Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DD4D54DC5CFC11EEB1E7FB474AD9E6FC.roa
File: DD4D54DC5CFC11EEB1E7FB474AD9E6FC.roa (raw, json)
Hash identifier: PbX/vmprCUoi0Ahv1cp3BYISRICApRRs5NRVjNkJMxc=
Subject key identifier: 54:92:76:C2:B6:B0:4B:C5:E3:E2:93:FA:2D:31:9E:83:E3:4E:51:46
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0C23
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DD4D54DC5CFC11EEB1E7FB474AD9E6FC.roa
Signing time: Wed 27 Sep 2023 06:12:41 +0000
ROA not before: Wed 27 Sep 2023 06:12:38 +0000
ROA not after: Mon 30 Sep 2030 06:12:38 +0000
asID: 203999
IP address blocks: 161.123.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3107 (0xc23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 27 06:12:38 2023 GMT
Not After : Sep 30 06:12:38 2030 GMT
Subject: CN=6513c7d9-641e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:08:04:9f:d2:c6:7c:84:fb:55:98:1b:87:
1e:99:15:d1:2e:71:ac:fd:d2:d7:31:73:6e:16:a1:
cd:b8:63:a8:bd:5b:cb:2e:c5:8e:b3:b9:91:77:36:
87:8b:41:01:3e:a6:78:64:98:59:1c:7d:e9:25:c7:
9d:a9:b9:e1:aa:bd:52:27:2e:14:88:e3:b9:fd:1b:
55:14:70:d8:33:84:e6:25:5a:05:92:8e:52:31:eb:
62:04:f8:8f:d5:a9:70:f0:b0:50:06:0c:0e:7b:96:
4c:b7:f2:52:46:5c:64:e3:25:84:4a:12:bd:9c:32:
39:64:ec:42:59:54:2d:61:fc:55:52:d9:cf:4b:69:
b3:fa:79:88:09:51:1c:e2:01:86:17:36:03:9b:cb:
27:aa:bb:de:77:ac:46:d7:63:7c:03:8c:14:91:7a:
99:d6:b0:40:f4:a2:7e:7d:5b:7f:3a:0a:f0:75:ae:
69:06:b3:08:df:32:12:90:cf:17:3b:d3:26:26:9b:
53:bb:a7:1e:54:c4:e2:a8:6b:a0:c7:76:d9:d3:1d:
fc:80:b6:de:c9:a4:17:df:85:14:9e:f2:89:0a:db:
a4:70:90:72:99:30:45:62:34:77:b9:ae:56:21:8f:
1f:3e:f2:48:37:99:46:5d:9a:43:18:eb:dc:87:3f:
7d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:92:76:C2:B6:B0:4B:C5:E3:E2:93:FA:2D:31:9E:83:E3:4E:51:46
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DD4D54DC5CFC11EEB1E7FB474AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.44.0/22
Signature Algorithm: sha256WithRSAEncryption
36:6d:a0:0c:90:7e:b4:40:b2:c6:09:2e:de:23:bc:17:3a:c1:
83:d5:45:77:f2:d1:6c:31:0c:b3:44:55:07:99:f2:bd:b9:cf:
49:e1:98:c8:fe:1b:36:40:75:0d:93:f5:bf:42:20:56:71:36:
bf:41:58:63:ab:e8:c3:ad:a2:3e:83:64:6d:11:0d:ff:6d:1e:
45:e6:b9:b4:ed:9c:87:65:99:af:10:57:4a:4a:61:da:f6:c2:
5a:17:d5:4a:fa:08:85:e4:cd:48:0c:08:6f:22:ab:e0:70:3b:
b2:db:8d:27:46:bf:42:30:e8:0a:a2:d0:df:39:58:c3:4f:7a:
ea:dc:08:14:81:58:5e:9c:6f:b5:d6:5e:0d:58:36:2e:57:74:
c0:63:90:98:bb:45:5b:80:e8:43:b5:af:8c:93:97:e6:f6:10:
ee:6f:89:45:70:d8:cc:2d:92:66:cc:d8:03:9d:89:83:e9:98:
bd:4d:64:5b:44:d4:6b:ee:b1:cf:02:ff:65:14:ae:ff:00:b7:
0a:66:15:bf:a5:68:7d:0a:ab:23:cc:1d:6e:6f:fe:dc:6d:05:
73:ae:36:ed:75:19:91:6b:86:18:9d:4c:44:49:b5:2b:8a:e2:
c8:7d:28:2d:c8:25:d6:ab:a7:6c:aa:2a:8f:7c:d0:c5:8b:26:
f2:5d:d1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:42 2024 by rpki-client on console-fra.rpki-client.org