Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/97E72B12FB1511EF9A49675C762E951A.roa
File: 97E72B12FB1511EF9A49675C762E951A.roa (raw, json)
Hash identifier: pR2D5nKtnG/mmDnv872uU04eWi8CJnUKfBCUvyz/jgk=
Subject key identifier: C8:EA:42:96:83:A1:ED:12:C3:66:99:36:4F:20:C6:0B:70:4B:62:AA
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0BFC
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/97E72B12FB1511EF9A49675C762E951A.roa
Signing time: Fri 07 Mar 2025 05:32:43 +0000
ROA not before: Fri 07 Mar 2025 05:32:40 +0000
ROA not after: Wed 07 Mar 2035 05:32:40 +0000
asID: 214120
IP address blocks: 192.142.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 7 05:32:40 2025 GMT
Not After : Mar 7 05:32:40 2035 GMT
Subject: CN=67ca84fb-04cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:55:61:90:83:46:26:65:dd:7a:88:86:b9:cb:
f6:67:87:52:04:96:8c:4d:b9:42:81:8a:eb:17:ea:
f3:4c:80:f8:df:f6:80:f3:a2:37:30:ca:0d:29:33:
8c:14:bf:51:e7:a1:2a:d4:b7:3d:c0:96:da:16:a2:
2a:64:0d:aa:e3:1a:d3:6e:e7:9c:d8:db:63:79:37:
bf:61:37:2d:49:17:43:2b:e0:ab:ec:17:eb:a4:6b:
e0:af:61:5a:d6:02:91:25:8b:ba:7b:aa:97:a8:aa:
0c:96:b8:b3:fb:4d:1f:86:8d:7e:5c:65:97:7a:10:
b3:de:4c:55:a0:39:dc:a0:02:f6:57:ae:8f:ce:f5:
38:d8:f7:bf:23:55:68:b3:86:97:ce:bb:e8:e1:27:
0e:ca:ba:2a:d6:2b:02:60:5f:a5:cf:97:c9:c0:d5:
c4:ad:db:1b:41:ea:09:06:87:1f:79:e9:96:ca:a1:
64:5e:52:de:74:1d:43:00:0a:82:db:55:74:81:f4:
d4:e3:bc:ec:a4:62:17:47:62:63:40:73:df:09:3a:
0d:c0:b0:95:d1:bf:53:0a:4a:c8:07:bd:f9:76:84:
e6:ee:a1:dc:eb:02:67:9c:f9:53:1b:14:43:7b:d6:
36:27:04:d9:76:33:37:02:25:fb:75:47:eb:95:5b:
ce:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EA:42:96:83:A1:ED:12:C3:66:99:36:4F:20:C6:0B:70:4B:62:AA
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/97E72B12FB1511EF9A49675C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.44.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:a0:38:f3:79:cc:07:53:88:72:44:33:8d:01:cd:61:13:31:
60:6c:85:cb:a7:8b:98:ea:12:a3:21:2e:89:59:d3:b3:9f:8b:
7c:5d:ad:e9:6d:36:7c:a5:4c:43:2e:6d:f4:23:75:64:44:62:
75:4a:93:db:a5:b4:1a:0f:f2:41:17:7d:58:32:4a:13:cc:ec:
b2:95:6d:db:1c:11:de:38:f6:d0:b4:df:47:75:e6:f2:4a:92:
57:54:88:d1:44:f9:49:d1:ed:38:90:32:aa:53:5f:84:b4:f9:
82:87:76:b6:42:18:b5:ee:a8:ed:e5:50:6c:d5:f3:e1:a6:f4:
17:c7:3f:f8:10:93:a9:c9:30:68:03:3e:e9:c9:f8:e1:11:bf:
55:ce:23:03:bb:f8:6d:94:79:6f:5f:48:fa:ab:c7:05:55:cf:
89:54:37:bb:f2:a5:04:e6:04:45:05:03:3b:60:d0:4f:be:8d:
bb:e7:b8:87:22:5a:1f:88:de:b8:f4:3d:12:12:51:51:51:f1:
48:a3:61:9b:b9:b7:3f:f5:48:87:4e:7f:d4:23:c4:6f:3f:65:
a1:c6:aa:81:c9:60:df:3f:41:c7:9f:46:c3:25:50:2e:e2:39:
1e:da:8d:b2:55:0a:79:ed:e2:49:d7:02:38:eb:10:7d:25:9e:
9d:9a:a1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:22:16 2025 by rpki-client