Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/30FBD51003CB11F080E75D59762E951A.roa
File: 30FBD51003CB11F080E75D59762E951A.roa (raw, json)
Hash identifier: lOeV3lJgG8Fz4OjZHqtra4TR53DUrRbjgcwmN9dCgnc=
Subject key identifier: FB:A9:32:75:A1:F9:24:10:3B:C0:EF:C8:7D:71:05:F6:89:17:F1:2B
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0C1F
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/30FBD51003CB11F080E75D59762E951A.roa
Signing time: Tue 18 Mar 2025 07:32:48 +0000
ROA not before: Tue 18 Mar 2025 07:32:45 +0000
ROA not after: Wed 07 Mar 2035 07:32:45 +0000
asID: 36916
IP address blocks: 192.142.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3103 (0xc1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 18 07:32:45 2025 GMT
Not After : Mar 7 07:32:45 2035 GMT
Subject: CN=67d921a0-8a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ae:4c:ec:03:e2:dd:c2:91:83:11:e0:35:fd:
81:dc:32:e0:0d:6a:3b:14:46:98:c9:d9:09:9e:9e:
40:7e:c8:d6:7a:3c:e5:e7:2b:eb:0d:4a:2f:29:0b:
34:43:27:60:58:a6:6d:90:1f:46:c3:f9:06:4d:5e:
45:d8:9d:86:a5:66:0a:23:d1:9b:c2:b6:ca:d0:fb:
b8:a0:e2:0e:da:12:96:2d:b4:7f:f5:bf:5e:17:7f:
08:e9:83:b9:f6:8a:14:ca:39:c4:a2:62:f2:46:a0:
bf:08:75:e3:9c:7a:de:54:03:5c:f7:d6:da:cb:17:
6c:9d:69:51:30:13:a7:98:27:97:8f:c1:eb:bc:d0:
43:e0:4a:a2:98:7b:06:e8:34:e0:eb:d5:2b:06:81:
3e:6b:a1:9c:e1:36:9b:f0:13:d9:d6:08:5f:6e:8b:
f3:6f:e8:e2:ae:1a:8f:1b:04:14:5b:75:a4:5c:16:
bf:4d:3c:41:58:44:0b:36:ff:be:e5:19:b4:0f:13:
bc:a7:85:52:40:20:c3:34:8d:a0:1a:c7:bf:71:e6:
ed:9b:98:6b:d3:0d:b3:13:5f:15:1c:ec:87:ee:9a:
23:75:2a:3b:ed:15:0f:5e:c8:57:3a:35:2f:e4:8a:
32:1c:a0:f5:13:1d:ee:52:85:38:71:71:a1:f3:3d:
3e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A9:32:75:A1:F9:24:10:3B:C0:EF:C8:7D:71:05:F6:89:17:F1:2B
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/30FBD51003CB11F080E75D59762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.140.0/24
Signature Algorithm: sha256WithRSAEncryption
29:0c:ea:49:10:bb:ed:ca:56:ca:d5:1e:e8:7a:3f:17:36:f5:
0d:4c:7c:aa:ca:fe:c9:60:48:9e:5e:28:9c:67:3c:b9:79:fa:
09:35:97:df:59:e7:f6:78:bf:b2:12:76:d6:5a:2e:95:03:6a:
64:23:38:55:b2:8c:ce:68:1b:02:a6:11:c8:56:e3:3a:12:e4:
9d:95:ac:e7:11:d3:8c:ef:63:57:86:87:87:2c:7e:bd:86:7d:
8e:bc:d2:0f:49:1e:b8:2b:fe:6b:76:62:6a:c3:fa:72:e2:c8:
5b:a4:b1:9a:e9:ab:a7:95:8b:a9:bd:e2:f6:0a:8d:4c:d2:b3:
2d:0e:9e:7c:09:a4:12:cb:86:d1:f4:e8:53:5a:82:26:e1:8b:
86:35:39:cb:3d:d9:8b:7c:3e:09:01:de:65:ca:00:a9:4b:bc:
d2:e1:10:b4:ce:1c:1e:5c:e7:49:2e:52:af:28:1f:68:3e:3e:
ac:47:3d:7e:9b:8e:ff:a5:26:fe:bf:3b:1a:32:40:48:46:2d:
3d:56:0e:ca:82:ab:3a:b8:32:a4:68:46:68:65:e0:86:3b:07:
e4:8d:c5:3c:b3:1a:9d:ee:a0:c9:57:ca:65:dc:45:ed:f9:e9:
07:63:cf:20:2d:56:97:76:88:db:5a:cc:a5:a0:24:80:06:ca:
20:1a:15:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:30:31 2025 by rpki-client