Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54E37F1A599211F09D49D1EFDAE4EC9C.roa
File: 54E37F1A599211F09D49D1EFDAE4EC9C.roa (raw, json)
Hash identifier: sC6GpWR0xecYe81GqAd/2RfeT/fF/voTnACtwiMzu9c=
Subject key identifier: 74:CD:18:59:73:8C:E6:B1:DE:E0:46:5B:BC:9E:55:55:A1:A4:AC:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01619D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54E37F1A599211F09D49D1EFDAE4EC9C.roa
Signing time: Sat 05 Jul 2025 11:22:28 +0000
ROA not before: Sat 05 Jul 2025 11:22:23 +0000
ROA not after: Fri 10 Oct 2025 11:22:23 +0000
asID: 272018
IP address blocks: 156.235.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90525 (0x1619d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 11:22:23 2025 GMT
Not After : Oct 10 11:22:23 2025 GMT
Subject: CN=68690af4-882a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:b5:a4:67:7a:b1:17:1a:78:b9:3f:b5:86:
e7:57:10:67:65:f4:08:50:8c:0d:43:e0:bc:5a:22:
d3:75:a1:19:9b:5a:25:37:42:e3:8d:8c:cb:c0:30:
52:45:8c:08:86:7d:0a:8d:28:e8:30:6b:d0:42:2f:
5e:c9:dc:3b:fa:d7:36:d8:33:d1:fa:84:ce:5c:ba:
e1:fc:bb:59:e5:e9:a6:f9:2c:7e:87:77:62:e9:d8:
d4:44:46:c3:58:ba:bd:2b:91:15:9f:f0:60:d6:f5:
34:54:39:2d:e9:d9:27:ef:ea:61:5d:09:29:f6:44:
fb:80:af:f8:ba:ff:60:7a:3d:78:96:31:d5:39:ba:
33:c5:e7:8b:dd:6d:4a:6f:cd:3c:a9:af:1b:e1:e5:
55:b3:95:96:5b:80:d7:99:e2:43:eb:19:f3:4e:a0:
5f:2a:e5:0b:f3:22:bb:a5:a7:56:0d:f8:b2:38:63:
e4:0f:c0:ea:e8:c2:35:e0:47:09:06:28:2d:e3:71:
72:10:0f:0f:ae:35:96:55:ee:a7:d4:42:42:35:a4:
91:e6:eb:c7:3a:af:77:e7:af:50:aa:0a:04:1b:b8:
a9:cd:8b:d6:9e:f7:aa:47:82:87:67:7b:e5:fe:68:
9d:9a:6e:86:16:e0:7d:85:bb:7c:61:38:0c:6b:5d:
c8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CD:18:59:73:8C:E6:B1:DE:E0:46:5B:BC:9E:55:55:A1:A4:AC:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54E37F1A599211F09D49D1EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.90.0/24
Signature Algorithm: sha256WithRSAEncryption
73:00:ce:97:fa:bc:1e:76:f6:7b:e6:ac:37:54:1a:6e:1a:ae:
bf:21:d8:d3:8d:a1:8e:ce:c7:b0:7f:0c:42:e2:bf:31:9d:13:
7d:fb:53:92:03:cd:ae:4d:46:95:f6:39:00:11:ea:f4:44:b0:
ee:31:89:41:45:62:a2:e5:79:84:a7:fc:c2:f6:bd:e1:b8:70:
26:27:f9:f8:9c:34:89:71:10:3c:47:0f:66:60:8d:f2:5a:5b:
fc:e0:e2:02:27:22:5a:ea:25:71:f4:cc:b8:61:43:a1:0a:fc:
42:c7:c4:e4:a9:f2:c4:fc:c5:91:3b:20:8a:2e:86:c0:b1:22:
68:23:d3:26:ed:a2:9b:02:3e:d7:b1:9d:bd:0e:d0:ef:86:eb:
29:f0:8a:da:d3:c4:d9:09:2b:03:38:72:14:e9:1f:b0:00:ca:
8d:3c:92:0c:60:bc:c5:5c:7d:0a:08:32:4f:6c:ea:4a:da:27:
17:06:5b:97:02:a2:42:3a:50:ae:91:67:48:dc:5b:e4:15:06:
7a:64:e1:a9:1b:23:e5:84:35:b1:c8:a2:66:2e:f3:57:ed:72:
44:06:4a:01:e0:52:9c:36:89:80:64:e8:b8:90:ed:f1:af:98:
5d:2e:1a:50:30:13:6a:15:6c:68:3a:52:c7:11:3f:59:41:cf:
24:51:97:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:33:52 2025 by rpki-client