Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/967225744E3811EEB30559274AD9E6FC.roa
File: 967225744E3811EEB30559274AD9E6FC.roa (raw, json)
Hash identifier: FHbA0zm8D2Q6cRIiBihwU7qsDc3por142+PNd7DDJkk=
Subject key identifier: 8E:BF:AF:86:3C:77:8E:2B:52:F2:7D:B6:68:EB:8F:D4:3C:A7:0E:97
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 015A
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/967225744E3811EEB30559274AD9E6FC.roa
Signing time: Fri 08 Sep 2023 11:12:24 +0000
ROA not before: Fri 08 Sep 2023 11:12:21 +0000
ROA not after: Sat 07 Sep 2024 11:12:21 +0000
asID: 53356
IP address blocks: 66.251.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346 (0x15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Sep 8 11:12:21 2023 GMT
Not After : Sep 7 11:12:21 2024 GMT
Subject: CN=64fb0198-c695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:89:18:cb:08:c7:8b:79:df:cb:30:77:08:36:
d8:28:46:61:ed:90:f9:52:f4:c4:15:5f:43:3b:47:
1b:e6:ea:9c:1f:ed:44:cd:8a:32:df:74:b8:92:31:
8b:d5:c1:df:75:2d:ec:e8:c7:0f:a8:62:ad:ba:93:
3c:4d:2d:68:d8:55:89:08:68:dc:2f:42:b1:ba:04:
85:26:5a:51:f8:fc:19:7f:67:4a:ca:f6:51:5d:4d:
33:3f:63:3d:32:40:53:b8:16:a1:c0:1c:8e:e3:1e:
53:ac:79:ab:43:e1:85:ee:cf:9c:93:78:71:fd:9e:
e6:12:85:a8:72:7f:6c:24:da:63:17:5b:4f:2c:d6:
7d:2a:85:0d:63:8a:e1:81:c4:e6:f2:ee:97:7a:9e:
ee:12:99:46:c8:8c:b7:f2:06:3d:19:2f:05:e9:27:
bf:7e:99:f2:f3:3f:03:df:78:bb:92:fd:00:76:6d:
b1:8c:7a:ec:43:be:9b:22:5b:86:b2:5a:96:b7:4f:
f6:aa:7c:f0:e0:85:8b:46:19:77:0e:4d:74:9b:26:
c2:a9:e0:74:91:b2:49:fd:78:11:59:f7:a0:93:9f:
c2:f2:22:df:21:64:0f:14:aa:b0:ca:a4:3b:aa:35:
b4:b3:68:a1:15:5b:ab:cc:ad:2e:ba:b1:43:5d:71:
8a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BF:AF:86:3C:77:8E:2B:52:F2:7D:B6:68:EB:8F:D4:3C:A7:0E:97
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/967225744E3811EEB30559274AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.151.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:f3:7d:e4:23:01:03:48:27:8a:1c:3d:92:91:30:9c:a7:e8:
16:16:9a:4e:88:a4:24:b5:6a:41:81:59:58:3a:cd:89:68:65:
aa:02:51:77:96:bc:45:c6:1f:8b:c9:8e:22:90:1d:37:d1:e9:
f5:9d:0d:02:b5:8d:bb:9f:6e:a8:e7:fd:88:fe:75:60:a4:e5:
38:ff:ce:db:03:d9:f7:5b:19:e7:80:27:44:4a:79:12:58:a5:
3c:4e:0f:ca:be:23:94:c5:5e:6c:a5:21:ee:76:82:ed:a3:08:
e5:0a:86:ea:51:ad:1f:83:39:96:4b:b0:89:90:51:dd:69:ea:
c3:87:65:84:9b:a4:bd:21:ba:df:3d:a1:90:e1:7b:c7:70:18:
66:17:d5:ac:34:e4:c2:46:13:7c:59:90:aa:eb:ac:90:cc:79:
1f:57:4d:e3:9f:7d:52:5f:b0:82:a4:73:63:3f:70:06:91:e4:
f1:a8:ff:77:9b:b7:0d:28:d5:88:01:4c:f6:65:95:b3:73:5b:
f0:16:8b:28:20:83:e8:eb:68:21:74:cf:07:05:47:22:57:47:
bf:10:c4:3f:b4:2f:5c:d3:c3:ea:4d:16:d7:43:d3:61:be:51:
fb:6c:04:b0:4f:92:39:d6:ed:02:b6:22:b6:a9:de:b8:0c:f4:
33:c5:11:da
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAVowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NTlGOUNBUjExMC8GA1UEBRMoMDlGQjMxMzZFQ0Q1RTNEN0NGMDBCMzJDMTIxRjEy
RThBRkQwQTYwMTAeFw0yMzA5MDgxMTEyMjFaFw0yNDA5MDcxMTEyMjFaMBgxFjAU
BgNVBAMTDTY0ZmIwMTk4LWM2OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQiRjLCMeLed/LMHcINtgoRmHtkPlS9MQVX0M7Rxvm6pwf7UTNijLfdLiS
MYvVwd91Lezoxw+oYq26kzxNLWjYVYkIaNwvQrG6BIUmWlH4/Bl/Z0rK9lFdTTM/
Yz0yQFO4FqHAHI7jHlOseatD4YXuz5yTeHH9nuYShahyf2wk2mMXW08s1n0qhQ1j
iuGBxOby7pd6nu4SmUbIjLfyBj0ZLwXpJ79+mfLzPwPfeLuS/QB2bbGMeuxDvpsi
W4ayWpa3T/aqfPDghYtGGXcOTXSbJsKp4HSRskn9eBFZ96CTn8LyIt8hZA8UqrDK
pDuqNbSzaKEVW6vMrS66sUNdcYopAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUjr+v
hjx3jitS8n22aOuP1DynDpcwHwYDVR0jBBgwFoAUCfsxNuzV49fPALMsEh8S6K/Q
pgEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIyNDY4L0Nmc3hO
dXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0Nmc3hOdXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIy
NDY4Lzk2NzIyNTc0NEUzODExRUVCMzA1NTkyNzRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABC+5cwDQYJKoZIhvcNAQELBQAD
ggEBAE7zfeQjAQNIJ4ocPZKRMJyn6BYWmk6IpCS1akGBWVg6zYloZaoCUXeWvEXG
H4vJjiKQHTfR6fWdDQK1jbufbqjn/Yj+dWCk5Tj/ztsD2fdbGeeAJ0RKeRJYpTxO
D8q+I5TFXmylIe52gu2jCOUKhupRrR+DOZZLsImQUd1p6sOHZYSbpL0hut89oZDh
e8dwGGYX1aw05MJGE3xZkKrrrJDMeR9XTeOffVJfsIKkc2M/cAaR5PGo/3ebtw0o
1YgBTPZllbNzW/AWiyggg+jraCF0zwcFRyJXR78QxD+0L1zTw+pNFtdD02G+Ufts
BLBPkjnW7QK2Irap3rgM9DPFEdo=
-----END CERTIFICATE-----
Generated at Tue May 7 03:09:38 2024 by rpki-client on console-ams.rpki-client.org