Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/5F1D8314B9F611EE86B392A5775412E6.roa
File: 5F1D8314B9F611EE86B392A5775412E6.roa (raw, json)
Hash identifier: jK8zLdVi5WCYSb/FhtRNz6ycqkFrkaHKeKr6W3kN/jw=
Subject key identifier: B0:93:DE:C4:81:BA:13:63:7D:85:52:A4:83:51:7C:B1:B4:78:8F:66
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0261
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/5F1D8314B9F611EE86B392A5775412E6.roa
Signing time: Tue 23 Jan 2024 13:50:30 +0000
ROA not before: Tue 23 Jan 2024 13:50:27 +0000
ROA not after: Wed 22 Jan 2025 13:50:27 +0000
asID: 174
IP address blocks: 66.251.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 609 (0x261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jan 23 13:50:27 2024 GMT
Not After : Jan 22 13:50:27 2025 GMT
Subject: CN=65afc426-99bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:aa:88:b6:f9:15:eb:80:33:97:36:11:87:25:
f9:a1:29:74:1d:3c:6a:7e:5f:d5:47:0e:38:6e:a7:
2c:17:ca:d1:db:84:29:8b:c8:2e:0d:76:09:b8:98:
90:94:f9:7d:48:9e:6b:aa:43:56:f7:f1:65:d7:9f:
01:05:f2:44:66:ed:dc:ad:4f:1a:c4:eb:72:b5:36:
2f:aa:dd:34:c4:ef:c1:c8:bf:e9:76:07:1a:77:cf:
5e:fd:9f:0a:02:f8:f0:28:89:83:01:05:1d:47:db:
07:29:c1:c7:e2:b4:4e:26:e7:8e:ab:8a:85:fd:67:
03:63:e3:09:b4:0f:04:61:83:61:d9:12:8c:3b:96:
41:d9:0e:07:5f:94:2d:92:f8:ae:da:7e:6a:38:a5:
56:82:ab:08:86:db:de:39:67:61:02:e6:67:b0:6d:
ba:b4:55:a6:cf:ec:91:6c:50:f9:79:33:0a:1b:94:
78:39:58:87:f6:0d:b5:02:e1:07:0c:7f:d0:0c:db:
15:d1:53:cc:87:8f:73:a1:49:7b:5a:30:32:71:d6:
c5:31:f9:69:d7:bb:fb:03:a0:98:d7:cd:f2:e8:9e:
ee:6b:2a:2c:bf:79:da:fe:d7:5c:3f:4b:a9:6a:a2:
9d:93:4c:80:a6:48:2c:24:22:08:4c:00:91:98:2a:
e4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:93:DE:C4:81:BA:13:63:7D:85:52:A4:83:51:7C:B1:B4:78:8F:66
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/5F1D8314B9F611EE86B392A5775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.150.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:dc:af:ae:60:92:f0:ca:3c:6f:e0:2c:06:7a:63:60:5e:3b:
fd:63:7e:fb:0a:4c:03:da:da:d7:0a:c6:e9:f9:b1:87:70:09:
32:9a:f5:ec:8d:42:68:60:03:8b:4d:36:f7:c5:a2:17:54:7a:
f5:8c:ee:5b:44:6f:30:a7:07:3a:1f:d6:9a:ae:27:ea:f9:94:
31:2c:0d:8d:2a:15:a5:d9:05:3a:f9:f7:28:3b:b4:a5:78:c1:
f6:d8:da:4c:11:03:fc:b6:07:eb:5a:84:7d:af:2b:b9:54:53:
fa:5f:6d:e8:ea:36:49:84:62:50:a2:16:a0:7a:22:c2:7e:12:
4c:a9:1f:bb:53:b6:4a:12:e5:79:b9:36:72:87:61:a9:fa:78:
6f:93:23:4f:b6:92:1c:3e:02:7b:ea:ae:0e:76:f1:68:f0:92:
7f:eb:f6:2a:b5:16:12:92:7e:4e:16:db:5b:d2:ff:21:c4:c4:
a4:a0:6a:16:d9:88:86:d9:9c:bc:e4:81:33:ff:12:56:a9:06:
9a:ca:3e:29:86:d7:d4:0b:fe:88:51:f7:51:0d:7c:4d:9e:5e:
db:04:22:7d:ef:f0:45:f2:32:ed:30:a2:5f:71:08:a6:1c:a7:
1c:f5:5b:4a:5d:5a:1c:d3:77:e1:4f:0b:77:60:52:d9:91:90:
d3:f7:e4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:17:33 2024 by rpki-client on console-ams.rpki-client.org