Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/83A1D4F2B9F011EE8B75859B775412E6.roa
File: 83A1D4F2B9F011EE8B75859B775412E6.roa (raw, json)
Hash identifier: CPmHDIqKK57XVYZdkDNcREHjehVNKJ8DH1SvRqIumZw=
Subject key identifier: 7F:4A:70:63:4A:EF:FF:96:D7:38:C6:B0:37:CF:11:A4:19:EA:7C:56
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0235
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/83A1D4F2B9F011EE8B75859B775412E6.roa
Signing time: Tue 23 Jan 2024 13:08:35 +0000
ROA not before: Tue 23 Jan 2024 13:08:31 +0000
ROA not after: Wed 22 Jan 2025 13:08:31 +0000
asID: 174
IP address blocks: 66.251.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 30 Apr 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 565 (0x235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jan 23 13:08:31 2024 GMT
Not After : Jan 22 13:08:31 2025 GMT
Subject: CN=65afba53-82e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:90:2b:53:99:ad:06:81:26:eb:b1:c1:85:
ed:ed:b6:e1:d4:67:20:35:09:bc:c5:b1:8f:5c:51:
88:16:58:4e:7c:54:40:c5:03:52:68:e7:89:ee:72:
4e:7e:72:54:66:6a:46:d9:a3:df:22:85:1e:02:74:
93:64:2b:68:dc:63:fd:27:c4:a7:e4:7a:c5:ac:4a:
b7:4a:95:d8:0e:86:2c:b3:7b:32:7a:af:69:96:bb:
cc:f8:b0:eb:e0:a9:c1:22:e7:39:a5:9c:2a:39:fb:
a0:6a:b8:2f:2c:05:57:8b:5b:cd:cf:26:7e:9b:9c:
3f:b4:c5:48:a7:06:3f:59:7c:7f:31:5d:89:b7:1a:
92:da:51:0d:40:f7:da:80:a9:77:92:2b:e4:bc:99:
9e:a3:4b:d3:51:98:3c:16:f9:b1:6e:6b:ef:b7:ea:
cb:b2:a1:8d:2a:bf:87:e8:42:d0:9e:19:14:10:68:
2d:40:73:95:60:74:91:10:9e:71:d9:52:f7:df:7e:
f0:00:2f:b7:58:8d:9a:ef:a0:50:bd:7f:bd:55:ce:
2c:56:53:ec:14:e7:2b:69:d6:e8:ad:81:61:ee:cd:
f4:fe:c8:0c:90:b2:9e:1d:bd:e3:62:5a:97:12:22:
af:6b:b1:e7:e0:b8:a4:35:e2:01:d0:03:1b:3a:c8:
a5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4A:70:63:4A:EF:FF:96:D7:38:C6:B0:37:CF:11:A4:19:EA:7C:56
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/83A1D4F2B9F011EE8B75859B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.162.0/24
Signature Algorithm: sha256WithRSAEncryption
53:aa:be:3d:f8:cc:3e:51:92:6b:12:cf:06:8a:c9:b9:67:16:
f4:d2:89:8d:67:f7:d4:52:a7:c6:01:63:9e:6d:2a:11:a5:0b:
1a:b1:ff:59:62:a6:8a:32:cb:66:d9:72:4c:d2:6b:15:1d:66:
4f:4f:bb:06:9d:69:b9:e1:3f:4e:ed:ed:57:a7:ab:dd:83:de:
e0:dd:9e:92:db:bc:98:a2:22:0e:74:0c:01:c3:0b:a1:02:b5:
3a:02:f1:83:a9:f7:13:81:f6:39:1d:bc:d3:00:c6:33:83:41:
cd:67:1f:7d:08:f9:71:d6:47:50:31:88:42:c0:38:58:71:85:
0c:4c:34:f7:16:5a:be:e3:d4:8b:b5:69:96:33:8d:fe:66:10:
eb:3e:68:e2:1f:c0:d3:7a:67:06:56:7f:36:31:87:06:5e:27:
67:d9:00:8b:b0:03:a9:15:62:0f:c1:bc:43:4e:d1:16:d2:4a:
2f:c1:dd:9e:c9:b8:75:b0:08:54:15:32:4e:b8:44:29:4b:d4:
80:06:a3:aa:d6:7c:43:62:db:b1:a6:bf:79:57:11:63:32:2f:
21:4d:29:90:27:39:b8:d7:46:f9:3d:b2:29:a7:34:01:c3:d5:
d3:a0:89:68:f3:a1:dd:f6:b3:77:02:e0:91:65:b8:8f:a4:91:
50:05:7c:a1
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTlGOUNBUjExMC8GA1UEBRMoMDlGQjMxMzZFQ0Q1RTNEN0NGMDBCMzJDMTIxRjEy
RThBRkQwQTYwMTAeFw0yNDAxMjMxMzA4MzFaFw0yNTAxMjIxMzA4MzFaMBgxFjAU
BgNVBAMTDTY1YWZiYTUzLTgyZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDABZArU5mtBoEm67HBhe3ttuHUZyA1CbzFsY9cUYgWWE58VEDFA1Jo54nu
ck5+clRmakbZo98ihR4CdJNkK2jcY/0nxKfkesWsSrdKldgOhiyzezJ6r2mWu8z4
sOvgqcEi5zmlnCo5+6BquC8sBVeLW83PJn6bnD+0xUinBj9ZfH8xXYm3GpLaUQ1A
99qAqXeSK+S8mZ6jS9NRmDwW+bFua++36suyoY0qv4foQtCeGRQQaC1Ac5VgdJEQ
nnHZUvfffvAAL7dYjZrvoFC9f71VzixWU+wU5ytp1uitgWHuzfT+yAyQsp4dveNi
WpcSIq9rsefguKQ14gHQAxs6yKUnAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUf0pw
Y0rv/5bXOMawN88RpBnqfFYwHwYDVR0jBBgwFoAUCfsxNuzV49fPALMsEh8S6K/Q
pgEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIyNDY4L0Nmc3hO
dXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0Nmc3hOdXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIy
NDY4LzgzQTFENEYyQjlGMDExRUU4Qjc1ODU5Qjc3NTQxMkU2LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABC+6IwDQYJKoZIhvcNAQELBQAD
ggEBAFOqvj34zD5RkmsSzwaKyblnFvTSiY1n99RSp8YBY55tKhGlCxqx/1lipooy
y2bZckzSaxUdZk9PuwadabnhP07t7Venq92D3uDdnpLbvJiiIg50DAHDC6ECtToC
8YOp9xOB9jkdvNMAxjODQc1nH30I+XHWR1AxiELAOFhxhQxMNPcWWr7j1Iu1aZYz
jf5mEOs+aOIfwNN6ZwZWfzYxhwZeJ2fZAIuwA6kVYg/BvENO0RbSSi/B3Z7JuHWw
CFQVMk64RClL1IAGo6rWfENi27Gmv3lXEWMyLyFNKZAnObjXRvk9simnNAHD1dOg
iWjzod32s3cC4JFluI+kkVAFfKE=
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:10:31 2024 by rpki-client on console-ams.rpki-client.org