Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22E1F8D262EA11F0AC2814A6DAE4EC9C.roa
File: 22E1F8D262EA11F0AC2814A6DAE4EC9C.roa (raw, json)
Hash identifier: f88gOb8GNE+15xD79dVgkfFKIR5QxzDu9JmxDVIwmWk=
Subject key identifier: 49:BC:9F:65:4C:24:4D:B8:5C:7D:64:A0:B1:B1:6E:C0:43:BC:57:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0165AE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22E1F8D262EA11F0AC2814A6DAE4EC9C.roa
Signing time: Thu 17 Jul 2025 08:43:40 +0000
ROA not before: Thu 17 Jul 2025 08:43:35 +0000
ROA not after: Sat 26 Jul 2025 08:43:35 +0000
asID: 138985
IP address blocks: 156.238.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91566 (0x165ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 08:43:35 2025 GMT
Not After : Jul 26 08:43:35 2025 GMT
Subject: CN=6878b7bc-9401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8d:bb:ce:33:90:23:0b:dc:f9:ed:8e:68:f2:
33:0f:be:5a:8c:e2:12:70:ac:ff:89:43:f6:cb:c3:
9a:3a:06:c8:4e:15:9e:8d:b6:5f:10:5b:78:f9:50:
3b:12:3d:34:6c:13:9e:0d:d2:78:13:34:42:2b:59:
56:60:84:98:b0:aa:2e:b9:b1:9d:32:c4:f6:f8:22:
f9:59:4f:d8:de:40:8e:7c:75:27:e5:4a:8e:a1:bb:
d8:9a:06:1b:09:c7:17:5e:d9:85:75:9f:7d:a5:38:
c3:53:36:9b:f1:5e:3c:cf:a3:9e:af:01:4f:e8:d9:
34:84:46:5b:55:28:2f:2e:47:a2:b0:da:68:99:01:
90:6b:67:06:5c:90:76:5a:0d:4a:b7:b1:38:3c:fe:
18:8c:4c:f3:a4:16:a1:96:ec:ec:e0:5b:d1:ac:29:
30:c3:7f:13:54:30:f8:1c:02:c5:af:69:32:69:47:
ae:26:0a:67:db:88:fb:71:bc:f4:03:80:64:2b:66:
29:03:ef:94:b7:9f:36:ab:66:9a:f6:10:2e:8f:8d:
65:82:d3:6a:69:7d:a6:9b:3c:b7:e1:85:f8:ec:10:
1f:30:69:37:38:51:55:59:62:69:13:ab:44:86:8e:
19:70:50:5f:c1:57:88:d3:b3:c2:fa:9e:aa:d8:8b:
5e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BC:9F:65:4C:24:4D:B8:5C:7D:64:A0:B1:B1:6E:C0:43:BC:57:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22E1F8D262EA11F0AC2814A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.81.0/24
Signature Algorithm: sha256WithRSAEncryption
14:1a:30:b5:c1:7a:10:82:50:73:ce:b6:aa:50:25:a6:0b:3b:
23:92:4f:d3:09:b2:88:87:7a:4d:76:d9:85:94:2e:8d:1d:93:
02:ed:0c:57:c1:ac:b6:a4:f3:8a:91:05:cf:0c:23:a3:75:13:
3e:81:49:2e:6b:6e:52:9f:21:ef:0c:1d:be:22:de:77:32:8b:
7c:e9:92:fc:9d:47:5c:33:c2:89:ae:22:61:1e:61:04:4a:e0:
1e:1d:b8:bc:48:34:ab:ec:94:44:cf:57:20:06:e5:e3:27:ab:
d0:74:01:c0:85:e4:0d:92:5e:08:91:bf:88:8a:85:bd:a0:5f:
d7:98:3c:3c:27:4d:5a:25:90:dd:84:7e:6c:f8:15:2b:f5:b5:
29:a3:87:5e:6c:5f:9b:9d:d1:a7:aa:01:d4:3d:3c:dd:63:a9:
5c:52:05:45:3a:aa:74:e8:69:ed:bf:d3:ff:b1:b4:6f:4e:13:
6c:41:f3:77:26:ec:19:68:13:ea:06:60:16:b5:79:eb:87:71:
69:5a:2a:d5:a1:69:ea:35:f4:af:c0:89:41:ce:16:24:7f:eb:
80:7a:b1:03:62:24:9e:51:d5:10:7c:f2:30:67:ef:77:d6:67:
bf:b5:3c:41:01:65:c6:e2:67:24:fc:a3:94:cf:3e:d7:24:d4:
63:ed:b8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:40:17 2025 by rpki-client