Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/DB2AF70EB9F411EEAD2BF5A2775412E6.roa
File: DB2AF70EB9F411EEAD2BF5A2775412E6.roa (raw, json)
Hash identifier: LoFvSZOn6q4cEPFsErFYVSf+N3L+uhenKf2UBUIza0I=
Subject key identifier: A5:97:85:17:BC:13:23:7A:C3:24:72:F2:87:36:54:86:1C:32:21:77
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0257
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/DB2AF70EB9F411EEAD2BF5A2775412E6.roa
Signing time: Tue 23 Jan 2024 13:39:40 +0000
ROA not before: Tue 23 Jan 2024 13:39:36 +0000
ROA not after: Wed 22 Jan 2025 13:39:36 +0000
asID: 174
IP address blocks: 66.251.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 599 (0x257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jan 23 13:39:36 2024 GMT
Not After : Jan 22 13:39:36 2025 GMT
Subject: CN=65afc19b-598e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c9:88:5d:a0:11:7d:2f:6b:3e:6e:a3:b9:b9:
e0:da:cf:f8:6b:55:27:2b:70:2f:bb:ce:8e:d1:cc:
71:5c:74:22:96:56:2e:ab:81:8c:3f:a0:3f:10:17:
ed:fb:39:3b:9a:ac:96:f2:75:a5:c3:27:c2:cc:fe:
1c:fa:ff:3c:ba:ef:07:86:e7:d7:81:68:06:88:f4:
7b:96:36:49:1e:fd:cb:2b:f0:b8:c7:3a:35:27:ee:
e2:96:5e:d0:84:a6:46:b0:8a:02:05:c8:0c:a5:cf:
cd:ad:84:87:64:3d:a9:c0:4f:0a:6d:59:f3:c0:aa:
15:e7:35:46:51:92:7d:17:9c:ed:d7:99:cf:91:0b:
c1:a9:f6:5d:fa:b6:05:8c:51:f3:e5:22:0f:00:9b:
10:f6:5c:4b:3c:2e:06:9c:09:37:56:62:5f:5e:40:
d8:53:3c:68:b2:1c:01:b4:eb:1b:59:68:0a:dc:6d:
ec:b9:82:56:87:a6:c2:1b:3e:81:8d:b8:df:f9:9a:
9e:3a:66:8c:ce:a0:ec:60:13:3f:6c:10:1b:98:a5:
cc:28:2d:0d:4b:11:2c:5f:2c:e1:a8:c6:fc:be:3f:
51:cd:0c:2c:b2:73:b1:95:32:1a:53:34:e3:bb:63:
0d:eb:7f:ce:2e:5f:b7:0a:9a:48:93:63:cd:7b:20:
f1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:97:85:17:BC:13:23:7A:C3:24:72:F2:87:36:54:86:1C:32:21:77
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/DB2AF70EB9F411EEAD2BF5A2775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.186.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:b4:01:8a:5e:29:9d:c4:63:35:3a:56:6f:d6:f0:e3:e5:dd:
2b:93:01:a1:3a:8b:60:0f:f8:7b:f2:74:94:eb:ae:f9:40:c3:
96:dc:4c:7e:3b:d0:10:9a:63:17:ec:f2:64:58:e9:41:d0:c2:
8c:7e:95:de:bd:9a:1d:de:47:8e:c5:40:d0:1c:9e:3b:6a:cf:
70:86:e1:d7:9b:c3:1a:98:97:95:2b:41:52:87:20:df:e1:5a:
17:1b:ad:8b:e5:36:61:95:41:e8:80:d2:86:25:5a:fe:96:e6:
ef:3b:14:47:ef:e5:e1:8b:22:aa:dd:f2:99:28:7a:c8:f1:ff:
e2:fa:e0:74:62:07:ba:97:3a:e1:74:cf:33:a5:63:c8:29:49:
f5:db:86:22:fc:90:a9:08:7a:5a:95:49:4b:bc:b8:54:02:a9:
54:0d:66:4a:3b:e4:4b:08:97:54:9a:e9:c8:ec:0e:b3:88:c7:
15:55:c7:3d:5a:41:52:1f:85:e8:d4:fd:bf:03:69:ea:d8:65:
f9:9e:f4:b2:19:a7:5f:c1:60:70:0e:ca:ba:70:16:c3:ee:29:
a5:10:35:37:15:61:35:3f:b4:8d:1f:5e:1d:4b:e4:0e:f8:40:
58:95:63:d4:a9:0f:75:70:03:b7:ca:3f:98:91:ac:88:58:f9:
a3:1c:67:56
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTlGOUNBUjExMC8GA1UEBRMoMDlGQjMxMzZFQ0Q1RTNEN0NGMDBCMzJDMTIxRjEy
RThBRkQwQTYwMTAeFw0yNDAxMjMxMzM5MzZaFw0yNTAxMjIxMzM5MzZaMBgxFjAU
BgNVBAMTDTY1YWZjMTliLTU5OGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDayYhdoBF9L2s+bqO5ueDaz/hrVScrcC+7zo7RzHFcdCKWVi6rgYw/oD8Q
F+37OTuarJbydaXDJ8LM/hz6/zy67weG59eBaAaI9HuWNkke/csr8LjHOjUn7uKW
XtCEpkawigIFyAylz82thIdkPanATwptWfPAqhXnNUZRkn0XnO3Xmc+RC8Gp9l36
tgWMUfPlIg8AmxD2XEs8LgacCTdWYl9eQNhTPGiyHAG06xtZaArcbey5glaHpsIb
PoGNuN/5mp46ZozOoOxgEz9sEBuYpcwoLQ1LESxfLOGoxvy+P1HNDCyyc7GVMhpT
NOO7Yw3rf84uX7cKmkiTY817IPGfAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUpZeF
F7wTI3rDJHLyhzZUhhwyIXcwHwYDVR0jBBgwFoAUCfsxNuzV49fPALMsEh8S6K/Q
pgEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIyNDY4L0Nmc3hO
dXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0Nmc3hOdXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIy
NDY4L0RCMkFGNzBFQjlGNDExRUVBRDJCRjVBMjc3NTQxMkU2LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABC+7owDQYJKoZIhvcNAQELBQAD
ggEBAGq0AYpeKZ3EYzU6Vm/W8OPl3SuTAaE6i2AP+HvydJTrrvlAw5bcTH470BCa
Yxfs8mRY6UHQwox+ld69mh3eR47FQNAcnjtqz3CG4debwxqYl5UrQVKHIN/hWhcb
rYvlNmGVQeiA0oYlWv6W5u87FEfv5eGLIqrd8pkoesjx/+L64HRiB7qXOuF0zzOl
Y8gpSfXbhiL8kKkIelqVSUu8uFQCqVQNZko75EsIl1Sa6cjsDrOIxxVVxz1aQVIf
hejU/b8DaerYZfme9LIZp1/BYHAOyrpwFsPuKaUQNTcVYTU/tI0fXh1L5A74QFiV
Y9SpD3VwA7fKP5iRrIhY+aMcZ1Y=
-----END CERTIFICATE-----
Generated at Sun Nov 24 04:29:36 2024 by rpki-client on console-fra.rpki-client.org