Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/CBEC7188371A11F0BB4C849ADAE4EC9C.roa
File: CBEC7188371A11F0BB4C849ADAE4EC9C.roa (raw, json)
Hash identifier: G+MijM9cVkY56wCWUxm8Xt6IPr9CPnxAYUI9sbJ2x3A=
Subject key identifier: F6:16:AB:B4:D1:CC:50:92:5B:2B:79:7A:83:01:BD:E7:F1:FA:57:C9
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0CC9
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/CBEC7188371A11F0BB4C849ADAE4EC9C.roa
Signing time: Thu 22 May 2025 14:41:08 +0000
ROA not before: Thu 22 May 2025 14:41:03 +0000
ROA not after: Wed 16 May 2035 14:41:03 +0000
asID: 60064
IP address blocks: 192.142.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3273 (0xcc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: May 22 14:41:03 2025 GMT
Not After : May 16 14:41:03 2035 GMT
Subject: CN=682f3784-23b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:77:05:cc:74:65:84:c8:41:e0:3e:b9:5e:
f3:f8:83:28:7b:5e:55:17:0a:a9:86:72:02:8f:f1:
bb:8a:45:7e:9e:63:96:47:1a:b1:02:cb:52:71:fb:
90:3d:72:93:2e:c2:ec:5a:39:79:85:e6:bb:f8:8b:
5c:19:e9:60:03:42:59:ae:ea:be:36:cb:2d:0b:8d:
f4:b6:87:00:9a:9a:62:1a:93:ce:eb:72:fb:fb:d4:
e5:29:59:9b:54:3d:e8:cb:f8:66:02:7c:8c:30:ab:
2e:45:ff:65:8d:bf:a6:51:37:19:df:49:33:1f:d6:
84:2d:55:e3:cf:2d:da:1c:04:3c:ff:5f:e4:4c:b7:
f2:5c:67:88:94:38:d7:9f:e5:cd:68:17:6e:fe:c5:
ac:75:35:c2:59:2b:78:53:60:3a:78:a0:f3:39:a0:
0f:7a:fd:be:0a:cd:ad:1a:e1:d3:bf:6a:f1:7f:75:
e0:77:a0:8a:09:b6:81:ba:35:55:33:7f:76:fc:9d:
93:34:ab:27:11:2a:ab:c8:a1:d8:17:0e:b7:63:2c:
7d:73:1b:d8:aa:5e:43:1d:7b:1a:76:a1:6a:29:7a:
b7:1b:fc:1f:45:d5:9c:b4:fb:f7:1b:49:9d:97:f1:
cc:bb:da:33:b6:61:9e:38:14:86:97:09:d1:b2:db:
79:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:16:AB:B4:D1:CC:50:92:5B:2B:79:7A:83:01:BD:E7:F1:FA:57:C9
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/CBEC7188371A11F0BB4C849ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.56.0/21
Signature Algorithm: sha256WithRSAEncryption
46:44:d7:e4:04:e0:c3:d5:9b:85:da:d1:54:d8:0c:0f:0c:9b:
8e:93:91:a7:83:07:45:bc:57:04:16:bf:ce:45:67:23:cd:2c:
12:4f:54:a5:33:2a:2d:fa:56:0f:11:a1:af:4e:8d:58:23:b1:
44:8e:63:41:be:6a:b6:e1:9a:6c:56:4f:2a:e0:38:05:27:04:
dc:d2:a7:a0:ec:48:24:af:0f:40:a7:5b:46:7d:b8:e3:fd:28:
ac:2a:30:08:84:93:09:86:98:c8:e4:b8:f3:88:f3:71:f3:53:
63:4f:8c:09:46:b4:89:b9:4c:15:75:7c:4e:49:82:3b:7b:d3:
a8:95:61:dd:79:bf:3b:f6:e7:6a:f1:0f:a8:87:48:b7:bf:1f:
0b:81:60:81:46:05:7f:fc:b0:ab:76:72:79:9c:d3:3b:bd:9f:
f5:11:e0:8f:53:c7:75:ee:9b:7d:21:3b:d5:fd:c7:43:c4:00:
d7:0b:27:02:cd:4a:f4:a2:b6:90:da:8d:6b:4e:d7:ea:51:9c:
22:02:53:65:f4:21:89:62:1b:19:dc:6a:e0:f8:c6:e1:61:54:
92:b3:ce:68:a7:4a:73:9d:91:64:42:8b:d1:2d:71:b1:18:37:
61:6f:0d:34:3f:f6:9d:a2:7f:50:a0:48:41:36:78:54:91:00:
2c:4b:53:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:28:29 2025 by rpki-client