Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/3F2B1A20DD5F11EFB2C1057C762E951A.roa
File: 3F2B1A20DD5F11EFB2C1057C762E951A.roa (raw, json)
Hash identifier: hO+aJIyyhqIgJLgK4ZzK1pihDT7/x5+QrELOs3PeExg=
Subject key identifier: 3E:9E:37:9D:FD:5A:D2:E3:6F:92:E4:66:DC:AD:6B:26:B2:91:96:8B
Certificate issuer: /CN=F363DCF2AR/serialNumber=C4BBCDEF9DC7E68F9184C80C08718C206EDDF70B
Certificate serial: 16
Authority key identifier: C4:BB:CD:EF:9D:C7:E6:8F:91:84:C8:0C:08:71:8C:20:6E:DD:F7:0B
Authority info access: rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/3F2B1A20DD5F11EFB2C1057C762E951A.roa
Signing time: Tue 28 Jan 2025 10:04:22 +0000
ROA not before: Tue 28 Jan 2025 10:04:19 +0000
ROA not after: Wed 31 Jan 2035 10:04:19 +0000
asID: 30992
IP address blocks: 129.0.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.crl
rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.mft
rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 14 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363DCF2AR, serialNumber=C4BBCDEF9DC7E68F9184C80C08718C206EDDF70B
Validity
Not Before: Jan 28 10:04:19 2025 GMT
Not After : Jan 31 10:04:19 2035 GMT
Subject: CN=6798aba6-db1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:60:fa:ac:ff:ed:6e:41:1a:d9:a9:bb:19:7f:
a3:de:83:86:c7:b0:3d:a7:d2:36:6c:5f:08:ad:e6:
02:7f:a3:ea:b7:f1:89:c3:44:c0:6e:c7:37:c9:b4:
be:e4:2d:23:5b:cd:aa:62:fb:07:1d:38:ec:5f:48:
89:07:0f:3f:7e:00:da:f1:99:88:6d:30:1b:d5:93:
34:b5:5f:77:d1:30:3c:2d:01:74:d3:42:68:a7:43:
57:1c:02:82:13:98:a9:c4:e5:83:ce:c9:69:ef:14:
c6:2a:22:8c:71:81:06:fa:f0:2b:7a:e1:5d:92:92:
25:b5:94:34:37:b4:ce:ef:5d:a2:a3:f0:bf:a4:67:
5c:50:a1:17:1a:1f:06:43:92:32:6b:f2:97:05:43:
24:cd:54:c5:3b:96:c0:6d:74:ae:57:f5:9b:2f:fc:
b7:9c:8e:82:74:28:ee:f4:e4:3e:3b:ae:16:ec:6c:
8e:f9:1f:20:06:7e:41:51:2e:31:7b:8d:57:f0:38:
2e:c6:15:b4:26:63:da:96:ea:0a:c1:29:7f:bc:86:
16:30:78:d7:1d:10:04:c5:f8:0f:83:10:3d:94:a9:
b0:af:3b:5d:2e:35:e6:7f:f6:cd:87:53:ac:08:dd:
ca:0f:ca:bd:c5:5a:ce:71:27:56:3f:07:34:dd:55:
36:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9E:37:9D:FD:5A:D2:E3:6F:92:E4:66:DC:AD:6B:26:B2:91:96:8B
X509v3 Authority Key Identifier:
keyid:C4:BB:CD:EF:9D:C7:E6:8F:91:84:C8:0C:08:71:8C:20:6E:DD:F7:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/3F2B1A20DD5F11EFB2C1057C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
129.0.106.0/24
Signature Algorithm: sha256WithRSAEncryption
81:6d:63:01:d8:64:b7:c7:9a:95:32:6a:77:80:24:68:6f:ad:
f0:fa:2e:f6:14:99:76:d4:6b:10:6f:79:55:e2:5c:f8:a5:7f:
c9:fb:70:3c:c2:f8:6a:55:3c:e9:4a:8d:98:16:a1:64:fc:ae:
39:50:66:1d:a1:0e:b8:a3:83:52:fa:95:f3:04:24:bf:25:50:
a4:81:61:97:33:4a:21:77:2b:9c:cc:11:f2:ea:c5:c5:c4:f8:
2f:45:1d:d2:62:e3:72:fa:33:f2:95:c9:70:9d:88:04:af:04:
ba:66:6c:c3:b4:62:a1:6c:95:5f:07:f4:ec:fd:ab:06:1e:8d:
73:7f:1b:64:78:93:27:30:bd:e7:62:64:2e:20:c6:d0:25:72:
4f:24:74:c7:ad:dd:a5:89:32:06:42:bb:58:86:12:05:8c:2e:
dd:81:8e:ad:76:77:e0:3b:5c:be:36:2c:55:8a:58:0f:08:b9:
d7:ae:fd:20:44:9d:a0:bf:15:35:09:f6:42:bb:f7:b6:a1:a3:
ab:fe:93:6a:f4:59:95:73:af:31:bb:36:5c:a2:11:19:5c:9e:
97:34:f5:61:df:bd:93:96:44:9a:a3:bd:09:47:8c:6a:02:e8:
99:57:b6:0f:7c:43:1c:3b:af:b1:59:9a:bd:f2:7d:6c:1c:e1:
d6:5c:d4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:45:32 2025 by rpki-client