Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C470CEF462EE11F0B5E5CFC2DAE4EC9C.roa
File: C470CEF462EE11F0B5E5CFC2DAE4EC9C.roa (raw, json)
Hash identifier: GTwvFjxev90CloPdX0s0oUEXas6c4npI4gOuJg/mR0Q=
Subject key identifier: 55:23:EB:33:B8:20:18:7F:BA:AB:57:38:62:78:4E:A9:F3:A2:8C:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0165C8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C470CEF462EE11F0B5E5CFC2DAE4EC9C.roa
Signing time: Thu 17 Jul 2025 09:16:49 +0000
ROA not before: Thu 17 Jul 2025 09:16:44 +0000
ROA not after: Sat 26 Jul 2025 09:16:44 +0000
asID: 198247
IP address blocks: 156.238.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91592 (0x165c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 09:16:44 2025 GMT
Not After : Jul 26 09:16:44 2025 GMT
Subject: CN=6878bf81-6418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b4:ac:3e:fe:83:25:ae:e1:1b:c6:cd:01:50:
46:82:b7:ff:63:70:12:ec:8f:7c:68:6a:41:89:07:
a2:70:6d:9d:da:da:da:a3:2c:98:1b:4d:a1:24:0c:
12:60:66:f7:aa:02:3c:7f:70:4d:74:4f:2a:09:8a:
1e:ad:ac:d4:a0:db:04:c1:61:83:e8:1f:c4:19:58:
1b:64:93:77:c3:c7:a2:1b:33:ba:33:81:ed:0d:ee:
a3:eb:4f:36:f8:06:98:a8:39:84:c9:9d:90:65:6e:
43:26:c3:9c:0e:bd:d7:2e:68:d4:b1:8b:f8:d0:49:
69:57:59:e2:df:9e:02:83:bf:f6:3f:5a:4c:a6:2d:
6b:bc:6d:d6:bc:61:ee:59:62:99:6f:ca:16:83:d6:
d2:26:03:72:de:f7:a3:eb:29:35:99:85:3a:d0:38:
72:ca:22:06:9e:d7:32:36:de:04:c7:c4:80:0f:69:
02:76:15:ba:cd:40:c6:4c:36:0b:a3:bc:83:3e:f1:
0e:98:fd:14:60:bc:0c:64:b5:88:10:f0:43:68:da:
cd:2e:d2:6a:27:3e:d3:9f:66:e8:2a:2b:e1:8b:75:
cc:e6:dd:c4:9c:84:71:fe:46:5e:3c:7f:15:b3:d8:
96:c7:a0:81:ad:9f:76:e4:86:59:0b:7d:a2:3d:32:
13:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:23:EB:33:B8:20:18:7F:BA:AB:57:38:62:78:4E:A9:F3:A2:8C:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C470CEF462EE11F0B5E5CFC2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.84.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:fe:8a:24:c8:ec:a6:b4:c7:70:e6:01:a8:8e:77:38:0d:0d:
d0:99:6b:1f:de:c8:a9:42:3c:07:41:75:55:62:ce:7b:3d:13:
d1:12:dc:4a:2f:e4:f7:a3:07:bd:0d:c6:80:b8:55:b9:ca:92:
cb:b4:f2:84:a2:36:4c:76:61:a9:ca:9a:f7:cf:62:99:6d:fb:
9c:ad:fc:1d:0f:f9:54:8a:c4:15:ea:e4:8f:0b:69:cf:73:06:
8d:6e:5b:5a:7d:13:c8:c4:3a:bc:1f:d4:60:a9:25:48:70:ea:
7d:82:8b:35:b9:9d:aa:47:a5:eb:cb:e2:04:16:26:52:46:29:
43:70:5c:4a:dc:84:86:ba:e8:c3:6d:54:33:eb:e2:9b:a7:56:
ff:49:97:e1:28:56:e6:33:4a:c9:dc:6a:a2:2c:62:25:db:ba:
9e:35:99:7c:f4:77:37:54:c6:74:41:6e:d3:38:40:fc:3f:ac:
35:62:17:9d:c9:f0:eb:45:e9:3f:d1:f2:5d:29:50:1f:9f:22:
a5:79:5d:27:b4:f4:d0:ac:04:c1:25:56:9a:ad:1e:92:06:4b:
cb:af:38:34:8e:f5:54:f0:dd:7c:20:3b:70:a2:d5:2b:a6:b4:
30:37:2d:14:ea:07:40:cd:c4:a1:a5:99:00:ee:0f:75:54:5e:
bf:49:29:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:26:47 2025 by rpki-client