Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/2FF92D32B9F511EE9FF7B4A3775412E6.roa
File: 2FF92D32B9F511EE9FF7B4A3775412E6.roa (raw, json)
Hash identifier: NmF2c+fUiNCNyEyHyjeNRtEeJBQ7c+WIfpEhRedbte0=
Subject key identifier: 08:86:33:39:5E:02:5C:E9:B7:D3:FC:35:B6:72:97:EE:21:BA:06:93
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 025B
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/2FF92D32B9F511EE9FF7B4A3775412E6.roa
Signing time: Tue 23 Jan 2024 13:42:02 +0000
ROA not before: Tue 23 Jan 2024 13:41:58 +0000
ROA not after: Wed 22 Jan 2025 13:41:58 +0000
asID: 174
IP address blocks: 66.251.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 30 Apr 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 603 (0x25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jan 23 13:41:58 2024 GMT
Not After : Jan 22 13:41:58 2025 GMT
Subject: CN=65afc22a-b576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a4:04:a9:cb:78:37:ff:6d:28:6d:a2:fa:8f:
7d:31:17:e5:c4:27:bf:a4:63:cb:72:03:95:66:e1:
1c:4c:89:92:cf:48:57:b5:63:be:c7:49:ab:9c:9e:
30:5a:71:ea:3f:bc:6f:cc:2a:38:04:d5:f8:76:07:
a7:d2:ad:38:70:a5:fd:eb:fa:be:22:58:68:b7:18:
03:6c:75:22:39:4a:17:29:be:76:d1:72:34:bc:06:
f2:ef:28:4a:51:95:52:6f:21:78:bc:66:ad:a6:f7:
85:01:65:c2:7d:1c:4f:32:a2:3f:bf:97:06:7f:da:
ad:95:5b:d8:85:26:0b:a7:ff:04:7c:18:21:3c:e7:
7b:d0:7f:be:55:d2:7e:c0:ee:fa:48:94:01:37:9c:
86:5d:fc:9a:e3:9d:8c:98:1c:59:39:43:8a:57:55:
43:cd:61:20:21:45:ae:c8:d6:3f:91:89:35:65:3f:
d4:88:7c:4e:49:b0:b5:dc:41:2d:6b:fc:cb:b3:e0:
37:c4:b2:c9:73:1c:7f:55:dc:28:63:e9:16:f6:ce:
ca:ab:10:b1:c3:df:cc:c6:da:19:35:14:73:4a:b4:
c3:4e:f7:80:15:41:97:8f:09:6d:8f:39:c2:0f:cd:
ae:23:37:03:86:f7:69:af:6f:41:fc:c0:1a:a1:d4:
67:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:86:33:39:5E:02:5C:E9:B7:D3:FC:35:B6:72:97:EE:21:BA:06:93
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/2FF92D32B9F511EE9FF7B4A3775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.188.0/24
Signature Algorithm: sha256WithRSAEncryption
df:bd:2d:a7:40:be:8a:63:f2:6c:4a:16:af:e6:06:36:26:a1:
a3:77:80:3b:7c:82:ac:9a:40:22:7d:94:3c:4c:fc:94:14:ad:
0d:2c:35:5b:2b:e1:d9:12:84:e9:cd:45:23:1f:17:f6:8d:f6:
12:18:f4:a7:ac:db:bc:40:05:4a:78:e9:dc:90:65:58:b0:13:
0a:42:de:68:16:69:37:e3:bb:67:b0:9b:1c:f2:2f:cc:57:92:
26:8d:cd:cf:5c:7e:ed:95:36:d2:d4:df:47:70:44:db:ac:6c:
c1:f0:3d:9d:6d:50:8b:77:c8:6b:75:d7:4f:0b:9e:e9:af:b0:
60:42:22:cc:d0:34:97:7b:8f:41:51:0d:bc:60:9b:40:47:20:
db:26:9d:b9:cd:fc:50:83:e9:d5:00:63:20:ea:5a:f1:70:78:
16:98:9b:c7:e8:76:c5:fd:ed:61:7a:57:61:92:67:89:44:d4:
b0:ca:0a:c4:c6:d0:fd:c4:7b:cc:28:e5:b8:d6:0b:a3:aa:a7:
3b:cf:40:e1:7b:05:68:f1:54:02:23:a2:28:95:54:5c:03:7b:
a2:36:a5:a2:c5:f8:3c:69:55:78:73:12:ff:d6:f6:e7:7b:88:
d0:99:ba:e3:ea:c0:7b:67:d4:39:44:85:69:8c:cc:49:37:9d:
93:9e:03:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:10:31 2024 by rpki-client on console-ams.rpki-client.org