Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/460124C85A7A11F0AE970BCCDAE4EC9C.roa
File: 460124C85A7A11F0AE970BCCDAE4EC9C.roa (raw, json)
Hash identifier: eV9MO7EBUk/373yzNa3Cf9W1Syjg23uLPWXWJ+QlSz8=
Subject key identifier: 9D:86:15:0F:C4:E4:6C:D5:2B:FA:CC:FE:6C:E6:93:05:62:B6:C2:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01623B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/460124C85A7A11F0AE970BCCDAE4EC9C.roa
Signing time: Sun 06 Jul 2025 15:02:46 +0000
ROA not before: Sun 06 Jul 2025 15:02:41 +0000
ROA not after: Sun 03 Aug 2025 15:02:41 +0000
asID: 138643
IP address blocks: 156.234.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90683 (0x1623b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 15:02:41 2025 GMT
Not After : Aug 3 15:02:41 2025 GMT
Subject: CN=686a9016-e263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:eb:ea:ca:ba:1a:3d:7c:52:30:98:70:11:a2:
3f:28:6d:a3:8d:7d:d0:3a:ee:51:3a:ee:9a:81:29:
c3:cf:9b:82:8c:cc:40:9d:b7:9e:0e:8f:f1:41:c1:
f3:ca:35:83:20:b5:ce:94:d3:2d:c6:82:68:f2:af:
0d:dd:05:c0:79:c7:87:56:81:2e:9d:2d:4d:fe:a4:
c4:ab:5a:2b:08:1e:de:4c:b2:34:91:6e:35:f8:e8:
81:61:32:62:51:8e:36:ab:ff:f6:d3:ca:39:92:02:
af:89:3d:91:b2:12:a5:25:7e:1e:24:4b:96:3c:7e:
20:bb:ed:d5:61:43:6a:24:ea:1f:18:12:96:24:bd:
79:d3:17:ea:19:d2:75:5e:52:b3:4e:35:7d:07:d5:
be:58:5a:f0:3c:6f:54:11:56:bb:d0:56:42:f7:6e:
75:cf:da:c1:a5:91:b1:b0:ed:79:12:94:cf:e9:4f:
b2:86:93:3c:81:ea:a3:91:c9:d9:d1:bb:c0:16:77:
e6:03:a2:84:9e:73:db:86:1e:25:c4:c8:92:ec:42:
d4:cb:f3:11:d8:d5:58:9d:86:35:5c:dd:5a:46:71:
18:e8:87:91:15:7f:23:c9:12:c6:10:d5:d8:a2:af:
d3:06:ad:40:48:32:c2:48:7f:f1:d6:b5:52:5a:ed:
03:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:86:15:0F:C4:E4:6C:D5:2B:FA:CC:FE:6C:E6:93:05:62:B6:C2:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/460124C85A7A11F0AE970BCCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:89:ea:f4:74:5e:d4:df:79:9f:ab:a5:68:54:d5:67:d2:b6:
9f:ac:1e:5b:56:25:5c:42:cb:d6:4d:43:61:3f:9e:57:e8:95:
47:e0:43:71:50:00:2a:41:12:fe:1a:5f:31:75:85:05:e8:9c:
ad:b7:78:7d:77:e3:5c:0b:de:b6:ae:41:e6:24:91:84:a5:4d:
6c:41:4a:52:86:ec:15:53:56:ee:bb:b5:d8:2a:60:ee:8a:f1:
0e:7e:f8:6c:9c:8f:44:0b:bb:c5:3c:88:8f:59:37:9e:32:22:
2e:7e:3a:d0:84:d3:3c:ba:98:f5:dc:ac:00:61:04:e7:f8:35:
66:53:6b:44:6b:89:b6:01:dc:89:34:01:e5:44:6b:5a:6d:7e:
74:79:90:60:86:b6:6f:37:f2:55:a5:33:51:b6:23:1a:5a:c7:
2b:cb:db:2b:91:46:fb:e3:ff:db:77:75:de:56:24:0a:5a:96:
79:8a:b6:f8:f1:90:80:6a:55:72:00:22:bd:5c:16:d2:cd:c6:
91:59:d0:88:98:b5:d2:02:66:20:3c:81:e0:55:5b:24:7e:9d:
69:7f:1b:3d:e3:20:36:0a:92:be:08:e0:5d:0c:ef:3b:26:da:
69:a7:77:58:15:e1:6b:0d:7c:46:0f:10:3d:74:f9:ee:a4:71:
ef:89:2b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:38:38 2025 by rpki-client