Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/F39607920ED111F0B33E2D49762E951A.roa
File: F39607920ED111F0B33E2D49762E951A.roa (raw, json)
Hash identifier: Cm7+ofM0TSEItVXCyU/NjyzMpQDV/N1lwMfr6KRs9Ew=
Subject key identifier: AE:D5:67:21:A2:D9:5C:FD:7F:68:24:12:AC:76:B4:CC:EB:32:ED:87
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0C77
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/F39607920ED111F0B33E2D49762E951A.roa
Signing time: Tue 01 Apr 2025 08:18:55 +0000
ROA not before: Tue 01 Apr 2025 08:18:50 +0000
ROA not after: Tue 10 Apr 2035 08:18:50 +0000
asID: 214120
IP address blocks: 192.142.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 19 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3191 (0xc77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Apr 1 08:18:50 2025 GMT
Not After : Apr 10 08:18:50 2035 GMT
Subject: CN=67eba16f-b706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a9:70:d7:0a:db:db:35:b7:2f:68:93:78:f6:
a0:fa:a6:0b:69:61:42:f8:b3:2b:bf:c2:68:5f:94:
4b:ed:0e:b6:63:fc:df:15:4c:2c:53:3b:c7:3b:be:
c0:c7:c6:f9:3a:7a:8d:30:16:4c:9c:ae:e6:d1:90:
f2:75:33:36:b2:58:22:62:f3:6e:a5:3c:fb:4c:5e:
15:1f:82:75:fd:f6:da:11:7f:1e:a8:80:84:39:5d:
ca:d5:ef:12:f1:48:bc:c4:4e:ef:58:ff:51:09:03:
aa:58:6b:72:0f:e5:2c:a3:ee:29:b8:07:14:01:7a:
2a:4b:2b:0f:6c:18:63:0f:32:3c:7c:58:0f:b5:dd:
d9:71:f7:84:ef:b3:74:8b:f2:33:37:0e:6f:0c:57:
5b:d3:c2:a7:48:24:49:73:ce:03:38:4c:49:dd:0c:
85:55:1d:7b:64:27:b7:59:c0:cd:b8:e1:a7:66:f6:
77:ce:3b:89:c8:4b:06:49:b8:bd:8e:99:04:1a:27:
90:92:8b:ac:10:69:a6:20:5c:89:52:87:ff:ff:45:
e7:a1:2c:c6:6b:51:6c:8b:27:ac:5b:3d:63:9e:cc:
98:23:df:3b:24:29:4f:23:b1:ae:77:33:29:0a:51:
d9:5b:da:fc:a3:17:55:94:43:b7:f9:3d:bd:e2:5f:
d2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D5:67:21:A2:D9:5C:FD:7F:68:24:12:AC:76:B4:CC:EB:32:ED:87
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/F39607920ED111F0B33E2D49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.13.0/24
Signature Algorithm: sha256WithRSAEncryption
88:3b:6b:6a:9f:af:5f:5f:61:d1:4a:9b:26:79:5e:c3:90:fe:
42:ff:9c:42:88:10:03:1f:4c:1e:d3:44:e9:2f:b2:e0:ab:19:
6c:c1:cf:30:87:75:97:2d:18:c3:b0:1e:1c:5e:2c:6b:7b:0d:
2e:85:71:a0:fa:21:84:38:f3:f4:a8:62:20:8a:a3:ce:e4:36:
71:36:d1:15:b3:6e:dd:9d:e7:43:ed:8f:d4:bd:f9:3d:f9:22:
4a:59:c9:2c:38:70:60:6a:29:a2:2a:3b:62:fc:3c:7e:52:42:
a2:18:81:24:2f:74:1f:0a:bc:70:50:68:37:32:fb:c1:b7:15:
41:40:16:fb:73:2c:ab:0d:a6:78:1c:94:b5:c8:fa:85:1c:cc:
63:cd:41:9f:1c:63:37:ac:ba:d2:f7:9d:42:35:f4:d1:45:bb:
b0:1d:5a:a5:c3:34:25:6c:23:e7:cd:85:ec:86:99:67:8a:d7:
80:f5:ff:e7:5c:d7:5f:9c:c2:80:15:ce:e6:50:bf:b3:92:78:
59:79:e0:35:73:6d:c4:3f:69:83:3e:7d:bb:aa:4f:4b:a7:1f:
9b:56:24:07:2b:dc:22:cd:b0:55:0f:a5:ad:8c:14:21:a4:4b:
91:70:d1:1c:09:a9:b8:55:1d:7e:5e:40:a4:35:98:c8:8d:6c:
6a:5a:58:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:05:34 2025 by rpki-client