Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/33EB6A6A7C1611F0A2FB37A9DAE4EC9C.roa
File: 33EB6A6A7C1611F0A2FB37A9DAE4EC9C.roa (raw, json)
Hash identifier: BbEa+OykX25wOFyN9W3bXzFfsMO5lp6jFzAgo5BCWtU=
Subject key identifier: 0E:1A:3A:CA:D4:E7:CA:20:4D:A4:85:60:5D:BA:DD:02:84:F5:98:F7
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0D2E
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/33EB6A6A7C1611F0A2FB37A9DAE4EC9C.roa
Signing time: Mon 18 Aug 2025 09:32:06 +0000
ROA not before: Mon 18 Aug 2025 09:32:01 +0000
ROA not after: Tue 14 Aug 2035 09:32:01 +0000
asID: 210636
IP address blocks: 192.142.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3374 (0xd2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Aug 18 09:32:01 2025 GMT
Not After : Aug 14 09:32:01 2035 GMT
Subject: CN=68a2f315-58e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4a:fa:05:5c:50:7e:f7:3a:a2:e1:55:a8:ba:
b0:25:6c:61:84:36:68:43:72:d2:39:54:27:6b:12:
e6:5b:2d:24:84:0a:63:53:9a:be:30:4e:e9:4b:cd:
d2:72:2f:ff:87:36:ae:4c:54:25:de:20:b7:0d:93:
41:06:61:af:2e:45:40:09:01:fe:df:c3:7f:4e:fa:
8f:1f:09:e2:e0:69:70:d6:05:3b:13:7d:4e:16:b4:
4d:63:de:b9:94:d5:7e:e9:54:42:fc:cb:87:2a:a9:
9c:3d:a7:8f:e2:26:ce:01:9e:7b:4c:33:6d:5b:52:
11:c3:41:5d:61:d1:c4:9e:d7:cc:39:d8:bb:2a:af:
7c:2f:98:18:96:ba:11:61:0b:05:21:c6:6b:df:1b:
8a:6e:eb:0f:b0:c2:64:0e:ea:e1:a2:a4:b6:f7:66:
1b:8b:06:79:38:44:2d:f5:d5:9c:5b:4a:9f:ff:1e:
a9:4b:ed:ab:3f:ec:d3:57:9a:0a:0c:38:35:9b:40:
73:7e:49:45:ea:21:61:cf:42:dc:01:78:98:65:bc:
b0:98:c7:92:8d:e6:7a:39:4c:a2:6d:2a:10:54:f1:
21:e8:47:4f:4e:38:0d:02:68:0b:7d:f5:ff:dd:f6:
25:a7:a0:f4:b3:a9:0b:06:7a:e1:9d:00:90:15:63:
48:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1A:3A:CA:D4:E7:CA:20:4D:A4:85:60:5D:BA:DD:02:84:F5:98:F7
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/33EB6A6A7C1611F0A2FB37A9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.5.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:e0:67:aa:b1:64:0a:1f:26:81:1e:a5:d7:17:2b:bc:17:b8:
77:eb:98:68:5d:5b:99:d2:2f:00:f7:7b:22:0d:1b:ef:12:1a:
42:2d:97:9c:88:bc:02:c8:65:9b:f7:7d:fc:f3:ae:4d:5d:c6:
11:55:ef:6f:60:04:11:fc:e7:fe:74:1a:fa:3a:bd:e9:dc:07:
c1:e9:77:8f:85:8e:19:9d:56:2f:0c:ba:ce:30:16:fe:aa:f9:
7b:9c:23:c8:18:fb:dd:db:90:c3:5a:67:da:e1:bd:39:11:d9:
28:20:34:1b:52:15:52:6d:32:1b:84:43:b7:1c:86:0b:bc:5d:
7f:09:41:a7:a4:f5:b4:78:37:64:03:e6:ef:b4:60:94:ca:07:
e9:97:87:f4:17:26:7f:10:c1:d6:08:32:08:52:d5:ff:b1:ee:
b2:f3:14:11:7a:f3:e4:61:9e:67:67:fe:76:2c:ca:fe:66:00:
e1:d6:6b:47:6a:31:22:3c:91:d8:fc:be:22:53:df:e0:92:82:
94:91:56:50:09:a0:00:60:78:ba:04:33:af:6e:35:41:0b:b0:
30:e8:7a:b5:6a:7b:7e:1c:d7:f3:e0:9c:b9:02:9c:7b:d1:cc:
59:97:dc:57:50:7e:b2:3a:d4:20:a4:7e:6f:65:55:1a:a1:f3:
17:e2:f7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:11:13 2025 by rpki-client