Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BA967E2484D11F0862DA284DAE4EC9C.roa
File: 1BA967E2484D11F0862DA284DAE4EC9C.roa (raw, json)
Hash identifier: YIQZzVqhuheTcBvgq1P3QCT9hWYQdoU5cugTxDOQMIM=
Subject key identifier: 28:E3:F4:ED:20:6A:6D:64:B9:1D:E3:6F:FA:45:3A:69:EF:C9:18:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015BC0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BA967E2484D11F0862DA284DAE4EC9C.roa
Signing time: Fri 13 Jun 2025 11:54:07 +0000
ROA not before: Fri 13 Jun 2025 11:54:01 +0000
ROA not after: Sun 03 Aug 2025 11:54:01 +0000
asID: 64013
IP address blocks: 156.234.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89024 (0x15bc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 13 11:54:01 2025 GMT
Not After : Aug 3 11:54:01 2025 GMT
Subject: CN=684c115e-a770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:51:be:a3:70:2a:ad:ad:5b:c3:12:19:a1:d7:
f8:b4:3f:55:43:59:b3:67:5f:6b:69:55:15:de:8a:
51:d8:3c:c0:06:4f:22:c9:c5:f6:c6:15:b5:16:72:
5f:9d:0c:5a:fe:c4:70:48:9f:73:cf:e5:1a:c9:73:
67:ca:f4:2a:94:32:c0:14:51:80:ed:dd:a2:0d:bf:
b9:e6:dc:8d:ad:1b:3c:3e:c8:40:ec:81:28:76:63:
49:83:c8:19:c2:70:2c:78:d1:b2:19:6c:b2:96:92:
f8:f9:a5:00:c4:76:7b:a8:3b:cc:3c:26:b9:e6:bf:
e0:5a:b0:a7:15:79:b3:26:71:53:55:79:1b:11:e4:
1e:80:c0:a9:f1:dc:51:07:62:92:d4:4a:84:f4:0c:
27:24:4a:65:1d:70:40:17:a6:b5:25:38:e6:dd:57:
eb:b9:e0:79:bc:d3:5c:cf:12:16:88:b0:4d:e2:6a:
54:31:74:e6:7c:8c:81:1e:1e:58:50:56:8c:b6:06:
2c:72:1b:71:f7:09:09:9c:b7:98:19:6c:31:d8:b4:
2b:25:b9:e5:1a:8c:7b:a1:fd:44:91:3f:fe:39:f7:
35:19:aa:ce:65:ca:e1:4b:b7:81:7f:8b:2f:35:a7:
91:ad:99:22:58:8c:73:db:a2:93:9a:d0:e8:5b:44:
11:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E3:F4:ED:20:6A:6D:64:B9:1D:E3:6F:FA:45:3A:69:EF:C9:18:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BA967E2484D11F0862DA284DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
89:2f:c0:48:65:32:0c:36:58:90:61:0a:24:81:40:12:a6:47:
7d:de:89:e0:76:fe:9b:51:f8:7e:eb:8b:6c:b4:77:1d:ec:ec:
72:61:27:b9:3b:4a:57:be:05:b8:d5:7d:fc:35:00:61:b9:c1:
55:f4:28:b4:4d:e2:f4:2b:52:70:c0:b9:26:d5:65:21:6b:6b:
ee:0d:52:41:ff:44:38:b4:a4:fb:22:f7:c7:9f:49:7b:19:41:
3e:8e:ba:6d:57:47:01:d0:c9:bb:eb:46:b0:b9:c0:74:d2:c9:
0d:41:0d:5b:78:1b:b3:68:cf:d9:66:a2:57:dd:a9:0f:15:89:
b5:0c:49:8e:39:3a:2f:99:88:f8:c5:85:15:c2:7b:41:d1:f2:
bc:a7:28:f6:1e:4c:0d:b3:41:90:d5:9c:8c:5f:6b:80:57:c8:
0a:34:44:f7:6d:5d:62:a8:13:5a:ef:9f:ac:5e:4a:17:dd:9d:
99:03:5c:a6:ac:a8:44:1d:60:fb:21:4b:14:fc:12:ad:b2:a0:
2a:7f:bc:8a:ea:6e:2e:83:e1:8a:96:ee:95:a1:db:2b:99:ab:
35:03:e7:75:c0:24:92:0d:f8:46:d5:dc:98:47:2b:46:70:82:
3e:13:67:cd:a3:5a:6b:dc:3b:ea:37:f3:d8:0c:0c:07:99:1f:
81:7d:e2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:32:46 2025 by rpki-client