Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/D6384A38B9F111EEA0D3B09D775412E6.roa
File: D6384A38B9F111EEA0D3B09D775412E6.roa (raw, json)
Hash identifier: H3wj0kGLYcSfVq9zFOOHPOPDPkVjDKque0lPrihDoWc=
Subject key identifier: F4:B1:CE:6F:47:23:F1:25:44:86:37:AF:33:23:7B:BB:76:76:B3:5C
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0239
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/D6384A38B9F111EEA0D3B09D775412E6.roa
Signing time: Tue 23 Jan 2024 13:18:03 +0000
ROA not before: Tue 23 Jan 2024 13:17:59 +0000
ROA not after: Wed 22 Jan 2025 13:17:59 +0000
asID: 174
IP address blocks: 66.251.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 569 (0x239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jan 23 13:17:59 2024 GMT
Not After : Jan 22 13:17:59 2025 GMT
Subject: CN=65afbc8b-11c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:71:d5:b8:bd:95:f8:b8:e5:f5:fd:04:ac:
16:42:35:d6:d6:90:da:47:8a:72:c6:0b:53:0f:5d:
d3:66:60:1e:81:45:8d:d4:98:8b:bf:75:f0:7c:c6:
30:1d:72:65:95:eb:d6:6a:69:4f:df:05:50:d8:b7:
e4:56:a5:19:7d:0b:e4:14:21:93:c4:a5:a7:59:91:
73:50:f3:8d:83:86:9a:66:81:60:22:d6:a9:fd:30:
9a:fc:9b:af:50:1d:57:39:f4:ed:a7:64:9d:88:b9:
ab:cc:a5:0b:48:36:87:e8:24:1e:8d:8b:e0:38:42:
a2:9a:e5:da:dd:eb:19:59:88:6f:99:2e:e5:cc:af:
8b:48:48:5f:9d:03:67:32:16:b9:4c:50:bc:50:fc:
24:f4:73:3c:22:2d:51:3a:b0:e8:31:ca:04:cc:c0:
ed:e0:4a:48:03:4b:57:d4:d6:83:14:ce:02:50:87:
b1:0a:dd:30:e0:e0:88:3b:bc:1e:88:eb:a0:58:22:
8a:c2:1d:ef:d0:27:20:69:54:6f:d1:09:f0:79:e5:
04:0a:18:fe:0b:bd:b1:0e:3c:59:77:ff:b3:d6:2e:
77:fa:a1:fe:34:db:33:87:24:70:17:be:00:5c:ed:
bc:f8:1a:19:d7:e0:01:e5:4a:1a:6f:f4:1d:96:05:
e8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B1:CE:6F:47:23:F1:25:44:86:37:AF:33:23:7B:BB:76:76:B3:5C
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/D6384A38B9F111EEA0D3B09D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.165.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:08:99:a3:a6:62:a7:da:7f:8f:4b:93:2d:d8:29:f7:b2:51:
c1:e8:00:5e:c7:e8:03:3d:54:5a:6d:be:c2:a7:4f:ae:4a:17:
24:33:26:8f:0d:6c:da:14:d3:1e:d2:5f:76:06:af:33:6c:fe:
f5:29:1a:ff:2b:22:38:35:18:e0:76:8d:3f:a6:f0:47:ee:6a:
03:40:64:43:8d:2a:62:7b:9f:91:d6:77:2b:36:89:8d:4a:ca:
53:bc:1c:35:62:1b:f2:42:14:33:ac:42:93:91:d4:05:b8:a6:
08:23:1c:66:26:86:b6:19:d4:99:d0:a2:90:75:ca:98:a9:98:
a3:11:e1:71:82:11:85:89:2d:d3:15:aa:22:db:63:0c:35:7e:
3c:e5:ed:fb:21:50:72:af:8f:97:57:e1:5b:62:56:5c:7a:6b:
bf:19:2d:2a:64:b3:9b:b0:3a:03:71:63:53:44:76:87:83:84:
d5:99:73:32:31:02:56:90:f3:62:3e:d5:45:54:4b:78:b4:d3:
3a:d8:7b:1f:53:61:bc:7b:53:24:47:f7:7b:7e:67:92:93:11:
ae:e3:0a:9a:df:15:a0:be:01:41:a9:a4:5a:80:da:68:fe:67:
97:9b:57:e9:52:46:8c:2b:f8:17:a5:1f:1a:25:de:58:ef:d7:
a9:33:02:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:17:33 2024 by rpki-client on console-ams.rpki-client.org