Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/738AE8A4475911F09045DAC7DAE4EC9C.roa
File: 738AE8A4475911F09045DAC7DAE4EC9C.roa (raw, json)
Hash identifier: 9G19A+XuXst7/pCdOMDFapnvIxo7yjbb6KqhVM7rfAo=
Subject key identifier: B1:53:8F:5F:02:C9:9B:1D:4D:F2:F7:2A:44:51:35:83:85:FF:08:10
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0CE2
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/738AE8A4475911F09045DAC7DAE4EC9C.roa
Signing time: Thu 12 Jun 2025 06:49:57 +0000
ROA not before: Thu 12 Jun 2025 06:49:52 +0000
ROA not after: Tue 12 Jun 2035 06:49:52 +0000
asID: 214120
IP address blocks: 192.142.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3298 (0xce2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jun 12 06:49:52 2025 GMT
Not After : Jun 12 06:49:52 2035 GMT
Subject: CN=684a7895-cccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f4:4b:f3:93:b1:c2:d5:65:74:46:61:56:dc:
40:b4:87:22:69:8f:96:1a:87:18:fd:b9:ed:df:d2:
03:d5:0a:50:f8:7e:b3:58:69:e7:f7:62:2f:14:ea:
50:b2:90:cf:8e:3a:1d:7c:98:8e:44:a5:de:80:bc:
85:a8:83:aa:88:b4:fb:4a:a7:f7:9b:fa:e0:75:b2:
2c:b6:81:d5:3b:a3:18:05:e3:92:61:10:03:ee:80:
16:ab:79:53:63:3e:08:a2:73:5f:30:a7:3e:00:21:
54:63:9a:4d:3f:20:cd:33:db:2a:a7:be:33:12:85:
a8:9b:b9:0d:b2:06:50:6c:e1:5f:9b:07:98:7a:12:
cb:5e:b6:1c:eb:f4:bd:9f:23:cc:47:dd:3e:13:12:
85:fc:71:dc:c5:9d:ac:bc:bd:0d:64:2a:30:c2:12:
98:29:ac:e3:ee:cf:3a:45:83:32:5b:6b:88:58:1a:
1c:ae:5e:37:f3:1d:8b:0b:4c:34:d1:eb:ab:4b:4b:
40:25:6e:27:85:03:9c:97:f5:6a:05:5e:41:cb:9f:
9b:56:df:00:39:58:cb:10:4f:91:ba:be:9a:8c:b2:
32:3e:40:7b:b4:99:91:a1:4d:30:ba:b8:a5:30:3b:
c2:fb:69:15:16:3d:88:12:15:42:51:fa:bc:95:54:
b2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:53:8F:5F:02:C9:9B:1D:4D:F2:F7:2A:44:51:35:83:85:FF:08:10
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/738AE8A4475911F09045DAC7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.34.0/24
Signature Algorithm: sha256WithRSAEncryption
69:60:e7:e9:21:c5:6b:32:3e:d9:d1:3b:f5:f5:53:0b:77:d9:
4a:da:1e:cf:06:2f:1a:c9:30:df:bb:a8:73:4d:47:a6:a0:94:
f9:1e:08:10:74:22:06:6b:7b:f2:cf:01:d2:c6:ce:8d:cf:28:
27:a7:19:de:f8:a1:85:db:7c:f6:0a:32:e4:51:d4:ed:f6:38:
ca:7a:71:04:f4:1d:aa:a1:11:c7:8b:ef:99:9d:33:5a:e3:9d:
54:23:93:7a:f3:c2:e5:72:f7:7e:74:84:71:66:9a:3a:e7:db:
4b:ed:e7:13:52:3e:9d:83:d7:02:bc:6f:48:6f:e9:57:db:1a:
9b:fe:c5:4c:97:55:d0:c1:ce:c9:35:b7:c4:3d:b6:14:e0:45:
fb:15:aa:4b:17:31:18:5d:80:6d:bc:b1:e6:00:33:2e:02:f7:
a4:d5:12:fd:65:7c:ab:ab:2d:4f:a6:85:b4:d3:6e:c9:8f:ba:
1a:49:8b:6b:8b:ff:8c:89:51:a2:cc:ac:e3:86:41:a8:34:84:
13:b1:2b:80:a5:b0:d4:2e:38:ad:a3:27:5e:0b:61:b2:e5:40:
98:6e:23:be:90:36:9c:d3:ba:9c:35:b4:46:ee:8a:4d:63:2d:
c4:09:5f:a9:11:f6:e4:12:e0:df:01:b2:bc:1f:fb:5c:27:71:
f6:ca:36:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:05:05 2025 by rpki-client