Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A7419BE50F011F0803F3DC4DAE4EC9C.roa
File: 8A7419BE50F011F0803F3DC4DAE4EC9C.roa (raw, json)
Hash identifier: IMmwHeQdeh+YwH1OYNuze2dB/Zbn8yEFBER3CcA50aI=
Subject key identifier: 53:7E:AD:F5:09:8A:07:65:05:74:1A:90:19:21:60:20:45:ED:D4:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015E66
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A7419BE50F011F0803F3DC4DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 11:44:10 +0000
ROA not before: Tue 24 Jun 2025 11:44:05 +0000
ROA not after: Thu 31 Jul 2025 11:44:05 +0000
asID: 44509
IP address blocks: 156.231.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89702 (0x15e66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 11:44:05 2025 GMT
Not After : Jul 31 11:44:05 2025 GMT
Subject: CN=685a8f8a-cd0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e3:b3:38:c3:0a:72:71:50:2d:08:c6:35:dc:
1f:8f:e9:ad:99:9a:f0:7d:a2:1f:74:cb:f9:d4:23:
b3:a8:e2:62:aa:2c:05:16:f9:45:de:25:bb:5a:15:
2b:a4:70:ec:61:ba:2d:11:64:8d:61:6e:93:2b:c9:
d5:f9:63:64:6a:43:2a:41:44:e0:9d:96:ee:ba:b8:
dd:26:8f:4e:f3:a7:56:df:19:df:f2:4c:e4:ed:9e:
33:40:33:ca:58:cf:25:bf:42:71:58:f2:4c:24:0c:
39:ee:35:35:6f:db:4f:21:07:ff:ec:2c:b9:61:32:
5b:69:90:38:cd:31:7d:23:50:e6:a2:52:05:cc:7f:
66:4f:3a:b1:a1:0e:63:c4:4f:e1:c5:ce:81:0f:57:
76:d9:f6:40:67:06:fc:64:6b:62:ee:8b:2d:6d:89:
00:2c:4d:46:90:6c:00:36:5d:70:33:9a:4c:e1:0d:
87:5d:9b:b0:24:90:3c:7c:a9:26:86:2f:13:51:db:
8f:55:2e:2d:83:c8:9c:19:03:b7:5a:e1:62:d2:c6:
ae:b7:91:27:6f:ce:e0:9e:30:28:ed:e9:a3:ac:3a:
b7:e1:37:ab:38:e4:a0:45:3a:08:3d:c4:8a:95:98:
6b:a4:29:0a:3f:61:19:5a:a8:11:6d:e4:ff:00:d0:
da:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7E:AD:F5:09:8A:07:65:05:74:1A:90:19:21:60:20:45:ED:D4:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A7419BE50F011F0803F3DC4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.111.0/24
Signature Algorithm: sha256WithRSAEncryption
06:1e:7a:0d:1f:6e:bc:3c:37:5f:66:0e:8b:b1:dd:a0:d5:cb:
2f:cb:58:5f:fa:2a:09:12:01:36:74:91:b0:33:b2:88:90:10:
9a:44:4a:d3:3f:09:a8:91:0e:2e:4c:3e:a6:6c:b3:f6:4c:e7:
b4:0b:da:98:a9:ac:2d:ff:11:dc:3a:b2:b6:8b:52:cf:80:5f:
56:08:43:f1:12:8f:ce:4b:35:e0:84:0a:09:85:11:8f:76:cb:
55:35:d2:22:01:a1:e4:da:f3:9f:bf:f4:07:e0:39:cf:47:87:
66:e6:3a:a1:3c:53:30:a6:26:d7:91:a3:7a:f2:e1:cb:dd:58:
b3:06:d1:cd:64:c9:68:a0:5f:56:4c:b0:67:44:41:3c:84:94:
8f:65:30:f0:29:fb:4c:c0:09:5a:43:e9:ee:9f:86:a8:2a:d7:
07:af:5f:0a:25:86:b3:f0:d3:21:8e:26:12:3c:a5:65:95:12:
76:9a:01:cd:8f:25:b5:20:da:9a:c6:a3:d2:2e:23:0d:ce:1b:
3f:71:7a:4c:84:53:0a:d5:03:ed:6c:79:17:ee:0d:35:21:59:
46:71:b4:52:ea:9e:50:39:fa:e0:99:c9:84:2a:2b:54:af:04:
76:4b:bc:53:00:7b:2c:21:4b:8c:08:5d:5b:70:eb:9e:78:6b:
52:44:f4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:35:53 2025 by rpki-client