Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/DBE1501EB9F211EEB2327B9F775412E6.roa
File: DBE1501EB9F211EEB2327B9F775412E6.roa (raw, json)
Hash identifier: 2bZfrcHRwsE7/IqPKkUOlUdPy5oFY+a73vOwyXJ6X/U=
Subject key identifier: 1C:9A:12:FD:23:97:2B:92:FC:C9:FD:13:AA:73:78:1F:CC:C3:C2:D1
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0243
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/DBE1501EB9F211EEB2327B9F775412E6.roa
Signing time: Tue 23 Jan 2024 13:25:22 +0000
ROA not before: Tue 23 Jan 2024 13:25:18 +0000
ROA not after: Wed 22 Jan 2025 13:25:18 +0000
asID: 174
IP address blocks: 66.251.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 579 (0x243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jan 23 13:25:18 2024 GMT
Not After : Jan 22 13:25:18 2025 GMT
Subject: CN=65afbe42-1057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ed:cb:0b:fa:fc:b4:73:4d:b5:8e:b1:2e:01:
e2:b4:d4:b0:12:fd:ce:1e:fe:9c:19:5d:eb:29:cc:
e7:0b:7d:d9:8e:d1:f0:9c:0e:32:cc:cc:6c:f5:3d:
9c:a9:9f:18:f3:9c:78:47:4e:01:53:dd:7c:06:21:
38:8f:19:dc:8a:56:66:da:f3:fa:31:68:af:f6:35:
fb:a4:42:1d:f9:68:6a:be:97:ee:fb:d6:c3:d7:58:
f9:5b:bc:2e:87:5c:19:e0:3b:54:7a:47:19:d6:03:
90:c5:71:45:93:35:8a:34:57:c7:aa:a8:d8:df:58:
99:91:28:a3:72:a5:d2:bd:65:a2:7c:1f:2e:e8:06:
ff:31:91:26:a4:36:6d:46:4d:fa:0c:d4:83:af:8b:
79:5e:be:a5:72:a3:ce:4c:c7:fe:77:18:3a:53:ad:
18:13:e1:4f:bf:50:65:c2:72:23:1e:eb:89:a9:7a:
33:b3:3f:cd:3a:a5:2c:3c:9d:f7:1b:ca:7d:d8:20:
6c:1f:a7:29:32:25:54:19:cd:ca:be:e1:bb:63:ae:
7c:cd:e5:0d:70:23:5d:86:ab:45:45:ea:c8:78:55:
19:b8:c3:2c:a9:58:71:fc:a8:1e:5b:20:e4:10:8f:
df:5c:cb:a3:74:d5:2c:ab:00:1a:76:51:00:42:0d:
44:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9A:12:FD:23:97:2B:92:FC:C9:FD:13:AA:73:78:1F:CC:C3:C2:D1
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/DBE1501EB9F211EEB2327B9F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.174.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:9e:0b:72:f2:8d:02:66:e4:c9:34:fd:0c:1a:73:e3:9b:97:
a5:cd:21:66:8f:c1:19:b7:25:cb:42:05:34:ca:36:45:d9:dd:
ab:0f:5c:f9:93:48:01:7a:23:6c:85:78:18:97:20:12:74:b2:
4d:24:68:48:fb:a6:94:ee:ca:a4:9c:ca:83:7a:2d:78:44:94:
7d:f1:7f:47:4c:2d:9a:b3:9d:b3:4a:74:c3:11:55:fb:69:1b:
59:4e:41:4e:19:1c:a0:dd:36:b4:c4:ca:87:d0:25:f4:9e:b3:
d7:a9:9e:80:ec:c2:8a:86:58:ec:39:65:ac:0c:07:4c:79:d2:
3a:e3:2f:35:d6:a9:41:f2:9e:97:8a:7b:de:ec:e2:60:54:79:
d9:e1:56:91:ef:7b:62:4d:07:a0:4b:6c:6b:0d:9e:35:27:16:
03:8f:a3:b2:a1:73:09:28:78:a1:ff:87:c1:ee:cb:9a:63:24:
65:d5:92:ba:a9:08:98:e3:85:82:4a:4f:e4:91:a5:1f:13:06:
d0:6b:ff:cd:e9:67:aa:d1:81:96:18:32:41:9b:0b:7a:eb:02:
97:1d:a6:c6:e6:81:00:31:fd:a9:4a:22:9a:52:ab:56:2f:4b:
39:bc:eb:13:42:0d:cc:75:fc:91:ca:66:51:39:17:43:07:e3:
dd:d3:be:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 04:29:36 2024 by rpki-client on console-fra.rpki-client.org