Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/C237A39E0A1811F0BC67D06A762E951A.roa
File: C237A39E0A1811F0BC67D06A762E951A.roa (raw, json)
Hash identifier: utCi/2d9Ija7zzwhps3AhTrt0shX4sTvuZSierVa06Y=
Subject key identifier: 94:B5:F6:4E:F2:6F:66:78:0B:63:3A:E9:03:80:FB:11:C3:FD:BD:08
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0C63
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/C237A39E0A1811F0BC67D06A762E951A.roa
Signing time: Wed 26 Mar 2025 08:03:10 +0000
ROA not before: Wed 26 Mar 2025 08:03:06 +0000
ROA not after: Tue 20 Mar 2035 08:03:06 +0000
asID: 214036
IP address blocks: 192.142.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3171 (0xc63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 26 08:03:06 2025 GMT
Not After : Mar 20 08:03:06 2035 GMT
Subject: CN=67e3b4be-8e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:08:75:ae:af:6a:2f:06:d6:b6:33:8c:f9:ef:
54:61:d1:52:71:00:10:0d:bd:af:38:d8:2b:db:b5:
5e:ec:e8:88:af:95:71:e8:32:44:ae:59:4a:eb:bf:
be:db:74:1f:7c:55:ad:db:1b:47:74:a8:54:5a:aa:
3a:d7:ed:6e:d4:5d:54:57:82:02:46:86:75:af:58:
20:2a:34:46:26:0b:fe:57:1e:a3:13:74:15:93:fc:
35:e5:fa:96:fa:41:6e:a5:dc:81:ea:9c:af:60:c8:
9b:9a:d2:8b:c1:d2:b1:f7:33:93:5e:3b:7c:e5:60:
12:15:3b:56:fc:28:01:ce:dc:b0:4e:2b:29:25:09:
6f:40:4a:e5:c1:fe:97:db:73:7c:5d:c2:e7:94:f6:
e1:26:fb:8f:19:c6:b2:50:9d:99:5c:ed:aa:7b:e9:
3d:ec:c0:1d:11:73:5e:6d:b4:50:03:3c:49:2a:43:
8a:0c:98:12:d1:9c:8f:ec:8b:12:09:14:57:43:c7:
4f:d0:9c:ca:a4:56:4d:ae:a8:fd:fe:0b:7a:97:e3:
6a:78:0b:f0:27:7e:45:3b:a2:8f:aa:1c:fb:0f:a3:
8a:47:93:10:64:20:b5:d1:c9:5e:a7:66:d0:c0:d4:
6f:96:04:51:f6:44:57:3d:26:ef:ff:22:c1:f6:9a:
5b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B5:F6:4E:F2:6F:66:78:0B:63:3A:E9:03:80:FB:11:C3:FD:BD:08
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/C237A39E0A1811F0BC67D06A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.52.0/24
Signature Algorithm: sha256WithRSAEncryption
60:3f:cf:b2:45:95:f0:81:f4:cc:10:e8:fe:2d:b6:f3:a6:af:
b0:72:d9:33:55:cd:88:9a:37:76:65:9e:9b:33:4d:5d:e5:f7:
04:5e:f7:93:e5:e1:78:c1:df:6a:65:2a:72:90:d0:cd:1b:4e:
3a:aa:98:9e:50:a0:4c:0b:40:43:70:ac:64:ad:4f:d2:c8:ca:
ff:b0:9e:d3:3d:c1:bc:4b:c7:22:92:29:b3:b7:3b:a5:10:25:
53:47:b1:36:49:fa:9a:d7:74:53:db:5c:a6:ef:c8:57:05:fc:
ce:1f:d7:72:44:7f:81:eb:81:fc:f8:56:c6:4b:a1:37:4b:26:
2c:2a:e0:e0:aa:a4:76:d3:5d:b5:9c:c7:c2:f3:b6:03:b5:28:
a1:98:3f:69:1b:ea:2c:88:6a:fe:c7:13:33:fb:a0:5e:2e:83:
23:cb:fb:74:db:29:a3:38:b1:0c:88:57:8b:50:41:f0:10:dd:
50:88:e2:f9:0d:9d:ef:d1:e2:ed:19:09:57:6e:46:33:c0:42:
94:b7:da:60:25:77:41:a4:f5:df:1a:97:53:f7:df:6e:7d:6f:
72:af:d6:a6:a5:cb:48:05:b3:b1:ea:49:26:75:e5:87:6b:e9:
77:23:5a:61:4f:e7:8e:c0:c2:64:22:09:92:70:39:50:94:c0:
44:e3:f5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:25 2025 by rpki-client