Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/C498A80C03CB11F0903A7A5D762E951A.roa
File: C498A80C03CB11F0903A7A5D762E951A.roa (raw, json)
Hash identifier: XYq6Q1YtnT6zP7yGEQ+vUEaOw2qym5exozuW/hbLU4A=
Subject key identifier: B7:A0:AA:24:E9:1B:4D:88:0C:93:CC:D4:3E:40:72:DB:27:00:8D:6F
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0C27
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/C498A80C03CB11F0903A7A5D762E951A.roa
Signing time: Tue 18 Mar 2025 07:36:56 +0000
ROA not before: Tue 18 Mar 2025 07:36:52 +0000
ROA not after: Tue 13 Mar 2035 07:36:52 +0000
asID: 36916
IP address blocks: 192.142.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3111 (0xc27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 18 07:36:52 2025 GMT
Not After : Mar 13 07:36:52 2035 GMT
Subject: CN=67d92298-5800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9f:c5:d8:d8:6a:e0:39:93:06:d4:f9:26:80:
1e:f1:51:35:db:58:24:6f:45:9b:16:19:c7:fb:8b:
ae:43:ac:0f:b2:23:1c:74:1b:7c:80:77:ed:cc:5f:
eb:1b:cf:7c:52:fe:dc:9e:f3:00:ee:cd:47:f8:99:
8b:a4:e6:c3:cb:82:1d:e7:d7:b4:2d:2f:3e:24:db:
da:a7:11:ee:91:8e:48:a8:d6:6d:04:57:b8:91:90:
1b:dc:e6:91:b6:bd:3f:5e:bc:ca:5e:37:bf:6b:e0:
c4:4c:b7:c9:bd:0c:7d:8b:35:5b:f6:fb:f1:0d:3d:
0c:7b:5e:95:ac:c7:67:94:6c:00:9c:eb:10:1a:c4:
e0:a8:1b:1c:15:49:fa:c4:12:0e:48:0c:34:9e:f4:
6d:3a:7d:2b:76:c7:d7:b6:94:72:aa:33:9f:c5:98:
24:40:4b:66:23:8b:cd:8e:70:ce:a9:1c:e9:f9:79:
dc:93:a4:50:c6:48:e5:f0:c6:0d:bd:5f:dc:63:a4:
dd:17:cd:af:6e:3f:49:70:eb:02:6c:29:3f:38:1f:
1a:4b:c8:e0:a8:21:ba:3f:cb:06:fe:d2:8a:6b:b9:
51:8b:31:89:6b:fe:55:bc:5e:e1:e3:8d:82:6c:30:
ad:fa:b7:56:87:32:1d:70:84:9d:9d:ae:34:f0:1b:
fd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A0:AA:24:E9:1B:4D:88:0C:93:CC:D4:3E:40:72:DB:27:00:8D:6F
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/C498A80C03CB11F0903A7A5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.184.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:d6:05:d1:f4:12:e1:c0:68:c2:7e:44:c4:ac:29:47:e2:60:
2c:04:b1:10:fe:e7:01:1f:52:03:01:ba:ab:12:d7:be:fe:56:
35:f3:f5:a9:2b:4c:1b:ff:3e:b1:75:ff:6e:5e:97:e7:ec:db:
74:21:ae:ab:8f:8a:ef:0f:6f:e1:5a:94:f4:bb:a3:a7:01:b3:
72:22:bd:1d:d3:d5:13:60:20:ae:5f:8a:da:76:67:d2:23:12:
4d:0b:b0:c1:09:f3:84:12:9c:3a:c4:5c:73:f5:4f:b6:c4:42:
b8:de:6c:4e:9a:ed:02:28:76:fe:0c:90:34:ef:8d:d0:31:db:
47:30:49:75:f1:a1:1d:8a:96:29:64:66:1c:57:b0:78:e8:7c:
e1:91:47:85:83:d8:27:97:a5:1b:d0:62:91:ad:4f:d2:23:0c:
82:bc:4a:55:50:11:1a:64:71:7e:44:91:c8:d1:c2:b0:83:7a:
63:17:52:c9:2e:c2:8e:33:1e:06:bb:5b:cf:03:f8:f1:f4:17:
ec:10:e3:0c:81:3b:c5:c7:25:eb:64:da:67:bc:2c:dd:0b:21:
93:9b:5f:e4:3c:9f:26:ed:6c:88:43:b3:72:60:ab:3c:67:c2:
ec:f7:d0:65:c2:7f:96:d9:88:df:35:af:b9:5d:de:ab:9a:71:
a9:7c:5a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 17:26:17 2025 by rpki-client