Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/A233991AE28F11EEA83F6F4D775412E6.roa
File: A233991AE28F11EEA83F6F4D775412E6.roa (raw, json)
Hash identifier: L4AMwrywInjClu9mr5kHv/t4lTu0KD2vjDx5cG/UVkk=
Subject key identifier: D1:A6:9B:F7:24:79:4E:A6:5C:A7:4F:4B:9A:C2:15:19:58:A3:38:A5
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 029B
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/A233991AE28F11EEA83F6F4D775412E6.roa
Signing time: Fri 15 Mar 2024 05:48:22 +0000
ROA not before: Fri 15 Mar 2024 05:48:19 +0000
ROA not after: Fri 14 Mar 2025 05:48:19 +0000
asID: 34549
IP address blocks: 66.251.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667 (0x29b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Mar 15 05:48:19 2024 GMT
Not After : Mar 14 05:48:19 2025 GMT
Subject: CN=65f3e126-6014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:ab:10:37:ad:38:90:a9:3e:0d:eb:3c:4a:
4d:f9:8a:30:ff:6c:82:fe:a3:06:b9:fc:07:f7:d8:
a3:27:b9:08:a0:2e:5f:0d:13:84:f4:07:d4:b1:20:
bd:4e:a1:30:a2:1c:68:50:aa:6c:ea:a7:5b:cb:52:
09:d5:21:44:65:8d:4d:a0:f5:38:64:84:e0:28:37:
6a:a3:85:fc:af:da:25:ed:8f:41:54:99:ca:3d:88:
5d:c6:7f:57:1a:b7:ec:ff:cf:e4:04:8a:13:6f:ad:
00:97:6f:1f:03:ed:c6:ba:1d:12:63:c2:dd:dd:95:
cc:63:ef:31:3a:b2:c1:b6:e6:6f:79:63:f9:10:05:
09:e5:43:85:60:70:8c:bd:17:de:44:7e:92:ee:46:
8e:56:d9:20:ea:19:22:56:3b:07:e2:66:2b:e8:67:
e8:96:b8:1d:58:34:3a:b9:14:0a:e4:bb:d0:05:d5:
bb:4b:f4:49:12:5c:ae:cb:51:6c:91:a1:e3:8b:4d:
a2:de:42:1c:a8:4c:0b:d8:23:7d:28:be:c2:63:3b:
56:31:d4:af:3f:56:e5:ad:74:07:ab:a1:d1:20:11:
37:b9:28:1c:41:d5:59:bd:bb:a1:6c:96:a0:3b:71:
ae:81:ec:ec:52:78:de:86:a4:3c:d9:26:7a:fa:31:
97:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A6:9B:F7:24:79:4E:A6:5C:A7:4F:4B:9A:C2:15:19:58:A3:38:A5
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/A233991AE28F11EEA83F6F4D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.170.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:54:8b:b9:fb:e1:2c:b7:ae:91:43:07:50:84:16:0f:7c:88:
15:d5:6b:9e:bb:af:21:1b:1d:87:7d:7c:0d:8f:42:b2:83:c5:
90:cf:bd:4a:e2:e6:ad:a7:89:d6:d3:d1:1b:9d:03:bd:45:9c:
1e:24:af:bb:7b:f6:55:a5:4f:b8:20:bc:81:3b:14:b2:99:ac:
fe:7d:f4:57:d8:f7:60:05:6f:3e:c6:2e:12:df:e4:2e:55:5e:
b6:fc:31:0a:7b:e9:f1:65:2b:50:0e:d8:71:38:a7:80:3f:84:
7d:44:4e:6a:eb:e5:c9:f2:55:97:2b:72:59:26:73:49:b5:8c:
49:40:97:95:15:10:e3:58:42:94:72:43:0e:22:95:be:85:be:
5b:61:ba:0e:47:51:5c:ef:bd:b8:76:de:f1:b9:fa:e3:2e:89:
74:89:e6:cc:56:14:b6:35:e1:75:94:c6:fe:65:09:9b:1e:f5:
d7:cc:4c:8b:bf:ce:00:3e:84:aa:76:a3:ec:b8:87:97:7f:35:
d4:61:08:d6:79:51:f3:65:35:be:71:2b:f9:b4:56:0e:3f:62:
07:d2:4b:71:34:c9:78:58:64:ef:fc:a5:d7:28:da:79:e0:18:
09:2d:6b:ff:df:ae:32:b5:b3:f0:ad:8c:8b:e9:f9:49:34:bb:
4b:9b:2c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:09:38 2024 by rpki-client on console-ams.rpki-client.org