Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9816A15E115311F099481474762E951A.roa
File: 9816A15E115311F099481474762E951A.roa (raw, json)
Hash identifier: z/NDr4ODibE0+e59W+6G5yrNtXBvn3HZtg7NOPyGAg0=
Subject key identifier: D3:17:7C:45:3C:A6:3C:76:B6:44:93:ED:C6:6A:54:38:98:5E:51:93
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0C88
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9816A15E115311F099481474762E951A.roa
Signing time: Fri 04 Apr 2025 12:51:58 +0000
ROA not before: Fri 04 Apr 2025 12:51:54 +0000
ROA not after: Wed 04 Apr 2035 12:51:54 +0000
asID: 36916
IP address blocks: 192.142.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3208 (0xc88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Apr 4 12:51:54 2025 GMT
Not After : Apr 4 12:51:54 2035 GMT
Subject: CN=67efd5ee-b0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5f:16:88:f1:a5:c2:b3:c6:1b:77:25:b7:47:
ff:0a:62:a5:f9:83:e8:e9:c1:b1:ff:cb:ec:34:4f:
ee:6e:4c:97:7d:02:5b:08:87:63:81:c8:02:6e:5d:
84:70:c7:f4:30:22:b7:1e:cc:1b:9b:89:ce:a7:7d:
45:6c:ad:bc:2c:49:a9:b3:2d:89:2c:2b:3f:f2:36:
67:28:ea:4e:fd:f1:07:c3:d5:a8:9a:76:f1:08:4e:
9f:76:82:c8:f4:d2:73:0a:f9:6b:2d:d2:89:96:fa:
c6:70:cf:05:99:e5:a6:ff:73:ee:59:e5:91:8a:5b:
a9:b0:a7:a6:24:6e:89:19:aa:45:6f:6d:08:9b:19:
e4:6b:8d:14:cd:a6:53:fb:3c:e0:f7:ac:0d:d1:8f:
c7:fb:eb:e1:29:94:7d:ff:15:e8:4c:a5:f9:e8:2a:
ea:cf:f5:3c:38:7f:03:db:93:8f:94:66:e4:d2:16:
49:da:ec:47:a3:77:4a:e5:13:da:a7:52:38:9d:01:
95:0f:76:e0:ab:d2:0e:4f:9b:a7:c5:34:f2:d2:7c:
57:79:95:be:d5:6c:f9:4c:36:e3:2d:52:4e:67:93:
4e:55:45:84:f1:d5:12:21:a2:a2:f2:ec:ac:bf:66:
a4:75:0c:e0:ca:9c:62:a6:1b:45:e5:ef:34:a1:21:
15:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:17:7C:45:3C:A6:3C:76:B6:44:93:ED:C6:6A:54:38:98:5E:51:93
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9816A15E115311F099481474762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.96.0/19
Signature Algorithm: sha256WithRSAEncryption
93:b9:4a:c7:41:63:f5:db:87:99:0d:d6:ca:11:e5:07:ff:95:
91:02:b4:5b:1f:3e:fa:cf:86:90:47:a8:a9:dc:73:4e:11:8d:
fa:3e:85:bc:c1:cb:19:9d:2a:63:bf:4a:92:7e:0f:7b:c2:61:
62:76:ba:e7:5d:fb:af:2f:73:37:95:9e:64:23:8e:0a:d9:aa:
0a:90:1d:63:bd:78:e8:80:80:c7:d2:67:01:b6:de:08:6a:b9:
b7:7d:14:dc:56:ea:be:46:0e:bc:47:a9:59:e2:38:0b:14:4d:
2f:81:87:ef:79:86:79:1b:bb:1a:75:a6:d4:cf:34:cf:f7:35:
0e:83:f9:01:38:fc:1a:96:66:ae:5d:0c:b2:3d:91:d2:48:60:
6c:69:1f:d6:c1:07:6b:26:08:56:72:35:9c:8c:a6:ce:e9:26:
b4:05:a1:26:20:72:63:9c:c0:09:ec:ec:09:eb:2c:7f:4a:8d:
a6:6d:d7:3d:42:09:20:9a:60:d6:f6:75:65:d9:94:71:2f:e5:
ba:b0:d1:b2:59:86:59:f8:51:d5:fd:16:89:64:d3:7b:4e:0b:
f2:3e:f8:bf:2a:a5:6e:d5:5b:e9:86:82:d5:e0:2d:f7:a0:6c:
17:29:da:3b:a8:b5:f4:1d:37:12:62:5d:50:39:e1:40:b3:0f:
69:68:35:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:42 2025 by rpki-client on console.sobornost.net