Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/3821A3FCA61511EEA262F127D25BE465.roa
File: 3821A3FCA61511EEA262F127D25BE465.roa (raw, json)
Hash identifier: qwziBPPLFIkfH0LRjsIgbPYf8smGMUSJO9afZmoybt4=
Subject key identifier: 95:1B:66:F9:30:6D:35:12:C9:39:05:45:AB:B0:04:C8:C6:7F:08:61
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0201
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/3821A3FCA61511EEA262F127D25BE465.roa
Signing time: Fri 29 Dec 2023 06:40:56 +0000
ROA not before: Fri 29 Dec 2023 06:40:53 +0000
ROA not after: Sat 28 Dec 2024 06:40:53 +0000
asID: 53356
IP address blocks: 66.251.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513 (0x201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Dec 29 06:40:53 2023 GMT
Not After : Dec 28 06:40:53 2024 GMT
Subject: CN=658e69f8-c2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:c6:b0:5b:fa:a2:22:76:b8:b1:2c:98:35:
01:1e:ca:f7:a6:3c:8a:e7:ed:36:99:2a:8a:c0:f3:
37:09:24:ae:e3:2c:b3:12:86:5b:53:ed:4f:47:10:
16:d7:30:02:1c:f3:20:ea:a1:c7:fe:f5:0a:51:79:
8c:89:69:16:66:b1:ef:38:b9:05:c1:ee:05:13:80:
92:99:5e:f6:68:24:62:05:6a:d4:4b:fd:b7:ad:12:
83:fd:43:9f:90:93:c2:ee:52:38:d2:67:50:15:07:
ea:61:86:5b:6e:31:ed:6f:ea:2f:46:e3:51:a4:88:
f2:62:06:f4:5d:71:94:cc:5f:db:86:8a:81:f3:ba:
e2:11:61:21:aa:29:52:f9:e0:25:8d:8c:ce:e9:38:
eb:7b:9a:58:5c:d8:45:76:88:17:73:79:07:aa:5d:
d5:f4:dc:36:03:e6:44:82:5d:1f:f1:5e:18:8c:b2:
97:f7:3b:a4:80:1a:3e:a5:07:00:7c:59:34:6d:ea:
e7:b4:a6:d7:c0:03:e8:14:e4:98:4d:c1:a4:99:e3:
16:57:43:d4:03:7a:27:a3:6d:48:be:fd:f5:53:3b:
20:a1:17:c2:77:2b:ff:6f:57:e7:08:6c:94:a8:ad:
a4:19:52:38:7e:c6:b1:29:0e:bc:f0:32:e0:88:c7:
cc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1B:66:F9:30:6D:35:12:C9:39:05:45:AB:B0:04:C8:C6:7F:08:61
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/3821A3FCA61511EEA262F127D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.154.0/23
Signature Algorithm: sha256WithRSAEncryption
41:d8:51:0e:c9:58:6d:ed:98:d8:0e:72:67:b3:29:59:6e:72:
27:30:4e:79:eb:4c:27:54:9f:93:9e:a2:a1:c8:59:e0:e4:9c:
03:61:74:8c:b3:ad:ae:cb:94:1d:f2:42:a0:f6:da:5c:71:c1:
9c:59:fd:7f:3d:37:74:9c:86:3f:dc:a2:37:f1:f1:78:19:88:
e9:59:4f:55:08:15:4c:d3:3e:cb:c0:ba:b8:46:90:88:80:a9:
2a:d0:11:82:0e:c3:e8:94:93:96:62:5a:b3:90:5b:1d:c4:dc:
92:90:92:86:5a:56:13:8f:b5:16:2a:28:f6:77:3f:6a:30:18:
55:f2:b7:83:0c:3a:87:3b:4b:78:b7:24:96:bc:7d:6b:dc:1e:
89:f8:d8:82:e2:6c:f4:28:83:74:aa:3b:07:86:a3:43:8a:2c:
e3:af:b9:b2:04:7e:78:de:9b:f4:4f:ba:8e:b0:96:21:b4:70:
e4:42:a6:d0:a3:d9:20:11:39:f4:45:b7:0a:89:80:6f:1d:d7:
43:af:84:90:08:43:db:33:a8:ae:64:3f:46:73:98:8a:5d:cd:
dc:f1:01:7a:a0:bc:be:97:06:d6:f5:bb:7a:b2:ea:d8:0b:d9:
8f:71:28:09:08:ab:dc:35:45:a7:ad:b3:1a:e8:84:4e:67:18:
39:c4:8f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:09:38 2024 by rpki-client on console-ams.rpki-client.org