Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4B3A0102323511F086FE7DE2DAE4EC9C.roa
File: 4B3A0102323511F086FE7DE2DAE4EC9C.roa (raw, json)
Hash identifier: SKdPDWg4oEo0tR/jj0zXf+lIA4zF36yRcgQn8eBFO1U=
Subject key identifier: 0E:56:D9:FF:15:89:C3:FB:69:BE:13:66:0C:1D:F4:07:97:DE:E2:E6
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0CC1
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4B3A0102323511F086FE7DE2DAE4EC9C.roa
Signing time: Fri 16 May 2025 09:08:12 +0000
ROA not before: Fri 16 May 2025 09:08:09 +0000
ROA not after: Wed 16 May 2035 09:08:09 +0000
asID: 36916
IP address blocks: 192.142.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3265 (0xcc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: May 16 09:08:09 2025 GMT
Not After : May 16 09:08:09 2035 GMT
Subject: CN=6827007c-8f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:1a:11:bb:04:88:0d:28:9a:78:1a:08:a1:
b1:75:0f:05:1a:34:4b:9f:42:01:8c:ed:2c:d8:b1:
c0:f7:9f:18:d6:05:61:3d:6a:41:cf:a3:f2:59:2b:
ba:23:26:f4:55:0f:7e:da:32:b6:65:49:72:1a:94:
50:34:be:17:37:02:cb:e6:4b:25:47:d6:66:25:33:
16:6d:d2:cf:48:26:6e:02:bf:62:0f:84:88:64:1f:
00:4d:a4:14:47:89:a4:f1:67:c9:fe:2f:22:44:0c:
87:aa:e1:2d:d3:2e:74:aa:10:67:2e:58:08:5a:23:
48:78:c9:bc:3f:79:57:71:ae:31:d0:e6:39:24:bc:
a2:3e:31:7a:9a:37:e4:aa:c8:32:c5:5f:62:34:ad:
88:00:eb:2d:75:47:f3:0b:25:21:5c:f0:ba:45:9e:
ed:60:1c:bc:87:b6:95:34:ef:b8:24:47:1f:4c:60:
96:36:f6:b5:a0:4f:6f:0e:86:2b:96:6e:a5:61:a3:
d1:9c:2f:5f:1e:43:bd:b2:62:62:d2:ba:c5:13:6c:
9f:3b:aa:70:11:e1:5d:a5:27:e4:1c:21:3e:a8:83:
e6:e9:d8:42:87:68:c8:28:a4:49:d5:81:7f:ab:64:
c6:62:f0:f9:37:3d:7d:db:1d:e2:ea:d1:76:47:be:
83:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:56:D9:FF:15:89:C3:FB:69:BE:13:66:0C:1D:F4:07:97:DE:E2:E6
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4B3A0102323511F086FE7DE2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.176.0/20
Signature Algorithm: sha256WithRSAEncryption
bf:87:c3:a7:2e:28:30:b7:15:85:24:3b:67:15:47:79:55:95:
47:ef:86:fc:33:5e:96:e1:b6:68:d5:e4:7d:9f:d2:58:ad:79:
b1:54:21:01:a9:03:da:56:2c:75:ca:6c:cf:c6:76:65:13:ef:
9d:b7:50:3d:3f:db:32:c7:22:95:f4:4c:43:a1:91:7b:4e:4a:
53:30:e0:24:ea:ff:bd:81:f5:76:73:56:2c:6c:cf:2b:cf:90:
bc:ca:ed:8d:41:26:4c:87:c5:5a:19:2b:0d:ec:78:26:67:0b:
bc:bc:68:20:1e:65:20:f9:42:a5:c0:b5:ab:2b:fe:4d:99:20:
0a:3e:4c:68:cd:06:e7:f5:6e:de:e0:74:ef:90:b9:bb:35:10:
b2:53:87:02:3b:13:c1:82:cd:9f:0d:a4:c9:4e:36:cd:00:67:
e7:bb:93:52:6c:61:ae:be:ae:3e:50:5f:4f:4b:86:3b:60:17:
ed:47:17:06:ca:ca:a5:ad:17:b2:53:12:69:63:90:e9:84:78:
a5:8f:75:5c:3f:64:4c:20:10:a9:17:ee:26:2f:67:a3:f0:7a:
22:0a:9c:07:83:06:6c:ec:bc:0e:44:37:e4:54:78:0f:05:ad:
b0:d4:1f:78:ff:ee:2e:79:ab:83:c8:b7:0a:a9:af:7b:30:1a:
3b:cb:f2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:46:15 2025 by rpki-client