Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4F4000A625511F094178DCDDAE4EC9C.roa
File: D4F4000A625511F094178DCDDAE4EC9C.roa (raw, json)
Hash identifier: kAzaJ5E1fI5bfGrJ5bgTkKIQ86J6Tnt1h5Q+EcViUJY=
Subject key identifier: 64:F9:23:94:FA:D0:DF:F8:79:9B:1E:19:35:B3:BB:0F:6E:57:6C:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0165A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4F4000A625511F094178DCDDAE4EC9C.roa
Signing time: Wed 16 Jul 2025 15:02:04 +0000
ROA not before: Wed 16 Jul 2025 15:01:58 +0000
ROA not after: Fri 25 Jul 2025 15:01:58 +0000
asID: 22773
IP address blocks: 156.238.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91559 (0x165a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 15:01:58 2025 GMT
Not After : Jul 25 15:01:58 2025 GMT
Subject: CN=6877beec-17b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:13:8f:67:aa:3f:57:51:39:fe:a5:53:62:2c:
d2:fa:18:bc:19:f9:25:80:37:d3:4b:85:b5:4f:fd:
a9:29:40:9d:fb:6e:e5:ff:09:97:ab:87:f8:c5:c1:
3a:55:8c:b9:02:9a:54:a7:02:28:88:17:bc:f8:77:
db:40:02:0d:a9:33:f4:5d:9b:cd:86:bf:66:be:23:
de:45:aa:e8:8c:5e:88:0e:7e:fc:7e:c6:ac:15:81:
92:80:42:58:79:9c:e4:87:44:ce:87:6a:84:ed:5b:
f6:c4:e9:d0:1c:73:4d:ba:56:39:d3:cc:a3:7c:73:
f6:81:f8:11:c8:0f:fb:1f:4d:a4:7e:d2:f7:86:c9:
1d:34:3b:29:8d:d4:db:f3:e2:a6:dd:5e:29:a4:30:
4a:29:c0:53:ea:91:40:e4:9f:7d:c6:15:ee:18:4f:
22:76:2a:60:dd:3e:14:aa:0d:dd:d5:35:2b:18:a1:
40:e3:66:9f:78:08:1c:0e:8c:fe:06:29:89:07:89:
47:6f:bc:16:0a:99:c0:21:eb:97:47:74:b7:85:00:
a3:01:81:95:19:5d:26:ac:18:6d:59:1a:ec:08:d3:
2e:68:1b:1f:8c:9f:e9:27:bc:a4:46:c9:0e:1d:f2:
32:a8:45:21:df:3f:7f:2d:02:90:36:44:eb:67:73:
ac:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F9:23:94:FA:D0:DF:F8:79:9B:1E:19:35:B3:BB:0F:6E:57:6C:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4F4000A625511F094178DCDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.176.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:64:4d:8d:3f:2a:e8:f6:12:d4:74:28:48:e5:05:ad:67:b0:
d8:c2:13:96:bc:c2:ed:33:00:0b:5f:92:08:41:fc:d7:74:a5:
85:4a:ff:ee:58:a8:cf:15:6c:77:bc:16:e0:c7:26:18:d3:3d:
fe:55:a2:c7:2f:44:a3:55:32:dd:43:0d:e3:27:4e:4f:08:e6:
1d:9e:96:a5:66:04:f8:11:4f:39:73:ab:b8:cc:64:5a:4d:d5:
91:e3:db:ed:84:f4:d4:06:5f:7c:4b:37:9a:be:f1:5b:74:d3:
35:f2:6b:fe:81:85:0a:79:2f:bb:d0:2c:fd:ac:ec:b8:99:ba:
27:37:75:99:8a:51:89:df:82:da:f1:22:92:ba:ad:c4:68:d0:
dd:60:a3:cc:b3:5a:26:5c:73:f9:54:0f:11:f2:35:05:37:25:
20:59:db:10:e4:91:d4:43:da:d9:ef:29:6f:51:1c:6e:53:9f:
9d:a8:c6:d5:c4:87:a5:8f:be:8c:68:03:46:07:d3:95:27:b0:
dd:19:2e:c2:d7:98:e5:87:65:29:7a:6c:27:6b:f3:9b:f6:2b:
0b:6a:9d:bb:cb:92:83:e5:f2:36:88:7a:95:c7:a5:1a:2e:09:
96:58:2d:62:fb:a2:c2:52:2a:dc:60:5e:23:f7:12:0d:69:03:
a9:c1:03:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:33:30 2025 by rpki-client