4:c2:e8:e4:0f:04:68:f2:c8:9d:5e:6d:d2:a3:05:
fd:cb:ee:ef:a9:b1:e2:89:75:60:bf:88:a2:9a:2d:
1a:f0:c6:7c:b6:d0:cd:85:82:32:e8:69:2c:2e:a8:
77:0d:f1:a8:29:e5:80:ae:f6:aa:4c:c0:1c:03:0b:
3b:31:3f:ef:e6:ee:8b:48:2f:86:4a:e9:8b:fa:c0:
5f:c1:72:e6:8c:8d:b5:00:d0:5e:77:c9:33:d0:df:
a5:ff:fa:9c:37:49:aa:20:79:7e:9c:aa:f0:63:48:
04:82:72:94:c9:a6:be:7c:a7:60:c4:92:28:7d:34:
e7:25:11:a9:84:1c:f5:ea:7f:cd:30:d6:41:4b:39:
6d:26:ee:6b:56:0b:6e:90:de:fa:dc:93:a3:13:65:
a9:f3:e3:9d:c5:10:6e:d2:a4:a0:37:72:bb:36:49:
a2:ec:c6:26:4e:44:8d:60:0b:44:3d:bc:09:98:c0:
bc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AB:B0:08:9C:83:1D:FD:6D:7D:6A:FD:F6:FF:04:C4:60:46:15:28
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9CE1DFBA7CD411EEA247D8454AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.15.0/24
Signature Algorithm: sha256WithRSAEncryption
61:12:cd:4a:9a:da:ba:5b:fc:bc:fa:1b:0c:76:b9:a2:34:68:
e5:08:5f:5c:4e:63:5a:0d:a9:c2:cc:21:c8:54:4c:32:98:24:
7c:c2:0a:e7:de:44:a2:74:e9:54:f8:26:66:a4:b8:be:ce:18:
f6:34:a4:4f:f0:3a:da:c4:de:72:b4:12:83:65:e4:83:59:ba:
8c:4e:b5:b3:e1:69:bf:f2:ab:d2:17:4e:68:eb:4c:76:04:95:
0f:20:e4:aa:f2:ec:5a:e0:0c:00:a5:01:87:f6:76:82:53:13:
ce:09:1b:98:c8:11:b2:50:02:7e:7a:06:9e:68:cd:53:c7:cd:
5a:11:ee:b6:4a:c4:ae:70:a9:ca:9e:39:03:e8:78:2c:7e:2f:
4d:13:d3:f2:16:6c:5e:18:40:9e:b3:cd:7a:97:b4:35:ba:18:
d5:13:62:96:08:a5:5c:4e:6d:14:16:fd:ca:ef:9a:7c:5a:6f:
5d:da:4d:93:ba:2b:2e:d0:bf:61:1c:a5:1a:6a:be:c6:8e:b7:
db:52:c3:fe:29:69:6f:cc:46:f1:fc:94:d9:c1:23:f9:22:68:
60:2a:ac:52:e2:07:83:18:96:0e:ca:34:0d:96:69:f0:6a:52:
a3:03:1c:64:76:8d:35:65:47:13:e8:d1:22:46:88:51:dd:c5:
8c:2e:53:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:33 2024 by rpki-client on console-ams.rpki-client.org