Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/648E4B74B9F311EE96FA79A0775412E6.roa
File: 648E4B74B9F311EE96FA79A0775412E6.roa (raw, json)
Hash identifier: X1G3CTEkcj0tpIyWIAFSgc2sQKwjmaK7k96WYbFOAfQ=
Subject key identifier: D4:A5:B0:7F:F5:0C:DC:DF:7C:4A:D9:3A:15:EC:38:AE:F0:86:95:AC
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 024B
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/648E4B74B9F311EE96FA79A0775412E6.roa
Signing time: Tue 23 Jan 2024 13:29:11 +0000
ROA not before: Tue 23 Jan 2024 13:29:08 +0000
ROA not after: Wed 22 Jan 2025 13:29:08 +0000
asID: 174
IP address blocks: 66.251.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 587 (0x24b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jan 23 13:29:08 2024 GMT
Not After : Jan 22 13:29:08 2025 GMT
Subject: CN=65afbf27-25ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:73:d8:13:a6:37:7c:1b:d1:62:aa:1c:06:71:
1a:ce:f4:71:20:e4:3e:0c:1b:98:d2:c7:2d:19:90:
95:7d:da:6f:c8:22:94:6b:cd:a2:28:65:96:27:fe:
a1:da:8d:2d:4f:d4:2c:fd:5d:31:45:44:aa:4d:fd:
b9:56:1d:c2:9d:c9:77:db:a1:3a:75:06:ad:42:c4:
1c:1c:70:1a:38:13:e2:b4:7c:24:59:3d:2b:71:45:
fd:66:eb:61:4d:f7:aa:64:63:da:cd:26:49:68:a7:
3a:9e:ff:ed:1f:f6:30:ad:0b:f9:5c:0e:9f:2f:5f:
7a:d3:4b:89:b2:24:23:55:78:3c:73:71:c3:4d:d7:
f9:c6:30:be:42:0e:3b:67:f2:ea:48:55:e3:0b:84:
25:10:29:c2:8f:4b:3f:82:32:64:14:49:c2:87:c8:
a0:eb:39:cd:40:26:f8:82:f7:f8:85:80:a2:68:db:
a5:5b:4c:0b:74:2f:b0:ef:b4:a9:f2:dc:9b:1e:ba:
df:26:ea:b5:0f:05:5e:e6:9c:4a:ae:32:19:fa:8c:
4c:72:71:e8:96:0e:d4:7d:cc:13:3c:6a:07:9f:9e:
e8:77:8b:9c:a8:4b:4b:5c:19:b4:e4:19:2a:d8:7d:
71:c3:c4:3b:d9:0a:f4:c5:64:49:97:cb:34:73:36:
bb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A5:B0:7F:F5:0C:DC:DF:7C:4A:D9:3A:15:EC:38:AE:F0:86:95:AC
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/648E4B74B9F311EE96FA79A0775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.178.0/24
Signature Algorithm: sha256WithRSAEncryption
e7:3f:31:f2:dc:69:e8:46:e0:23:f4:40:54:ac:f2:ee:e4:ea:
22:4a:41:cb:d2:1d:7a:71:99:07:36:74:c2:dd:17:03:f4:0a:
e0:66:50:f4:40:82:69:f1:6e:80:e5:b8:88:d4:e1:f8:81:b7:
c2:68:2f:79:44:f5:9e:ce:28:7a:a3:87:fc:f3:3e:5a:4f:bb:
a3:21:66:a8:a2:6d:ed:11:f9:49:7d:50:a0:53:99:cc:51:5b:
51:55:1e:f4:15:82:c0:6b:b8:57:fc:15:e7:40:4d:24:bc:b0:
3e:f6:01:8f:54:cd:8c:a6:13:ef:93:93:56:d9:cb:a0:45:a3:
dd:59:5b:35:a5:7c:a7:1e:6f:26:94:05:f6:72:bb:11:9e:ec:
65:22:f5:c3:d9:f9:15:e1:8f:6e:2c:cd:b6:4a:8a:b2:8f:94:
1b:ed:3c:ec:d5:44:ca:69:c7:64:e1:b6:7e:80:c3:09:d8:67:
18:38:7b:7c:de:00:2c:ed:10:0b:16:4e:fb:ce:54:1d:37:77:
4f:96:c5:52:9b:8f:6e:f5:c1:1a:74:42:0b:05:ae:0a:88:03:
c1:8a:01:1e:e2:5c:d8:bc:cb:1c:dd:07:04:b9:c0:01:95:a1:
cb:3b:e0:04:7f:4b:9c:40:cb:ab:17:f6:b2:70:b4:be:ea:06:
34:41:d5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:17:33 2024 by rpki-client on console-ams.rpki-client.org