Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/658BB682B18811EF929DB27B762E951A.roa
File: 658BB682B18811EF929DB27B762E951A.roa (raw, json)
Hash identifier: VsIuujH08Cj3vc+YsNd3m0RXQi6/d8CRknmGReOkmjI=
Subject key identifier: 3D:55:1E:7B:74:CF:35:52:5A:8B:9F:D7:38:E4:B7:C4:2B:3D:11:60
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0B4D
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/658BB682B18811EF929DB27B762E951A.roa
Signing time: Tue 03 Dec 2024 15:08:05 +0000
ROA not before: Tue 03 Dec 2024 15:08:01 +0000
ROA not after: Tue 05 Dec 2034 15:08:01 +0000
asID: 15020
IP address blocks: 192.142.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2893 (0xb4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Dec 3 15:08:01 2024 GMT
Not After : Dec 5 15:08:01 2034 GMT
Subject: CN=674f1ed5-8fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cc:3e:89:1b:69:02:46:a8:27:0c:30:c7:be:
9d:6d:ed:f0:eb:bc:7e:67:43:76:d1:73:1e:a4:b0:
15:d8:71:79:f0:75:62:e7:0e:60:fe:e7:bb:fa:43:
8a:6a:56:90:a5:01:6f:43:d7:37:10:f8:4d:fe:7e:
ec:df:a0:e5:92:04:04:8b:64:e0:5f:f1:e9:42:26:
92:ad:a8:bb:01:db:0c:c8:8d:9a:6d:8d:4a:7f:91:
13:8c:a5:96:66:19:35:1f:d0:0a:4a:b6:6d:c7:a8:
5a:a2:6f:56:61:19:b9:9f:f1:d6:82:a0:11:e3:4c:
81:c3:be:12:fb:bd:af:96:cc:77:b9:34:77:90:33:
88:23:d0:92:04:8e:4d:dd:69:e0:51:79:4c:ba:ee:
7b:01:02:02:4e:e5:71:a9:17:15:5f:ee:1e:e3:31:
67:b3:88:6f:d1:0b:52:3e:8d:db:66:42:78:1c:63:
ec:d9:6f:13:56:e3:d2:c3:9b:94:4b:65:75:49:52:
f6:fa:44:90:8d:b8:a3:58:51:57:d1:dd:ce:52:2d:
01:25:49:3e:41:b1:16:01:7e:c7:41:a9:57:35:2f:
11:8f:3d:b1:6d:1d:9e:3a:a1:3f:0a:89:a3:c9:44:
a8:fd:ed:2c:0d:10:f8:1a:a5:0b:6d:8f:62:57:8b:
1b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:55:1E:7B:74:CF:35:52:5A:8B:9F:D7:38:E4:B7:C4:2B:3D:11:60
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/658BB682B18811EF929DB27B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.16.0/24
Signature Algorithm: sha256WithRSAEncryption
38:d8:af:c4:6f:3f:3b:b9:1a:54:d3:7f:15:3e:fd:1d:ba:9b:
cb:75:0f:2e:48:b6:ab:e8:82:a3:c0:5f:2a:1d:6b:5b:67:e3:
7d:9f:6e:ad:a8:60:39:f6:b3:a9:3e:e9:2c:64:29:ab:b4:7b:
08:06:86:b9:f9:f1:2c:06:ca:0b:4f:1d:5e:c0:40:b5:82:ee:
71:ca:2c:3d:5b:49:33:ef:3d:1c:dc:d3:96:0e:8c:ef:60:05:
7c:98:5e:be:2f:39:a2:18:23:4c:4f:f4:37:e9:80:5e:ce:f8:
da:22:7f:36:67:ba:7c:1e:2c:e2:f7:01:33:96:18:43:59:e6:
82:16:6e:5b:4f:a4:1c:fb:0c:29:5e:b8:b7:dc:70:e1:a4:6c:
5d:61:28:5e:30:85:d6:ba:46:b1:8f:9e:0a:53:e4:35:2c:a9:
3a:7e:32:89:16:f8:aa:bf:21:a5:f7:92:e1:ca:e1:e0:bf:29:
4d:a6:19:f1:92:25:20:fc:2a:42:81:81:63:06:59:b1:63:14:
41:c5:93:de:ef:43:2e:ed:67:df:10:27:c2:57:51:93:0e:c8:
fc:b6:e7:85:87:b4:83:2b:c1:b0:84:27:97:ea:7e:a6:30:a3:
71:0e:9a:ba:a8:60:22:cd:43:ac:9d:06:b5:04:0d:8f:52:c9:
cf:75:03:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:00 2025 by rpki-client