Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/E5232C00B9F311EEA3846BA1775412E6.roa
File: E5232C00B9F311EEA3846BA1775412E6.roa (raw, json)
Hash identifier: tYvZCHB5kIchIrDWxPeA7dOKAYndTeLjXNKqccEk5XA=
Subject key identifier: E9:1E:CC:0F:4A:EF:30:40:03:71:26:0D:18:D1:A3:01:60:76:04:DB
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 024F
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/E5232C00B9F311EEA3846BA1775412E6.roa
Signing time: Tue 23 Jan 2024 13:32:47 +0000
ROA not before: Tue 23 Jan 2024 13:32:43 +0000
ROA not after: Wed 22 Jan 2025 13:32:43 +0000
asID: 174
IP address blocks: 66.251.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 591 (0x24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jan 23 13:32:43 2024 GMT
Not After : Jan 22 13:32:43 2025 GMT
Subject: CN=65afbfff-4f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:9a:5f:8b:f3:a2:21:33:e3:59:25:79:71:
49:b4:0b:c3:24:e4:7e:83:01:b1:df:94:5c:88:f5:
38:c7:6b:14:84:75:1e:4e:07:a9:c5:73:08:c0:11:
c7:a6:a5:57:87:bb:e8:d5:2d:58:b9:18:25:0d:41:
3c:fe:e8:e2:0f:19:aa:2c:56:6a:87:9b:50:62:7f:
1f:e3:ef:5b:3e:ed:dd:50:24:11:e2:43:06:ed:7c:
13:06:db:51:b6:ec:9c:e7:34:fd:1e:e9:9b:73:7d:
af:ae:8d:a5:26:a2:27:52:70:f8:1c:0b:6f:4e:05:
f3:c1:36:ee:5b:ad:e3:5b:f9:c5:ec:e5:1c:02:8d:
80:04:d7:46:b8:19:d8:ff:78:36:57:a0:4f:9f:63:
91:4a:5b:19:16:99:ae:01:4f:5a:d0:e3:9e:07:e3:
ed:ef:a6:aa:27:cd:5c:a4:85:35:fa:1e:fb:49:fc:
c3:f3:08:8c:cd:83:58:56:aa:cc:3e:02:1b:fe:95:
3e:93:6e:1b:d5:7f:2d:92:5d:0e:34:4a:c1:db:aa:
9f:08:5e:9f:3d:ab:66:8b:25:0e:de:e4:da:c1:34:
92:43:cc:35:85:c2:0a:9c:a7:35:03:02:42:b1:c0:
75:ba:d0:07:b2:36:bb:dd:6b:18:57:80:f5:7f:05:
09:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1E:CC:0F:4A:EF:30:40:03:71:26:0D:18:D1:A3:01:60:76:04:DB
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/E5232C00B9F311EEA3846BA1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.181.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:bf:b0:7a:54:0f:9c:f7:1c:e2:3f:c5:40:53:92:bf:92:0a:
3a:4f:8c:ce:33:32:a3:39:6b:9a:12:64:6e:ab:19:e9:33:66:
20:5b:ac:ff:8d:c2:a5:2f:4f:59:73:31:ea:f0:26:f5:be:b3:
43:8e:3f:f1:b7:6f:74:f0:cc:fd:c8:9e:e3:56:3d:a2:8a:da:
47:43:65:2e:82:69:fa:26:44:13:87:f8:33:e6:b1:a3:0d:10:
28:21:55:5e:e8:c4:54:f6:14:08:fe:ee:e2:9b:56:40:a6:af:
59:73:70:31:5d:63:0f:f7:63:d7:8f:13:cc:f0:1d:fa:d2:64:
91:2d:4c:fe:89:02:1e:fb:d4:6b:b8:d2:0a:a0:48:3e:c5:37:
80:ff:e8:80:e1:ac:00:ee:ec:eb:fe:74:af:f3:97:bb:3d:af:
77:56:a7:f7:97:b0:fd:1e:de:96:93:d2:57:a5:4b:34:e8:71:
c7:06:ba:e3:9c:91:72:8d:37:20:56:a7:d2:dc:39:e4:5d:b4:
17:86:cc:e7:93:5c:ba:f3:33:72:66:90:db:9b:28:fe:30:42:
a6:83:68:5c:b7:ae:7c:53:57:24:73:b5:e7:e3:f1:6f:aa:f7:
65:8e:bf:71:05:d3:14:c4:38:98:4c:da:ca:46:cd:1e:9c:08:
2a:8b:5b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:17:33 2024 by rpki-client on console-ams.rpki-client.org