Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/B8EF95AE03C811F0886C084D762E951A.roa
File: B8EF95AE03C811F0886C084D762E951A.roa (raw, json)
Hash identifier: VSU9MS7ymPfnxsR0SddbfUoDniUWnSoSUwMH0l08+Zw=
Subject key identifier: BC:89:F5:D3:EF:D3:F4:1F:A2:F7:49:6E:AB:1D:D6:78:56:D5:07:DA
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0C1B
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/B8EF95AE03C811F0886C084D762E951A.roa
Signing time: Tue 18 Mar 2025 07:15:08 +0000
ROA not before: Tue 18 Mar 2025 07:15:04 +0000
ROA not after: Wed 14 Mar 2035 07:15:04 +0000
asID: 36916
IP address blocks: 192.142.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3099 (0xc1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 18 07:15:04 2025 GMT
Not After : Mar 14 07:15:04 2035 GMT
Subject: CN=67d91d7c-b8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0a:78:29:10:84:0a:d9:17:27:ce:92:45:a7:
c9:44:45:9d:b4:d6:1b:f6:d4:5f:9f:ad:cf:23:4d:
49:0e:e1:3c:39:0a:0d:ab:67:13:cc:b2:14:5f:54:
3f:bf:5d:99:87:28:19:f4:bd:66:09:ff:ca:73:cd:
c9:fb:75:30:0b:bf:fe:c5:6f:c6:a3:91:83:44:4b:
cc:9c:9b:1b:d3:54:b0:60:74:c6:16:6e:ed:8d:70:
46:94:07:b8:35:71:c7:85:3d:31:d4:f1:8f:57:96:
9d:45:ed:51:63:b0:a0:c8:8a:a9:63:c0:3b:cd:51:
1d:df:a7:34:4e:d0:7b:51:e2:32:86:d3:21:f8:60:
5a:c8:69:9b:1c:d7:a2:8f:96:f7:1a:ee:86:5a:54:
fd:ae:24:a7:69:57:77:e8:c8:90:86:93:b1:c2:74:
40:4e:68:be:8b:67:4f:50:69:c7:54:f3:5f:84:a4:
71:bf:23:e0:44:58:c0:ca:00:9e:c8:2c:e0:f1:33:
5f:d0:39:fb:2b:81:17:9d:27:02:bb:c2:48:53:cf:
fb:8f:d7:b2:77:4c:46:35:77:74:7c:db:78:8b:0a:
5c:63:7d:40:a6:ae:11:50:9f:de:02:c3:f5:98:3d:
76:84:0a:69:75:d1:63:90:c4:4a:5e:46:a4:6c:ce:
39:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:89:F5:D3:EF:D3:F4:1F:A2:F7:49:6E:AB:1D:D6:78:56:D5:07:DA
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/B8EF95AE03C811F0886C084D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.128.0/17
Signature Algorithm: sha256WithRSAEncryption
49:56:e9:42:6f:b4:a5:96:5a:91:a2:2e:fa:aa:88:a9:5d:76:
11:a2:8a:d8:de:9b:74:5e:55:6d:26:07:25:43:7e:b4:f7:51:
da:43:fb:66:80:f9:20:b2:32:62:51:d0:56:e2:d2:27:13:38:
8f:fa:2d:ab:54:0b:cc:11:1d:3d:a3:d9:31:d6:c6:b1:f1:d6:
ca:18:69:af:65:40:1d:aa:4d:ab:88:09:75:ca:f3:34:6e:c8:
01:86:da:60:0d:81:9e:6a:31:11:3a:20:5c:5b:f6:a1:42:b9:
72:36:63:4b:9a:88:76:08:67:94:7a:2a:21:f5:ee:33:80:2e:
20:9c:74:0b:7c:a1:82:d1:0a:f2:1c:81:34:1d:55:a3:d7:b7:
81:6b:4b:89:42:2a:f4:ea:05:7e:99:3f:f1:8b:1c:85:d6:8a:
74:2b:ed:cb:f0:b5:84:25:be:ab:5a:2e:9c:2e:93:e2:e9:46:
40:e6:0e:6d:8b:04:6c:aa:ba:a7:70:ef:78:48:12:61:61:63:
d0:73:4c:a6:34:80:a3:8c:e6:d6:36:ec:27:82:f9:49:44:1f:
78:fe:7e:c8:3f:3b:c1:3d:51:a5:63:56:0c:1f:54:45:2b:26:
60:71:12:ee:10:9f:bf:7a:2e:5f:af:c8:1d:2a:66:5c:ba:5a:
91:94:4e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:36:48 2025 by rpki-client