Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/4880547E4E3A11EEB59F7E2C4AD9E6FC.roa
File: 4880547E4E3A11EEB59F7E2C4AD9E6FC.roa (raw, json)
Hash identifier: PXU4SU+6pNll/HUCoE66wTWoO0DVcBBHMEqHapaUi8c=
Subject key identifier: 41:64:4F:70:3E:FE:BE:59:8C:91:6A:AD:01:CF:B9:0D:57:69:2A:A6
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0165
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/4880547E4E3A11EEB59F7E2C4AD9E6FC.roa
Signing time: Fri 08 Sep 2023 11:24:33 +0000
ROA not before: Fri 08 Sep 2023 11:24:30 +0000
ROA not after: Sat 07 Sep 2024 11:24:30 +0000
asID: 53356
IP address blocks: 66.251.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357 (0x165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Sep 8 11:24:30 2023 GMT
Not After : Sep 7 11:24:30 2024 GMT
Subject: CN=64fb0471-9e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2e:61:0c:70:ec:1a:14:15:8e:89:88:dc:2a:
23:f2:85:5e:f1:c7:65:6c:58:9e:1e:9d:45:75:fa:
ad:9c:7a:62:9f:c0:b9:4e:36:bb:86:a2:75:d9:b3:
d1:1f:27:41:d0:25:31:d7:f5:ad:43:c3:64:19:64:
0f:c9:c7:f2:25:c4:17:9a:eb:ac:33:06:19:07:9a:
cd:17:71:1a:1c:2a:b3:2b:3c:44:c3:26:ae:89:c4:
fe:32:76:3e:c1:9b:94:57:79:d1:c1:78:9b:d0:e5:
a0:3e:b2:b2:4c:7f:de:a6:8e:a0:5e:d8:86:5d:19:
16:aa:96:be:8d:85:68:58:ab:22:a6:81:8d:43:d5:
14:0b:e7:a4:ae:49:a0:83:86:0b:4e:51:3e:38:99:
56:f3:a6:68:8f:e4:7b:85:8f:d7:7d:b8:b9:ab:ad:
6c:52:5b:9e:8d:df:41:64:88:a5:e8:36:89:6a:5b:
de:2b:b0:c8:fe:fc:1d:92:05:9e:47:1f:1b:0d:a5:
1e:3e:5e:93:7a:96:eb:1d:02:93:68:98:e3:7e:f3:
28:00:16:3c:57:07:2c:74:6a:0b:ea:82:76:ab:06:
e2:f9:b2:9a:1d:19:14:e7:9c:fb:8c:29:9b:d7:72:
8f:3c:74:ce:0d:7d:63:57:3e:18:89:c6:eb:77:ac:
52:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:64:4F:70:3E:FE:BE:59:8C:91:6A:AD:01:CF:B9:0D:57:69:2A:A6
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/4880547E4E3A11EEB59F7E2C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.182.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:0b:ae:3a:44:d3:01:53:5e:10:7a:3f:6a:0f:25:18:7c:5c:
26:2a:d3:01:6c:a9:c0:7e:97:79:72:c9:79:6f:5b:c5:3d:89:
5d:6e:c9:60:f6:c6:33:15:90:7d:db:7b:d4:8d:d9:cd:e1:3d:
64:37:82:70:c6:ab:9c:01:43:96:36:5c:e9:3b:2b:89:68:9d:
1e:84:ba:9d:d5:a9:6d:6f:34:1c:9d:a7:5e:e9:f4:45:ff:f6:
c4:a4:c3:c8:a9:88:48:a8:aa:a5:ca:b9:9c:6e:ef:3e:21:2c:
2e:96:ea:68:15:65:13:c3:3e:3a:09:06:ce:cc:30:8f:45:93:
21:4c:0c:92:13:46:a4:f7:1d:94:cc:4b:7d:b0:e3:ed:1c:3e:
1d:7c:3a:07:d1:95:8c:34:2e:22:b1:c6:9a:f7:a1:87:04:79:
a9:44:36:69:14:d0:c6:8c:99:cb:1e:d7:7d:e3:94:7a:7c:7e:
c0:cd:07:9b:75:40:8a:61:25:dc:7c:e5:d6:ec:d4:27:42:6a:
10:29:e1:bb:95:c2:f2:00:44:30:50:dc:d4:8e:0c:a1:7c:d6:
63:f4:90:07:3c:4b:ad:23:7a:96:a5:fd:43:aa:68:5d:67:46:
8c:b0:ec:4c:9d:9b:63:46:35:ac:5b:c6:b9:ae:be:92:63:48:
f1:73:77:96
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NTlGOUNBUjExMC8GA1UEBRMoMDlGQjMxMzZFQ0Q1RTNEN0NGMDBCMzJDMTIxRjEy
RThBRkQwQTYwMTAeFw0yMzA5MDgxMTI0MzBaFw0yNDA5MDcxMTI0MzBaMBgxFjAU
BgNVBAMTDTY0ZmIwNDcxLTllMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPLmEMcOwaFBWOiYjcKiPyhV7xx2VsWJ4enUV1+q2cemKfwLlONruGonXZ
s9EfJ0HQJTHX9a1Dw2QZZA/Jx/IlxBea66wzBhkHms0XcRocKrMrPETDJq6JxP4y
dj7Bm5RXedHBeJvQ5aA+srJMf96mjqBe2IZdGRaqlr6NhWhYqyKmgY1D1RQL56Su
SaCDhgtOUT44mVbzpmiP5HuFj9d9uLmrrWxSW56N30FkiKXoNolqW94rsMj+/B2S
BZ5HHxsNpR4+XpN6lusdApNomON+8ygAFjxXByx0agvqgnarBuL5spodGRTnnPuM
KZvXco88dM4NfWNXPhiJxut3rFJDAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUQWRP
cD7+vlmMkWqtAc+5DVdpKqYwHwYDVR0jBBgwFoAUCfsxNuzV49fPALMsEh8S6K/Q
pgEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIyNDY4L0Nmc3hO
dXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0Nmc3hOdXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIy
NDY4LzQ4ODA1NDdFNEUzQTExRUVCNTlGN0UyQzRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABC+7YwDQYJKoZIhvcNAQELBQAD
ggEBAHoLrjpE0wFTXhB6P2oPJRh8XCYq0wFsqcB+l3lyyXlvW8U9iV1uyWD2xjMV
kH3be9SN2c3hPWQ3gnDGq5wBQ5Y2XOk7K4lonR6Eup3VqW1vNBydp17p9EX/9sSk
w8ipiEioqqXKuZxu7z4hLC6W6mgVZRPDPjoJBs7MMI9FkyFMDJITRqT3HZTMS32w
4+0cPh18OgfRlYw0LiKxxpr3oYcEealENmkU0MaMmcse133jlHp8fsDNB5t1QIph
Jdx85dbs1CdCahAp4buVwvIARDBQ3NSODKF81mP0kAc8S60jepal/UOqaF1nRoyw
7Eydm2NGNaxbxrmuvpJjSPFzd5Y=
-----END CERTIFICATE-----
Generated at Tue May 7 03:11:27 2024 by rpki-client on console-fra.rpki-client.org