Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/FE65B0E2B9F411EE903F40A3775412E6.roa
File: FE65B0E2B9F411EE903F40A3775412E6.roa (raw, json)
Hash identifier: +UhmwNf1El7lNilUD6DrvAWlVu3DWjach/2QiKH2DdM=
Subject key identifier: 70:2A:12:45:8F:2B:A8:A8:C4:AD:54:6F:EA:1A:7B:A6:E7:83:7D:7F
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0259
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/FE65B0E2B9F411EE903F40A3775412E6.roa
Signing time: Tue 23 Jan 2024 13:40:39 +0000
ROA not before: Tue 23 Jan 2024 13:40:35 +0000
ROA not after: Wed 22 Jan 2025 13:40:35 +0000
asID: 174
IP address blocks: 66.251.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 30 Apr 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 601 (0x259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jan 23 13:40:35 2024 GMT
Not After : Jan 22 13:40:35 2025 GMT
Subject: CN=65afc1d7-686e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b1:ed:a0:df:56:40:a1:a6:f6:e6:cf:5d:ca:
03:ac:e1:11:bb:48:64:01:38:4a:83:12:76:29:83:
fa:eb:df:e9:4b:b8:ab:b4:67:78:69:8d:16:73:ce:
38:17:c1:c1:ae:c8:47:17:a9:5c:51:88:ab:93:56:
47:cd:42:bf:19:6f:a0:52:b9:45:bd:8e:8a:c4:d3:
50:5e:1b:24:6a:60:24:26:55:ef:85:56:be:30:26:
d5:00:1d:c6:ca:7e:20:51:c6:52:e5:02:5e:5b:bf:
44:1c:bd:e4:f8:db:1f:bb:63:eb:e4:d8:d8:65:05:
ba:50:3d:91:e6:58:ad:97:48:a8:e5:69:5b:f8:85:
97:35:50:4f:40:6c:f6:76:ba:83:75:c9:d9:7b:4e:
79:ec:7f:aa:13:92:2d:ad:c2:77:ba:56:61:cd:b0:
68:02:f1:cd:04:a5:f7:d4:4a:f9:4d:31:bf:71:c6:
5b:63:7b:84:5d:0f:2c:a6:53:73:d6:08:1e:fa:7b:
61:c6:af:88:ce:dd:1c:72:bd:26:b0:d1:ec:82:27:
0d:66:c6:29:22:6b:d1:8a:57:c3:a9:c0:9e:99:4d:
0f:20:6d:45:69:fa:94:2a:0e:36:89:9c:ff:0c:3b:
ff:85:89:13:12:b4:b2:b5:1a:0f:c8:ff:09:db:9d:
05:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2A:12:45:8F:2B:A8:A8:C4:AD:54:6F:EA:1A:7B:A6:E7:83:7D:7F
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/FE65B0E2B9F411EE903F40A3775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.187.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:42:1d:1f:00:77:4e:5d:92:26:1c:ea:2a:8f:5b:17:6f:f6:
da:90:cc:7e:8c:6b:37:2b:50:30:30:74:8e:ef:5a:56:ae:9a:
c5:5e:23:80:ac:75:1f:f4:88:ef:ac:8b:a7:c6:2f:96:9a:ac:
85:b6:e4:06:82:1d:58:e3:1c:ef:e9:68:13:97:0f:c9:03:8d:
62:13:d4:7f:a6:a5:0a:a4:61:86:de:ed:d7:db:7a:4a:84:2a:
8c:ca:a6:8c:97:92:d4:a8:f0:da:00:89:a8:69:7d:de:66:51:
a8:4a:a9:fe:bd:75:e3:e1:32:2a:ff:01:cd:d8:5d:ce:0a:7e:
2c:9a:8d:67:83:cf:89:0d:20:69:8e:3b:c3:52:83:d3:f4:49:
14:54:98:53:0c:c8:29:9e:28:4f:02:c4:90:b2:33:1b:d1:25:
04:d8:81:20:1e:00:3f:9a:17:ed:03:91:e9:cc:56:09:14:92:
7f:12:3d:59:d7:03:d3:dc:cf:f6:7a:81:b3:08:ff:29:5e:65:
c1:9d:55:82:6e:4d:1a:37:8a:cd:e2:d7:69:aa:8f:e0:d5:97:
0c:25:bd:f4:8a:8e:db:a3:05:75:d7:27:87:d5:67:3d:75:e9:
3f:27:d5:69:c9:83:13:5b:f0:6b:69:f9:da:00:d4:86:c8:1e:
c6:1d:8a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:10:31 2024 by rpki-client on console-ams.rpki-client.org