Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2AF1F03A323511F097C669E2DAE4EC9C.roa
File: 2AF1F03A323511F097C669E2DAE4EC9C.roa (raw, json)
Hash identifier: 1UgdGXxdr9FKy3YJn+7GCkYSMtsG3OH6+m7j+Sr9jQg=
Subject key identifier: 50:1B:AA:52:09:D8:D1:BF:09:7A:EB:3E:BF:1C:E3:61:53:B9:A5:92
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0CBF
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2AF1F03A323511F097C669E2DAE4EC9C.roa
Signing time: Fri 16 May 2025 09:07:18 +0000
ROA not before: Fri 16 May 2025 09:07:14 +0000
ROA not after: Wed 16 May 2035 09:07:14 +0000
asID: 36916
IP address blocks: 192.142.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3263 (0xcbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: May 16 09:07:14 2025 GMT
Not After : May 16 09:07:14 2035 GMT
Subject: CN=68270046-c04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:23:43:d8:99:e3:87:94:3f:d6:0a:2c:cf:
91:34:d9:f9:e3:0d:fe:c2:bc:5c:0b:01:5e:05:5b:
44:a2:76:e5:95:9f:2b:e8:26:bc:5e:f1:de:fa:ef:
c4:30:7a:f4:a3:8d:ca:12:d3:4f:f1:3a:66:dd:77:
9a:a3:d1:45:4c:e8:f1:b5:a9:75:95:ed:ca:2d:25:
26:93:e5:53:fa:f5:83:5e:cc:fa:29:db:c7:31:b9:
b5:0c:04:a7:5e:68:56:e7:4b:0d:48:d2:f8:0e:81:
cd:92:f3:42:a6:07:35:1e:4f:34:5d:f3:71:84:5f:
df:d9:d0:11:1a:57:1c:ca:83:64:19:3b:e4:42:06:
c7:bf:0e:56:35:37:7c:03:e0:16:99:72:77:c4:5d:
ef:a1:4b:07:53:d3:1e:ee:c3:e9:e9:d4:7d:5e:34:
36:93:94:6d:7a:53:4b:83:22:b3:8a:43:c1:0b:b7:
97:41:de:0d:2c:b4:0e:ef:d9:ff:34:b2:ed:5f:e7:
2f:b5:99:ae:da:fa:c7:86:b9:73:05:b5:6a:44:57:
73:da:d3:a8:f0:56:b6:df:6f:53:71:61:cf:47:2c:
54:db:93:65:22:28:7b:21:30:d0:a7:e9:fe:ce:22:
ea:06:19:2c:82:1a:24:72:e3:d8:92:fb:90:78:d5:
53:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1B:AA:52:09:D8:D1:BF:09:7A:EB:3E:BF:1C:E3:61:53:B9:A5:92
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2AF1F03A323511F097C669E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.160.0/20
Signature Algorithm: sha256WithRSAEncryption
3f:4d:4b:d3:23:23:d0:5d:bf:dc:0b:5c:ed:fc:e1:3a:34:79:
e7:2f:56:37:b0:1b:52:21:2b:01:80:4f:d2:33:61:2d:0b:a8:
1e:34:ae:96:be:84:37:d9:51:62:44:9e:06:f2:67:c1:02:95:
4a:00:83:a2:ae:e1:46:ce:89:d4:22:75:94:30:95:28:4a:34:
86:5f:cf:f3:62:86:ba:9d:ee:55:45:79:36:c8:54:31:32:43:
62:b1:fc:7b:1e:01:56:cb:1d:2f:3c:c9:4f:a1:07:64:70:0b:
f4:32:62:8a:6e:c0:35:8e:4d:e5:88:5c:fd:a4:ea:d1:ba:62:
ea:08:59:33:f2:5d:15:d2:89:13:3f:af:5e:35:c9:a7:2b:82:
5c:11:1e:8d:70:a3:83:51:eb:45:d4:ae:2b:c3:65:b3:a3:5e:
71:bf:73:59:b3:f1:58:69:4c:25:77:50:5f:18:d5:85:ea:60:
5c:92:4d:22:ac:8e:7e:b2:96:99:47:03:4f:a8:6a:7c:04:48:
46:22:75:63:5e:fe:b5:81:58:1b:54:c8:9f:06:a6:b8:05:f3:
d0:81:8c:49:66:71:f6:b9:8c:34:8d:46:cd:28:3b:9a:23:b0:
2e:9c:1c:57:e9:1c:9e:70:ed:60:9e:d0:8f:1e:d1:0f:94:f6:
d3:8a:e2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:27:36 2025 by rpki-client