Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7034EF64CF811F0B5B79A7ADAE4EC9C.roa
File: B7034EF64CF811F0B5B79A7ADAE4EC9C.roa (raw, json)
Hash identifier: 6RQ7SEErpbM3dKNQ/jBlHZhz5rYWqzuATvkxvqhQKnc=
Subject key identifier: 82:C4:7B:D8:66:08:F9:BF:6B:F0:B5:50:15:BA:2E:22:25:22:F2:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015D2C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7034EF64CF811F0B5B79A7ADAE4EC9C.roa
Signing time: Thu 19 Jun 2025 10:32:36 +0000
ROA not before: Thu 19 Jun 2025 10:32:31 +0000
ROA not after: Thu 25 Sep 2025 10:32:31 +0000
asID: 328608
IP address blocks: 156.227.204.0/22 maxlen: 24
156.227.208.0/21 maxlen: 24
156.229.68.0/22 maxlen: 24
156.229.80.0/20 maxlen: 24
156.229.96.0/22 maxlen: 24
156.229.112.0/22 maxlen: 24
156.229.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89388 (0x15d2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 19 10:32:31 2025 GMT
Not After : Sep 25 10:32:31 2025 GMT
Subject: CN=6853e744-d1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:88:c1:1e:d4:92:1f:96:a3:c9:e6:5c:43:9c:
60:5f:35:4c:d1:e5:0e:2a:ed:88:ce:d3:89:ce:36:
bb:6a:aa:d2:cf:d6:30:bc:9e:e7:72:40:43:dc:47:
9f:20:97:0b:21:b1:be:6b:79:67:81:56:4f:34:5b:
91:77:bf:91:19:d1:3e:88:09:fd:bb:bb:ab:63:be:
54:1d:28:74:bc:52:22:79:7b:ad:67:7a:2b:a7:95:
1b:c4:84:1d:ca:3f:8c:bc:27:4e:70:50:17:b0:27:
01:3b:7c:57:18:97:89:e8:58:6f:80:32:4e:f5:e2:
5c:28:57:af:72:c4:ef:91:e1:69:67:51:1d:4d:f4:
38:0d:56:33:8e:7f:66:3b:c1:a2:51:3f:82:49:f9:
b6:66:fd:b2:0e:54:99:1a:f8:7f:25:95:82:cb:b8:
28:e1:6a:6d:ab:4c:17:07:1a:f6:f5:8d:55:f0:78:
38:d2:6d:e1:47:e6:91:01:e3:e6:d8:a4:56:36:5c:
09:bf:96:09:2d:9f:f4:6b:fa:90:86:d5:46:1d:ae:
ad:5a:4a:81:b4:59:4b:68:73:1d:cb:58:05:b1:54:
ce:f8:90:b0:8a:07:d7:6a:3d:e4:36:8a:aa:99:9e:
be:ae:04:76:14:bc:b4:2b:33:43:79:15:01:70:52:
8a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C4:7B:D8:66:08:F9:BF:6B:F0:B5:50:15:BA:2E:22:25:22:F2:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7034EF64CF811F0B5B79A7ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.204.0-156.227.215.255
156.229.68.0/22
156.229.80.0-156.229.99.255
156.229.112.0-156.229.117.255
Signature Algorithm: sha256WithRSAEncryption
3f:c4:e7:6c:77:01:56:35:38:95:7d:1f:03:3c:0c:ba:e0:14:
84:bc:1e:04:3a:a0:a5:13:2a:96:aa:97:fd:ff:4b:32:6a:00:
95:df:96:b8:51:0b:05:47:2e:52:81:3d:37:6c:be:72:b9:07:
f3:87:61:6b:5b:46:16:13:78:fa:da:bd:cd:58:09:e3:de:53:
e4:69:b5:ed:d2:e8:42:55:33:d3:4f:2e:bd:6e:ed:d3:c7:dc:
fd:d5:cf:83:d6:0d:1d:c7:50:68:32:a7:7c:5e:72:9f:31:47:
9e:af:22:1c:bd:04:59:09:60:62:f4:bd:1f:ad:65:90:56:59:
53:d4:d5:4d:03:a7:0d:da:ca:a0:97:70:47:33:d7:63:ca:eb:
17:34:5b:be:9c:4e:21:88:9c:d8:2a:43:e4:07:58:3e:37:0b:
8f:c4:12:44:5b:46:ea:6f:cd:aa:fc:5c:32:82:c6:38:89:4f:
30:de:d0:13:eb:68:81:11:fb:0c:bc:e1:90:20:24:36:42:4d:
6a:cb:87:57:1f:a2:65:cf:a5:c4:75:26:f6:29:4a:27:04:06:
9f:90:da:18:e0:12:0b:f9:46:70:a2:7d:48:07:6a:0f:55:35:
de:4e:d8:5e:de:fa:9e:00:66:81:0a:48:fa:46:8d:86:ff:54:
6f:c9:37:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:35:58 2025 by rpki-client