Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/50A891544D0011F09B27DFAADAE4EC9C.roa
File: 50A891544D0011F09B27DFAADAE4EC9C.roa (raw, json)
Hash identifier: WEmlUhrK4Ytc3GfkM1Bij2ikpOFx64dw9DGl30/O6Hk=
Subject key identifier: DE:9B:82:01:FC:B7:91:56:72:04:81:02:8A:29:CB:06:15:B2:48:C4
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0CF0
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/50A891544D0011F09B27DFAADAE4EC9C.roa
Signing time: Thu 19 Jun 2025 11:27:00 +0000
ROA not before: Thu 19 Jun 2025 11:26:55 +0000
ROA not after: Tue 19 Jun 2035 11:26:55 +0000
asID: 214036
IP address blocks: 192.142.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3312 (0xcf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jun 19 11:26:55 2025 GMT
Not After : Jun 19 11:26:55 2035 GMT
Subject: CN=6853f404-84e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:58:0b:72:89:88:e1:73:02:d2:b6:76:b1:
ef:f4:48:37:11:fa:1c:5c:d7:48:56:bd:e0:d9:58:
4a:b9:0a:02:b5:f1:8a:cb:0d:00:e1:01:91:7a:e2:
8c:f2:4f:d8:cf:c5:11:54:06:ec:50:90:be:73:4b:
e1:5b:8d:c6:7b:b7:ef:dd:e7:94:40:14:83:b5:7c:
7f:a7:8a:8c:c2:e2:8c:6c:29:c7:d1:80:47:3b:fe:
43:7f:6c:9e:f8:80:c6:2c:9f:1c:3e:12:1e:03:0a:
66:b4:d6:9b:7e:98:d1:c4:79:45:e0:7d:3c:3f:b4:
2d:4c:9d:84:a2:d1:97:7e:cf:98:d3:c1:4c:b9:77:
91:8b:ba:83:1c:da:21:8a:c2:ee:57:c8:fa:bd:e7:
25:34:d8:48:82:c9:e3:0c:7a:21:28:fc:47:63:8e:
53:02:f0:43:1a:d7:59:b5:dc:3c:c0:38:ba:ed:6a:
2c:bc:c6:2a:2c:7d:38:8f:c5:45:3a:27:48:eb:27:
08:e4:ac:95:4e:a0:8a:b4:84:d3:77:20:2f:60:cf:
83:3a:3f:b2:ce:99:d7:67:13:82:7a:8d:67:da:19:
1d:9a:c6:85:fb:5d:79:d6:5f:13:41:19:45:6c:c6:
68:58:f9:75:50:4f:20:47:50:da:fc:b3:02:ff:af:
cc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9B:82:01:FC:B7:91:56:72:04:81:02:8A:29:CB:06:15:B2:48:C4
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/50A891544D0011F09B27DFAADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.54.0/24
Signature Algorithm: sha256WithRSAEncryption
82:41:46:18:5d:b5:98:48:cb:18:6c:fb:79:01:cc:a2:3a:36:
ef:23:e5:95:9f:e3:c4:fb:43:14:b6:8d:38:8e:fa:c7:96:ce:
91:b6:d0:8a:d2:24:fa:b8:3e:aa:82:f6:c3:5f:6a:33:dc:bd:
03:7e:6e:b6:30:88:04:09:b4:bb:5e:37:dd:5b:24:fe:c3:97:
30:d0:8e:8d:eb:41:f9:96:8d:58:94:0f:5a:92:40:d2:82:b1:
26:ed:14:46:da:a9:44:43:51:82:c3:f7:73:4b:31:a8:4c:a3:
55:61:97:30:8b:4a:70:80:e1:ef:3b:58:a9:43:cb:71:58:e8:
62:aa:68:6d:5b:ad:bc:f1:07:d3:48:e3:83:78:c6:1a:f1:98:
bb:6d:a1:22:a6:0a:8a:59:a2:e9:b3:c0:a0:34:78:1c:b9:5d:
18:96:a1:b5:cb:72:f5:0e:b0:5f:a6:26:af:9f:d6:41:d2:85:
47:1d:68:60:f1:a6:23:4e:15:3b:09:28:e0:13:77:8b:63:7a:
c0:32:38:ba:06:a4:c4:3c:ca:fe:cf:bb:37:61:2e:4a:1a:e0:
fc:1e:e2:52:88:96:18:52:51:82:93:83:16:42:23:f2:4c:56:
d0:2a:1e:25:af:81:67:95:f3:96:0f:d0:c2:28:8f:bd:86:53:
f6:96:49:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:09:52 2025 by rpki-client