Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/92CF47BCB18811EFA686CA7B762E951A.roa
File: 92CF47BCB18811EFA686CA7B762E951A.roa (raw, json)
Hash identifier: wMO40zhs2k6RLOR0wVD5UwJz88+6Ri3xIu6E0D4RxFU=
Subject key identifier: 0F:96:53:C5:FC:D3:F0:C6:85:77:8B:55:A5:2D:1F:8E:16:96:52:88
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0B4F
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/92CF47BCB18811EFA686CA7B762E951A.roa
Signing time: Tue 03 Dec 2024 15:09:21 +0000
ROA not before: Tue 03 Dec 2024 15:09:17 +0000
ROA not after: Wed 06 Dec 2034 15:09:17 +0000
asID: 15020
IP address blocks: 192.142.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2895 (0xb4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Dec 3 15:09:17 2024 GMT
Not After : Dec 6 15:09:17 2034 GMT
Subject: CN=674f1f21-a7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:82:b2:1f:dc:77:91:c1:3c:c7:13:5c:78:66:
7d:99:05:a9:7f:70:f0:e4:ed:05:e7:39:7c:f6:5d:
1c:e2:2f:79:66:2f:e2:0e:5a:e0:69:c6:31:de:e5:
4d:90:75:ce:c3:66:21:d0:8d:40:58:31:9d:91:8a:
bf:a3:ed:6b:28:a1:8e:de:df:77:0b:1a:fd:25:5c:
18:4b:5d:0f:52:7b:ec:0f:92:8a:41:1c:f1:92:65:
bf:bb:cb:04:66:4c:51:cf:f6:19:9f:e7:e3:c8:2b:
ab:68:ec:e6:e7:e5:4b:92:80:1b:e1:c4:44:93:41:
38:de:51:1c:8e:a5:e2:a4:b4:fc:2e:f1:71:f5:8c:
23:8b:55:3e:fa:59:0e:11:83:7f:15:49:a7:e0:99:
1c:94:cc:98:a7:0b:ee:ad:57:6a:e7:81:1a:14:59:
c4:a9:22:14:c4:05:8f:7c:99:3c:b0:b0:64:10:5a:
23:37:93:d2:58:7b:a8:cf:20:16:6d:e3:c9:93:af:
d5:cd:6e:5d:7e:72:62:70:08:44:ab:aa:09:90:19:
fa:15:83:ac:ab:f3:4d:1b:ee:7e:22:c2:68:44:a8:
6b:cf:58:93:45:cb:5b:6b:59:1b:f5:4b:c9:6b:01:
90:11:f8:c1:79:f8:25:da:81:8a:ce:89:da:7d:9d:
35:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:96:53:C5:FC:D3:F0:C6:85:77:8B:55:A5:2D:1F:8E:16:96:52:88
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/92CF47BCB18811EFA686CA7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.17.0/24
Signature Algorithm: sha256WithRSAEncryption
46:36:03:e6:18:62:d4:ea:1f:64:49:10:97:c6:04:3a:6d:5c:
59:c2:be:d7:7a:c2:64:a9:4a:0a:f3:88:60:d2:1e:1e:bc:7f:
e2:07:fd:e2:34:75:bf:5b:92:f5:db:61:fa:d1:66:fb:39:19:
20:c3:b8:de:89:83:4e:1c:58:3e:c8:51:8f:31:46:72:22:64:
22:26:f5:f0:c1:e1:5d:53:d3:14:ab:40:6e:07:fe:51:e4:ef:
52:4d:95:37:52:00:9a:62:75:36:8f:f0:e3:d3:5b:5d:08:48:
b7:e0:12:d1:39:38:d3:c6:0c:aa:16:bd:b8:04:92:c0:cc:e7:
f6:b1:3e:9d:cf:57:e2:a5:fe:cf:6e:af:b9:87:88:70:09:e4:
c2:8e:5d:34:53:35:e0:3f:29:a9:ef:68:fb:28:4e:ba:c5:ba:
56:63:e2:51:cd:4a:b5:53:55:58:69:72:b9:a1:99:39:06:78:
f4:4e:b2:7b:2c:7c:8a:31:fe:5e:0f:19:bc:be:4a:28:0b:ca:
3f:9e:24:41:af:24:fd:64:13:48:3f:be:84:0b:31:34:f2:5b:
5c:2a:3a:56:3e:31:f8:66:f6:2e:33:6d:90:37:e3:56:4d:6d:
5e:78:06:4b:b1:c2:da:56:6b:b5:7c:38:3a:70:fe:ec:66:8c:
80:cb:89:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:39:22 2025 by rpki-client