Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B050FC085E4F11F0BD4C5F98DAE4EC9C.roa
File: B050FC085E4F11F0BD4C5F98DAE4EC9C.roa (raw, json)
Hash identifier: x1BrhVJ0ovI7j45IlnFvG/15eFU18hrKRgwkqsD7zu8=
Subject key identifier: 3E:AE:7E:C3:4D:CA:2C:CC:81:A8:C8:1E:C4:0C:EE:6F:40:E2:0F:FA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01649C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B050FC085E4F11F0BD4C5F98DAE4EC9C.roa
Signing time: Fri 11 Jul 2025 12:08:01 +0000
ROA not before: Fri 11 Jul 2025 12:07:56 +0000
ROA not after: Sat 16 Aug 2025 12:07:56 +0000
asID: 137443
IP address blocks: 156.255.2.0/24 maxlen: 24
156.255.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91292 (0x1649c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 12:07:56 2025 GMT
Not After : Aug 16 12:07:56 2025 GMT
Subject: CN=6870fea0-a510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a4:16:ba:73:77:74:5d:9b:a0:f2:d8:10:c7:
55:62:76:09:26:82:cd:12:29:ea:56:48:e5:2e:4d:
e6:b8:b0:b2:03:1e:cc:e8:21:b5:92:98:97:23:6f:
d0:54:fc:11:b3:98:b8:21:86:24:2c:65:9c:82:63:
cc:58:ee:0f:a2:f0:7c:3f:e8:48:4e:88:a1:1f:37:
d8:03:b7:8e:be:96:6d:ce:24:87:7e:52:cb:a6:5d:
be:96:d0:7a:c7:fb:76:a9:01:03:22:d5:c0:f4:57:
ac:52:52:da:81:26:23:f4:17:27:35:27:f6:d2:1b:
87:36:23:8a:77:95:0a:3a:21:a2:9e:1e:74:82:5c:
3d:75:a8:e2:6d:08:a0:7e:be:9b:df:5a:65:92:1e:
58:de:e0:e3:cc:75:8e:0b:cd:72:dc:cd:04:c9:62:
36:a9:0b:b4:2a:47:50:98:a4:56:ad:7f:82:8f:bb:
62:b2:e9:af:44:1f:47:d7:e5:40:f1:96:d7:9a:98:
32:4f:6a:98:db:dc:7c:59:f8:56:31:70:d5:b3:5b:
e6:40:fa:08:f1:c3:bc:50:91:e0:0d:01:0b:b4:78:
07:27:64:3c:ea:96:39:50:d9:a6:16:91:ae:16:2f:
10:fa:8f:0d:d3:cc:35:a6:2f:ef:1c:7e:d7:b3:a9:
21:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AE:7E:C3:4D:CA:2C:CC:81:A8:C8:1E:C4:0C:EE:6F:40:E2:0F:FA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B050FC085E4F11F0BD4C5F98DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.2.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:d1:51:e5:e0:39:71:5d:0d:56:ab:d5:dc:c9:a0:44:4f:9b:
8f:fb:2d:fc:b4:97:61:97:60:f0:bb:ff:d0:32:d4:22:40:2c:
10:a9:c4:f6:e9:d3:93:24:d4:08:84:a7:a9:50:62:65:f8:b3:
c3:82:d4:eb:fd:45:e7:2c:e8:63:a6:dc:8d:24:4f:b8:aa:eb:
de:97:0e:8a:8c:c6:8c:f2:1d:38:e1:a9:2d:3f:4f:42:7e:9c:
72:ea:b2:ac:51:d0:df:03:17:12:32:d3:e2:f9:9c:b0:51:72:
25:e8:a8:90:c7:bf:9b:32:69:23:3e:09:6d:a8:76:af:17:a3:
9d:ea:f3:24:2b:fc:61:7a:fa:9e:4a:b5:01:26:5e:e5:61:b4:
60:5e:fb:f2:62:c0:39:89:89:d9:8d:c1:7b:5d:4d:df:d1:8c:
e5:ad:b6:1e:c0:a2:43:db:14:fa:8d:38:95:50:7a:47:00:d3:
4e:21:43:aa:77:48:3e:26:13:e2:16:15:7a:72:ad:5e:e0:3d:
f7:e0:3c:bd:29:c5:17:fe:86:54:cf:4c:ca:2a:c3:d9:8b:c2:
f9:d3:24:a9:59:a0:05:c2:c6:5c:88:d0:f2:ed:07:03:d9:d9:
65:4f:8f:ce:19:47:ba:72:90:e4:67:74:56:78:ae:fb:f2:38:
e2:86:1a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:26:46 2025 by rpki-client