Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B6AF4445B2011F09333698FDAE4EC9C.roa
File: 7B6AF4445B2011F09333698FDAE4EC9C.roa (raw, json)
Hash identifier: BjTLyGFwNYGnywKr/lqfZctZsGxN5UckTGKT+kP/OY0=
Subject key identifier: EB:00:08:DE:3D:D9:C9:B9:8A:CB:4F:66:CE:CC:B1:3A:D1:88:2A:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0162FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B6AF4445B2011F09333698FDAE4EC9C.roa
Signing time: Mon 07 Jul 2025 10:52:32 +0000
ROA not before: Mon 07 Jul 2025 10:52:26 +0000
ROA not after: Sun 10 Aug 2025 10:52:26 +0000
asID: 142032
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90876 (0x162fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 10:52:26 2025 GMT
Not After : Aug 10 10:52:26 2025 GMT
Subject: CN=686ba6f0-9d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1d:cb:8b:24:74:a5:22:31:f7:cb:62:93:40:
8f:b3:3d:7c:23:f0:3f:8e:41:b4:f3:42:5b:37:4e:
29:af:df:e6:d3:cf:6e:be:57:57:46:2c:b9:f7:13:
df:30:ff:33:6d:7e:1a:a1:fd:6f:cb:40:bb:9c:3b:
93:90:b1:15:d6:9a:e6:b0:86:bf:3a:98:5a:9d:db:
05:2d:e7:f0:f4:e0:b2:92:58:26:1e:84:79:d1:ac:
79:68:e0:a5:ed:a5:af:0d:c2:39:02:35:7b:68:cc:
71:d6:5d:ea:e1:ec:65:6c:67:33:ea:af:16:00:30:
98:8e:fe:e1:7a:d7:fb:52:73:ff:9f:39:bc:60:e6:
aa:fb:14:6b:e7:59:af:f7:52:95:9d:a4:0f:fd:1f:
05:bd:46:a4:6e:ac:c8:28:74:57:3e:31:a7:a7:a6:
d4:23:13:cd:4b:40:1e:8f:63:2b:82:5d:c0:76:ec:
49:e3:43:37:b4:58:40:59:3f:f5:a9:1b:f6:c4:36:
d1:71:cc:c7:97:3d:f7:22:63:7e:9e:2f:24:4b:80:
6c:07:93:9b:8a:9a:14:47:dc:a6:72:9e:2f:20:32:
cf:eb:9c:a5:b7:5b:90:35:61:5b:64:35:c3:22:42:
1c:9d:e7:bb:a5:18:b5:7f:03:fa:f7:e1:02:8e:74:
e3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:00:08:DE:3D:D9:C9:B9:8A:CB:4F:66:CE:CC:B1:3A:D1:88:2A:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B6AF4445B2011F09333698FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
5b:45:bb:82:ea:e9:73:2c:f2:ab:c5:c3:06:cd:73:b1:05:d7:
fa:01:86:05:0f:8f:4b:7e:28:76:d9:a3:68:01:d7:08:29:3b:
4b:1c:a6:a1:c0:8b:b5:2f:e0:56:0c:23:a1:5f:f0:03:fa:83:
39:d1:f2:b5:3c:7d:2e:f1:63:9f:21:c4:cc:d8:77:b1:d0:64:
6e:b6:4e:50:24:3b:13:74:22:50:65:1d:1a:d4:17:c2:50:4e:
27:ae:5b:ad:76:06:1f:18:b0:2e:70:d7:fa:1d:c0:63:f8:2e:
35:2c:6a:34:2a:61:11:8d:97:4f:09:62:7d:60:0e:52:e4:c3:
f4:9a:bd:f2:69:39:4b:55:0c:6c:a5:1a:30:69:ec:78:0d:1e:
b2:60:73:aa:b5:b0:ab:58:88:b1:cc:18:2e:31:e3:cf:3e:02:
5f:03:57:33:00:ad:03:ed:74:32:24:46:2c:ff:89:2c:f5:1d:
7a:d8:09:a7:c4:dc:fd:aa:3b:c3:f1:f0:76:cf:2b:be:17:ac:
35:bb:2c:f5:fc:5b:16:19:0a:c4:23:37:66:9f:1d:7b:eb:10:
1e:17:d6:d2:18:ad:aa:b6:0e:0f:77:1a:33:ba:25:df:83:96:
5c:6e:f1:60:35:4c:0c:e6:f2:92:fe:f2:fd:a4:f4:d9:f3:0c:
3e:f8:a2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:28:21 2025 by rpki-client