Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73185A324B7D11F0B6E164BEDAE4EC9C.roa
File: 73185A324B7D11F0B6E164BEDAE4EC9C.roa (raw, json)
Hash identifier: ni1R1vVEN7GwNE5s27dQfoDjI6DlSgEbhPtDS4Ws68w=
Subject key identifier: 6D:6F:A8:03:19:6C:C4:BB:40:64:FF:E2:31:9B:8B:BD:E9:E0:8F:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015CAE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73185A324B7D11F0B6E164BEDAE4EC9C.roa
Signing time: Tue 17 Jun 2025 13:17:43 +0000
ROA not before: Tue 17 Jun 2025 13:17:36 +0000
ROA not after: Wed 30 Jul 2025 13:17:36 +0000
asID: 398443
IP address blocks: 156.229.176.0/20 maxlen: 24
156.229.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89262 (0x15cae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 13:17:36 2025 GMT
Not After : Jul 30 13:17:36 2025 GMT
Subject: CN=68516af7-c3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d7:9c:88:94:25:30:fd:e5:87:93:80:b2:38:
f5:51:f9:01:97:1d:ee:98:6d:b0:f0:e2:4f:34:bc:
56:e4:15:73:c3:5a:2e:5d:c8:84:ce:b2:72:53:b8:
04:f4:dd:bf:1b:28:72:cb:74:3d:8d:db:cd:d2:a7:
da:08:28:7b:ae:45:1e:2b:fd:fa:d3:7c:c8:a1:9a:
a6:97:68:5d:20:66:29:f3:98:a3:30:1e:80:4e:66:
03:1a:8b:bc:a3:35:65:6c:81:fb:14:f0:77:83:9b:
b2:a2:a3:3c:61:da:64:76:71:68:c9:2d:1e:d3:bf:
30:cd:de:b7:8b:a6:89:77:0f:00:cd:19:e2:c0:77:
1e:99:7a:63:16:97:10:e6:1a:de:13:56:ca:1a:23:
73:0a:7d:3c:1a:17:64:b5:ca:7c:e5:b0:1c:4c:3e:
07:27:6e:91:fe:10:e1:48:00:6e:6f:74:0f:e4:a9:
65:b6:63:36:1d:81:81:d7:fb:ab:08:b3:b4:d1:79:
d3:88:14:37:14:87:1e:a7:f6:48:0a:06:e9:dc:04:
b9:a5:2c:45:b9:87:4f:3e:b3:87:92:72:b6:ff:83:
78:05:f9:f9:e1:20:53:4d:0b:62:8a:55:72:8d:e4:
10:81:3e:dd:75:54:35:f5:59:03:3d:e4:cd:4b:36:
bb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6F:A8:03:19:6C:C4:BB:40:64:FF:E2:31:9B:8B:BD:E9:E0:8F:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73185A324B7D11F0B6E164BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.176.0-156.229.223.255
Signature Algorithm: sha256WithRSAEncryption
05:c1:47:72:2a:b0:72:bb:23:75:56:a9:80:52:1f:4a:41:25:
cc:ea:ec:6d:72:4a:53:68:9a:01:e5:f9:d7:0d:f9:65:7c:0c:
b0:75:12:f1:01:06:80:2e:cc:30:18:bb:c2:88:65:04:80:2e:
67:54:83:5c:9d:94:07:73:ac:57:da:8b:63:41:2b:ce:b5:76:
4f:c3:b8:9c:57:6b:d9:9f:56:2a:11:a4:be:5c:45:d9:02:f4:
27:6a:ce:b5:a9:53:71:e7:d2:e1:69:37:fa:68:8e:af:bd:08:
1b:30:51:69:4d:43:c8:16:6a:63:7a:11:98:83:7c:da:80:a4:
53:9f:52:22:ff:56:b2:7d:1b:95:ed:f8:61:d3:d5:8c:42:96:
c0:84:44:bb:1e:ed:43:6d:c5:6b:94:41:a7:f5:8a:51:d1:fc:
35:7e:3d:7f:4d:0f:91:b5:3f:f5:48:72:0a:bd:74:5d:07:57:
93:4a:10:b5:dd:56:e6:76:f0:cb:15:dc:ce:b4:c5:5f:04:ab:
bc:67:1f:8d:f4:9f:f3:64:6b:15:92:9e:c0:0f:55:ef:bd:c4:
1a:a0:b7:aa:dc:63:30:70:ce:6a:71:dd:e3:bb:c0:3f:bc:88:
90:ce:ae:ca:f2:7a:38:15:25:1e:11:0b:f9:0e:e5:f8:b4:8e:
49:2a:bb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:40:08 2025 by rpki-client