Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/05F390FCB9F211EEAD8C029E775412E6.roa
File: 05F390FCB9F211EEAD8C029E775412E6.roa (raw, json)
Hash identifier: y/z2fkdVk4ev3vpcy8ZRO5hUJ/d6ot9qRmP5K94zqy4=
Subject key identifier: C2:F2:ED:07:DD:D6:9E:DF:29:9F:49:31:66:27:53:35:01:DB:09:AA
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 023B
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/05F390FCB9F211EEAD8C029E775412E6.roa
Signing time: Tue 23 Jan 2024 13:19:23 +0000
ROA not before: Tue 23 Jan 2024 13:19:19 +0000
ROA not after: Wed 22 Jan 2025 13:19:19 +0000
asID: 174
IP address blocks: 66.251.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 571 (0x23b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jan 23 13:19:19 2024 GMT
Not After : Jan 22 13:19:19 2025 GMT
Subject: CN=65afbcdb-0323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:9d:4f:fa:b1:c2:26:05:3a:b9:0c:1b:e3:
ee:a5:f6:6c:93:74:4b:93:f1:6f:b2:01:28:ff:03:
33:23:96:ce:1c:40:b8:ff:40:f6:29:6b:dc:12:cd:
27:7b:2f:27:e7:f4:55:c3:43:14:9c:14:cf:2b:1f:
70:e7:8c:ea:65:78:8a:ba:f1:80:40:27:8f:17:60:
bc:76:c2:eb:54:b7:bc:c2:f1:05:45:6e:22:d1:fc:
8b:e3:9e:81:a4:bd:6c:3a:da:a0:b0:fe:9f:8a:98:
f3:b7:97:2a:7e:9c:88:4f:a7:d6:a4:89:c0:e7:00:
5c:99:62:f2:8e:0a:a3:2f:e0:7c:08:f9:1d:3f:7b:
c2:3b:19:5a:10:01:06:02:e6:06:2d:53:30:a5:8f:
43:94:e6:db:33:e8:06:74:bd:70:cd:b9:cb:0c:54:
70:45:9f:9d:ce:ad:91:a9:e5:c8:d6:d7:aa:f1:69:
e8:19:ca:ef:e1:9b:1f:2b:47:2f:9a:fe:c4:57:eb:
50:35:16:38:21:91:35:6b:19:df:e3:20:7a:f2:e7:
7e:a4:3f:49:5a:9c:f1:4e:da:0f:7c:5a:82:89:a8:
82:88:35:df:42:63:83:41:ce:dd:b1:76:d3:65:2f:
1c:45:7e:c1:e1:5a:11:d9:07:8c:6a:91:12:ab:ce:
2c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F2:ED:07:DD:D6:9E:DF:29:9F:49:31:66:27:53:35:01:DB:09:AA
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/05F390FCB9F211EEAD8C029E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.166.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:02:94:dc:0f:dd:f8:a3:b0:df:85:00:9a:0e:01:47:7a:91:
3e:36:ee:f1:3c:91:be:13:27:2b:a9:40:c0:45:5c:69:4c:8f:
32:f3:cb:8a:56:12:86:2c:69:d6:62:d8:51:f6:9c:72:8e:04:
8e:24:41:71:5f:25:81:33:44:fc:de:06:25:62:9a:7e:6d:62:
b7:c6:fd:cb:73:31:4a:74:df:15:9b:b3:15:18:87:86:5c:0b:
d3:2c:e3:96:3e:72:d2:f3:98:ef:f7:36:eb:84:4a:81:46:80:
7d:40:19:2a:98:b5:9f:76:b8:8b:b1:05:af:df:d5:80:11:29:
ee:18:ac:a9:3a:02:f2:7d:58:a6:ee:7c:4e:64:0b:50:28:17:
0e:c2:ae:fb:44:80:ef:5d:9b:b5:bf:9c:f2:77:36:3d:ee:91:
26:da:d1:36:13:24:e1:5a:39:a7:30:d0:4c:f6:7b:7b:e7:dd:
12:49:2d:61:67:d9:f0:1c:85:b1:77:ff:6b:8d:f4:fa:91:97:
99:0d:c1:61:35:7b:6d:91:cf:09:34:21:11:1a:6e:72:46:e4:
48:5e:55:a3:0b:5a:9b:f2:8e:07:39:d8:9a:63:9d:54:fd:e1:
2b:1c:54:ef:08:9b:5b:59:57:3c:21:09:8c:ba:ba:d1:48:30:
a1:12:12:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:17:33 2024 by rpki-client on console-ams.rpki-client.org