Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DCB7284C7CD511EE87F2DB494AD9E6FC.roa
File: DCB7284C7CD511EE87F2DB494AD9E6FC.roa (raw, json)
Hash identifier: HeM5BsjCAW/oLBL1yPV9h9DSwkeQQmLsntdqg4Fkuyg=
Subject key identifier: BD:8D:FE:66:40:8F:80:7F:79:1A:62:04:83:39:BD:AB:AA:1D:31:6F
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0CA1
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DCB7284C7CD511EE87F2DB494AD9E6FC.roa
Signing time: Mon 06 Nov 2023 18:54:07 +0000
ROA not before: Mon 06 Nov 2023 18:54:04 +0000
ROA not after: Mon 06 Nov 2028 18:54:04 +0000
asID: 207990
IP address blocks: 161.123.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3233 (0xca1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 6 18:54:04 2023 GMT
Not After : Nov 6 18:54:04 2028 GMT
Subject: CN=6549364f-d132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:75:bb:2c:2a:f1:a3:cd:eb:c1:79:dd:5c:fd:
b8:26:0d:53:32:ef:0e:f2:2e:18:cc:30:b3:4a:f6:
9e:9d:ec:4d:b1:69:97:fc:9c:da:29:b1:bc:44:74:
3d:11:a7:c8:a4:aa:01:ba:c4:6c:d7:8b:d7:71:3d:
22:7e:2b:d7:b8:47:d2:a7:c6:82:a4:f2:e6:27:3e:
a6:51:b2:f9:5a:35:4b:e5:17:0f:55:d8:1b:38:37:
94:7a:c7:70:7f:b2:7a:d3:d9:27:db:17:a3:ad:cf:
4c:ad:12:c8:9c:e5:86:dc:3e:c4:74:31:be:ec:48:
dc:c3:5c:f0:c3:58:a2:f6:f2:7e:5f:bf:b1:73:70:
cb:d5:b6:62:5b:f0:c2:e7:db:b9:17:7e:04:13:98:
1b:34:e0:70:21:dc:83:26:27:fe:ae:01:53:db:63:
f1:96:9c:7a:9c:eb:39:1e:f0:ab:63:22:a1:9c:5a:
cb:c6:36:8e:d3:0a:0e:a6:05:35:c2:84:7b:5f:af:
23:02:64:2c:bd:0b:d8:7b:89:4f:d0:a8:6e:47:e4:
64:67:b1:ab:e7:13:23:be:d8:37:a5:e8:1a:a4:06:
00:3e:56:47:28:3f:8d:ae:bb:11:d8:a2:a5:be:45:
aa:60:86:ed:08:f4:e5:60:dc:2b:1b:b8:ed:99:73:
c8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8D:FE:66:40:8F:80:7F:79:1A:62:04:83:39:BD:AB:AA:1D:31:6F
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DCB7284C7CD511EE87F2DB494AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.50.0/24
Signature Algorithm: sha256WithRSAEncryption
18:76:ee:62:c3:70:d4:b9:63:ec:04:e1:b9:df:20:23:91:03:
fe:c3:fb:ff:72:b8:14:49:ca:16:80:f6:a1:cd:3e:1a:f2:1e:
ea:dd:36:0e:bd:db:5c:c2:b7:fa:ac:06:cb:0f:22:1a:43:93:
6c:1d:89:13:ea:e5:c6:f9:db:6f:73:8a:bb:6e:05:a5:14:32:
98:5f:85:f1:7b:57:5c:b8:1f:3f:12:de:03:51:d0:2e:8e:b8:
e0:65:60:dd:a7:7b:8d:c9:13:55:4e:ac:57:e8:13:76:79:41:
14:28:87:6e:61:51:3a:d0:21:09:5f:95:0c:65:03:a9:6e:3f:
98:f4:9a:c6:4a:c2:50:f4:63:6f:6f:9f:36:94:3f:34:34:70:
ae:63:bd:06:3b:4a:b9:01:19:d8:47:98:c3:97:54:a3:09:95:
ea:14:b9:03:8d:a2:ed:47:fc:0f:5d:1f:a9:33:4c:96:00:f5:
44:a5:3a:a3:e5:d1:35:2e:99:6d:d4:9e:18:77:af:bb:8b:52:
5d:67:de:75:3c:39:d7:ba:35:94:82:b5:56:c9:16:31:64:91:
25:97:35:82:85:cc:b1:25:23:21:84:53:a2:67:71:69:f6:0d:
96:ce:68:84:76:e9:c8:45:ff:19:15:f5:44:f0:2b:63:3c:bf:
c4:80:c2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:33 2024 by rpki-client on console-ams.rpki-client.org