Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/CC3601CC0BAA11F0A7B22676762E951A.roa
File: CC3601CC0BAA11F0A7B22676762E951A.roa (raw, json)
Hash identifier: KDuPt5ipEpkQuNYLxh9eLYx6Ziw8gtzYlTsrM2VRPno=
Subject key identifier: C7:F1:9C:8A:5E:68:C7:4C:C7:F2:D2:DE:8A:4A:EF:4D:B5:97:BF:61
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0C6D
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/CC3601CC0BAA11F0A7B22676762E951A.roa
Signing time: Fri 28 Mar 2025 08:01:05 +0000
ROA not before: Fri 28 Mar 2025 08:01:01 +0000
ROA not after: Wed 28 Mar 2035 08:01:01 +0000
asID: 44259
IP address blocks: 192.142.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3181 (0xc6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 28 08:01:01 2025 GMT
Not After : Mar 28 08:01:01 2035 GMT
Subject: CN=67e65741-0892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ab:c8:31:f8:7e:90:38:4f:8d:ef:0d:b6:80:
9e:30:08:2d:8d:43:19:1c:af:95:1f:dd:91:4f:e0:
92:91:21:54:2a:4f:fc:04:f8:a9:9e:c1:dc:d8:8c:
80:fe:69:10:3a:95:05:1d:e4:b1:e9:c5:73:3c:37:
9a:96:5e:4c:2c:d2:72:35:2d:09:54:e1:cc:ae:de:
a8:03:b2:c3:45:d5:3e:1c:ef:75:04:dd:d3:8a:01:
43:4d:f1:2e:57:fa:5b:31:1e:c0:ae:c2:13:7d:c2:
a1:55:8b:79:fb:d9:fc:e9:08:a8:76:e3:d5:3c:59:
85:5a:46:66:6d:5a:ba:8f:76:9a:7e:cf:b5:93:5b:
68:6f:35:63:fd:de:48:85:41:c5:23:0c:f6:7c:3c:
31:28:d1:61:57:26:f9:0b:d4:39:c1:5e:ca:db:48:
83:b2:09:a7:44:3c:ee:55:90:99:69:fe:57:e7:49:
06:78:a7:c2:b8:20:59:77:f1:0b:8a:7d:6f:da:96:
04:a4:c7:d5:58:b9:11:e4:72:e4:b3:f8:57:6a:3f:
3d:19:31:64:05:96:3e:d8:49:e5:db:43:fc:6e:1b:
08:c7:4b:3c:43:fe:da:a9:c4:6d:ac:6c:f1:5e:7c:
b1:92:b3:a5:e4:0e:6e:22:f1:6e:72:06:98:2d:fb:
fe:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F1:9C:8A:5E:68:C7:4C:C7:F2:D2:DE:8A:4A:EF:4D:B5:97:BF:61
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/CC3601CC0BAA11F0A7B22676762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.51.0/24
Signature Algorithm: sha256WithRSAEncryption
34:5e:7e:c3:75:87:63:72:e4:9f:67:61:87:4d:7d:f4:d7:cf:
a9:97:03:fb:6b:12:13:c0:01:7e:74:1c:ec:c1:b2:22:6a:9a:
01:8b:69:1c:ad:1d:da:ed:07:0f:93:32:57:6d:83:33:33:cb:
ce:d9:8d:4c:28:a4:29:1e:26:c0:3a:ca:5f:6b:e6:1a:fd:25:
80:fe:61:d6:4f:10:bf:fd:27:86:24:6e:e5:34:31:fb:be:44:
47:21:6c:ef:61:c6:c6:86:bf:07:9d:42:e8:30:dc:80:23:b0:
49:5d:5c:dc:e4:13:b5:24:71:35:e2:e0:98:9b:39:81:61:52:
14:1a:e7:17:d1:f5:5a:b0:7e:18:14:e7:22:cc:eb:16:83:b0:
ef:d2:5c:ff:e0:09:07:be:e0:8c:09:06:3c:22:10:25:c9:7d:
1e:e1:60:78:b3:6c:42:86:ce:73:e1:81:f6:5a:97:a0:12:4e:
e9:eb:39:4f:94:f4:ee:6c:02:af:3d:c4:22:e0:26:58:20:15:
45:38:89:a3:d3:7f:64:7f:e7:1d:44:c5:68:4b:a4:9e:59:86:
4e:8c:71:c6:97:28:3b:24:32:93:4c:86:73:a4:4c:5a:c7:68:
6c:e6:31:bf:55:17:31:7e:21:13:99:31:80:51:e1:3d:b9:b0:
a9:59:df:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:31:54 2025 by rpki-client