Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8E4A9925E7B11F0A16000B2DAE4EC9C.roa
File: B8E4A9925E7B11F0A16000B2DAE4EC9C.roa (raw, json)
Hash identifier: N4hGnHlumYn9xWXBkcjFbh7IWNK1xDhW50n7Rnz8tOw=
Subject key identifier: 83:C9:91:3B:6D:AD:00:1B:F1:C4:79:87:5F:31:E5:83:24:A2:5F:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0164CA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8E4A9925E7B11F0A16000B2DAE4EC9C.roa
Signing time: Fri 11 Jul 2025 17:23:13 +0000
ROA not before: Fri 11 Jul 2025 17:23:08 +0000
ROA not after: Sun 20 Jul 2025 17:23:08 +0000
asID: 133929
IP address blocks: 156.224.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 20 Jul 2025 17:23:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91338 (0x164ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 17:23:08 2025 GMT
Not After : Jul 20 17:23:08 2025 GMT
Subject: CN=68714881-7a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b2:c2:29:ea:17:c7:3f:95:4d:18:10:3f:85:
3e:6f:fc:fe:68:e7:26:c8:d7:61:06:f3:ed:a4:fe:
a9:f1:f4:c3:db:af:33:23:5d:41:5f:cc:31:a6:f7:
39:45:cf:78:59:f2:ba:51:73:1f:51:d2:73:09:9d:
34:25:77:9a:1a:6f:1f:27:15:11:c4:63:4a:0e:94:
0b:32:9c:e9:9d:ae:74:9e:09:0f:3c:61:2e:1d:22:
06:5a:92:8c:c8:2f:78:2b:7a:8f:13:5c:59:21:2d:
33:a1:e4:55:d2:41:74:eb:92:08:27:81:6f:9f:f6:
47:26:e5:25:21:4f:dd:a3:b7:bf:d8:27:99:b6:60:
42:0a:75:62:ef:0c:17:6b:2d:6d:d7:ab:2b:ff:64:
6e:d7:03:43:eb:8b:b3:76:fd:a5:22:de:00:c2:32:
1a:da:bb:dc:15:72:95:9f:34:41:d7:0d:d8:66:9d:
4b:7c:fd:59:99:f0:3e:23:77:07:0b:12:17:83:e3:
82:a6:9d:81:c5:fb:63:ba:33:9e:2d:27:70:d1:a1:
9d:24:20:22:65:18:f2:21:64:ce:9c:30:0e:3f:f1:
7f:28:1c:43:67:7c:80:c4:6e:f3:98:03:40:56:5b:
a0:37:3c:f2:1f:cb:1b:67:d6:ac:2b:c1:d5:26:f4:
72:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C9:91:3B:6D:AD:00:1B:F1:C4:79:87:5F:31:E5:83:24:A2:5F:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8E4A9925E7B11F0A16000B2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.1.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:60:12:23:6d:45:0f:98:90:82:a1:d6:12:42:87:3d:69:7b:
37:bf:ef:8c:3f:d7:6f:52:7b:19:cd:1d:44:87:58:b5:63:9e:
01:99:48:11:9c:e1:a2:18:54:6d:7d:4a:99:d2:38:f2:1d:58:
65:ee:ab:ef:e4:4c:6f:c7:94:df:e7:b8:65:23:1c:f7:e9:e7:
92:14:95:c1:06:12:8a:b5:25:80:c4:f5:03:06:a8:62:61:13:
b1:38:14:d2:b9:da:f4:57:2c:a1:ed:76:4d:ff:9c:63:4d:a6:
3e:c1:32:2e:17:b4:0e:e8:51:75:a3:e5:5e:da:64:a0:80:0a:
32:4c:9a:e9:0e:72:19:55:e6:2e:6b:bc:4d:9e:28:90:a8:2d:
5a:47:5a:9d:47:36:fa:9c:4d:ed:99:90:62:85:8c:bb:11:76:
e1:e1:57:f3:62:bb:89:96:fe:a7:5d:f1:a2:9d:da:af:0c:85:
eb:85:7f:7d:aa:6d:59:81:2a:52:81:17:68:0b:7d:48:2f:1e:
d8:1f:51:73:48:b9:cc:7b:1e:17:d4:4a:d0:0d:89:16:ac:ff:
45:1e:56:f3:c7:4a:bf:d2:f6:14:0f:a9:42:a7:93:a3:9c:d5:
8e:14:ea:65:8a:f8:1e:2c:43:f1:99:b4:9f:9f:a8:48:22:d1:
38:4f:3c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:37:33 2025 by rpki-client