Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68D52B3A591B11F08EAFD7DDDAE4EC9C.roa
File: 68D52B3A591B11F08EAFD7DDDAE4EC9C.roa (raw, json)
Hash identifier: +2JtYQFMEjk9oUVIbmj9cUxtWM5AfKQgninPYvMg+Uo=
Subject key identifier: 64:62:30:F8:2F:7F:DF:54:A2:38:CA:EA:48:22:5F:8B:F2:14:55:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016146
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68D52B3A591B11F08EAFD7DDDAE4EC9C.roa
Signing time: Fri 04 Jul 2025 21:11:11 +0000
ROA not before: Fri 04 Jul 2025 21:11:06 +0000
ROA not after: Fri 17 Jul 2026 21:11:06 +0000
asID: 153526
IP address blocks: 156.241.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90438 (0x16146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 21:11:06 2025 GMT
Not After : Jul 17 21:11:06 2026 GMT
Subject: CN=6868436f-ef5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e5:82:85:98:08:c0:0b:99:73:d7:7c:8b:ca:
19:8a:2c:c3:7e:83:6b:78:a5:71:ab:b4:94:4e:59:
7f:56:a0:3f:54:71:4e:12:14:39:d8:29:1c:1a:ce:
32:2f:85:99:e5:fe:9f:f2:98:e6:e7:61:b4:b5:40:
2e:5e:72:8b:e8:a6:e0:f2:53:c5:6a:3a:e7:7b:55:
44:bf:99:12:88:1a:84:04:33:54:cb:3c:9e:eb:fe:
0f:09:4c:ce:74:08:24:73:86:f7:72:02:d3:65:4e:
5f:18:c2:d1:a1:3c:a3:e4:f1:20:79:50:d5:2e:c4:
0b:ff:b8:eb:27:15:cb:32:9f:07:33:1d:91:ec:0d:
f6:84:ac:84:14:ae:a1:e5:47:57:53:59:8f:82:d4:
d2:b9:9d:fc:f2:ef:fe:e6:36:b2:44:93:99:be:14:
ee:b7:97:8a:38:a7:36:2a:57:85:50:c4:ff:51:c0:
87:7d:14:10:d7:ef:58:0a:cf:78:94:5d:c6:10:af:
42:5e:32:df:5c:5a:4e:c2:e6:15:b0:81:8f:e6:5b:
d0:9b:11:cf:a0:a3:16:4d:d5:19:2e:40:eb:15:fd:
4f:83:98:77:21:ca:b6:0e:b9:52:e9:64:38:90:92:
21:08:4b:0e:5d:02:88:22:fb:1b:2d:00:ed:93:0c:
7a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:62:30:F8:2F:7F:DF:54:A2:38:CA:EA:48:22:5F:8B:F2:14:55:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68D52B3A591B11F08EAFD7DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.139.0/24
Signature Algorithm: sha256WithRSAEncryption
50:54:a9:87:3a:aa:07:d2:01:6b:19:cb:98:19:c8:83:58:bf:
13:55:af:7d:05:27:f6:27:d3:1e:a1:75:00:8a:df:bf:06:d8:
29:d9:5a:36:f3:d8:72:48:44:ed:1e:75:66:b2:08:ac:98:b6:
ed:da:e6:13:5e:a3:80:ea:5b:e9:09:53:ac:96:fc:11:f3:9d:
eb:af:98:79:76:58:01:85:5d:26:5d:cb:f4:16:40:00:dd:35:
83:eb:81:a9:30:21:1a:ed:ba:a1:4c:df:ab:f0:aa:12:8e:de:
06:a0:d9:b8:33:45:b1:f5:c9:f0:f8:c5:37:a9:93:f4:fa:b9:
50:97:ba:65:7c:4e:1d:a6:b3:5c:ad:2d:c0:16:4c:cd:ce:39:
9a:3c:ba:1e:77:b9:10:3b:e4:86:c6:07:72:eb:5f:1c:6a:7f:
b1:fb:3f:60:17:93:b3:61:80:e6:07:74:ff:cf:b8:06:3f:cd:
ab:d0:6e:5f:55:7f:67:df:5b:b5:fa:71:8c:e7:d4:f0:f5:5f:
0c:57:84:80:d2:76:33:37:7d:63:ca:ca:f5:71:f7:aa:d4:03:
95:39:37:86:f3:89:65:78:96:22:b0:ae:66:0e:ad:c6:3a:bd:
8b:0a:51:fb:b1:ce:3a:f3:49:ec:0a:80:06:c2:02:18:b8:a3:
96:e3:38:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:37:20 2025 by rpki-client