Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/1F4C8FDA8D1A11EFB7560A60762E951A.roa
File: 1F4C8FDA8D1A11EFB7560A60762E951A.roa (raw, json)
Hash identifier: 8RVUtIlnT7mgvh4UJvsSR317h6/XdfB/Eycnwvwy8WE=
Subject key identifier: C7:F2:34:02:09:4F:C2:8A:CD:81:D4:7C:5E:30:77:70:32:72:C4:41
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 037A
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/1F4C8FDA8D1A11EFB7560A60762E951A.roa
Signing time: Fri 18 Oct 2024 06:28:01 +0000
ROA not before: Fri 18 Oct 2024 06:27:57 +0000
ROA not after: Fri 17 Oct 2025 06:27:57 +0000
asID: 34549
IP address blocks: 66.251.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890 (0x37a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Oct 18 06:27:57 2024 GMT
Not After : Oct 17 06:27:57 2025 GMT
Subject: CN=6711fff0-3d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:2f:f9:0c:62:85:fe:04:70:d1:50:11:5b:
c5:2a:bb:14:b9:f1:cd:15:33:d9:39:ff:93:44:ca:
02:3c:21:d4:17:83:d9:ec:c3:34:38:b4:33:f1:bf:
19:23:c7:73:cc:a0:13:a1:e2:24:78:7b:95:67:27:
43:56:a7:be:ca:c1:2f:e8:3c:80:ab:56:b8:a3:9e:
2c:7f:4b:6b:66:bf:93:5a:13:ef:d9:37:d9:c8:eb:
9f:64:ec:94:11:1b:23:4f:1a:76:0e:9a:c5:79:6e:
bd:c2:82:9d:87:40:69:e7:b3:df:45:98:ba:f4:91:
af:82:dd:1f:9d:ac:52:13:2f:54:c2:45:78:47:9c:
47:58:2b:59:27:ea:a0:25:e1:97:18:e1:56:a7:4a:
0c:5c:ef:0f:c0:90:fb:46:36:59:b2:d4:3d:fe:3b:
0b:8a:2f:77:b0:f9:6d:98:9d:d1:a9:80:78:24:c4:
42:72:c4:c3:48:8e:32:ff:15:88:26:a4:b5:e9:7e:
16:ee:6a:31:04:8b:38:95:ef:4f:1e:d1:57:4a:63:
09:3a:24:a8:7c:2c:bc:f3:9b:ee:43:07:b6:6e:39:
0b:23:8d:17:51:42:02:e1:30:df:80:49:18:be:e7:
9b:bd:9f:9e:1c:b0:13:34:5d:d8:7c:10:58:93:9d:
c1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F2:34:02:09:4F:C2:8A:CD:81:D4:7C:5E:30:77:70:32:72:C4:41
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/1F4C8FDA8D1A11EFB7560A60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.169.0/24
Signature Algorithm: sha256WithRSAEncryption
42:a6:c6:08:55:47:15:d0:ac:fd:77:04:54:09:27:f5:f9:a3:
b6:2b:74:8a:e6:2a:e6:aa:4a:b4:55:b5:d0:a2:e6:5f:10:8b:
b5:46:06:f4:23:43:1b:45:0f:be:b0:6b:66:d1:27:79:7a:d9:
29:ad:ff:a0:7f:d4:a0:63:3e:93:38:86:89:30:d4:02:77:76:
5a:5f:ad:54:d3:c6:6f:d5:ef:a6:03:ff:ac:16:f7:8c:3d:20:
f8:45:2a:c6:37:d4:7f:a8:08:e6:07:82:5e:e8:f2:60:84:95:
45:0b:84:18:a8:d7:6e:08:cc:a7:d3:dc:a1:ea:26:a1:f1:32:
0b:af:c5:00:a8:e0:99:29:76:8a:ff:9d:14:f1:0f:95:1b:4a:
c5:af:1c:93:9b:60:e1:c2:e8:7a:51:9f:d6:c0:df:bd:78:f9:
2e:78:80:09:e6:02:06:af:44:85:2d:e2:ca:a3:52:c5:3c:96:
58:49:26:28:05:28:55:85:56:94:7f:7d:ee:88:05:4a:64:db:
1e:22:72:59:f3:bf:e0:b0:d2:a6:3f:73:02:eb:b3:2c:93:ca:
0f:7a:2c:19:96:f1:25:c3:19:ca:e0:82:b2:60:16:c3:94:45:
8b:91:9a:7d:d7:e8:6a:23:87:ef:50:51:8b:86:e8:8a:5f:61:
11:a4:02:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:54 2024 by rpki-client on console-fra.rpki-client.org