Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/687DD8BC0BAA11F0A2AD2B72762E951A.roa
File: 687DD8BC0BAA11F0A2AD2B72762E951A.roa (raw, json)
Hash identifier: WTlm7b724nedYjm1gnQXCzjChlZzOvtrSz1wzHkUyyo=
Subject key identifier: 2D:D7:0D:DF:54:48:56:51:B4:C5:A6:5E:30:DA:EC:9F:94:B7:8D:28
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0C69
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/687DD8BC0BAA11F0A2AD2B72762E951A.roa
Signing time: Fri 28 Mar 2025 07:58:17 +0000
ROA not before: Fri 28 Mar 2025 07:58:14 +0000
ROA not after: Wed 28 Mar 2035 07:58:14 +0000
asID: 398256
IP address blocks: 192.142.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3177 (0xc69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 28 07:58:14 2025 GMT
Not After : Mar 28 07:58:14 2035 GMT
Subject: CN=67e65699-ba7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:0c:4b:58:32:c9:59:c0:e6:e8:7e:6c:8b:44:
2c:80:40:63:71:34:a7:49:a4:71:1d:9a:26:4b:e7:
22:c0:c5:86:40:98:78:ae:66:99:33:84:d5:1f:52:
4e:6e:6f:a8:06:60:58:36:9a:84:1f:44:23:ef:6f:
a0:82:93:a7:00:f3:01:f5:bf:b2:dd:0e:fd:38:75:
3d:64:09:9e:ba:4e:3e:d6:04:34:7c:e9:a7:4f:4b:
80:7f:d2:70:f6:41:74:db:b7:16:40:62:07:f1:0e:
ad:55:95:33:fe:8c:ce:27:7a:78:78:cf:ef:a8:e9:
6e:d7:01:89:fb:da:25:50:7f:92:ab:95:89:76:fa:
d1:42:f8:bc:68:bc:b1:ac:c5:3e:35:24:55:6a:da:
5d:90:d9:96:34:6e:82:6c:70:c7:24:fb:81:0c:f1:
a9:da:03:4e:d4:14:4b:d5:c7:39:e4:ca:f2:e6:15:
72:37:8d:ce:e1:6d:bf:25:ec:16:76:48:61:e7:c7:
96:fa:a5:15:1e:9d:84:1f:24:be:e2:9c:aa:e7:bc:
a0:34:d5:bf:5e:16:6e:c3:a5:6f:fb:fa:09:36:66:
a8:b0:9f:ce:f7:c5:5c:d7:66:59:3f:30:54:da:5e:
3c:cb:c5:33:e1:db:13:cf:ea:5f:d8:1e:35:25:87:
96:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D7:0D:DF:54:48:56:51:B4:C5:A6:5E:30:DA:EC:9F:94:B7:8D:28
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/687DD8BC0BAA11F0A2AD2B72762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.49.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ad:b1:fc:c8:63:46:70:d6:6f:9b:86:5e:b3:88:fe:a9:0b:
be:72:8b:09:08:3c:f1:73:53:9b:a4:9d:71:32:24:07:c0:00:
4c:b9:61:19:5a:a0:12:64:58:b0:b7:85:e4:ca:46:85:b1:82:
d1:ff:5a:48:05:ac:78:e5:4c:da:29:0f:32:3f:09:25:3e:39:
0e:d9:eb:03:43:12:29:73:52:a3:9a:e1:d7:cc:6e:84:a7:a9:
ed:fa:4e:3a:88:2b:0b:39:28:03:43:64:22:a2:74:00:57:50:
02:ac:4b:72:4a:78:2b:fe:e8:b1:f5:ff:00:fa:80:01:f2:30:
62:4b:17:60:ad:67:5e:46:45:d0:fd:f1:7c:61:1b:e7:9e:c9:
81:91:9c:c8:ce:24:e2:47:68:ac:9c:05:e7:d9:10:80:2a:1c:
99:87:40:f8:7d:4b:ae:28:87:f8:a3:64:c2:54:e2:08:96:0a:
12:44:ab:0e:3a:0a:36:e5:4e:72:41:8c:36:31:e8:86:1a:d4:
30:99:66:1b:68:2f:85:b9:16:f3:0c:11:9c:0e:00:3f:80:25:
d7:f6:80:c9:be:f8:7d:7e:d8:dc:21:2d:c8:b6:f6:52:6b:05:
ad:63:0d:5d:1e:7f:d5:c1:5c:c9:4c:7f:ab:32:c4:70:02:54:
30:07:77:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:25:00 2025 by rpki-client