Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D76BDDB85E4E11F0AFF87F92DAE4EC9C.roa
File: D76BDDB85E4E11F0AFF87F92DAE4EC9C.roa (raw, json)
Hash identifier: PWoJGCo04vBI1RqzpZjBlRVcXnGBNR7Aj6DsF19B5A0=
Subject key identifier: 82:82:5C:A8:B3:29:AB:06:22:96:AE:21:B2:8C:F0:0E:04:A6:BA:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016498
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D76BDDB85E4E11F0AFF87F92DAE4EC9C.roa
Signing time: Fri 11 Jul 2025 12:01:57 +0000
ROA not before: Fri 11 Jul 2025 12:01:52 +0000
ROA not after: Sat 16 Aug 2025 12:01:52 +0000
asID: 58879
IP address blocks: 156.255.2.0/24 maxlen: 24
156.255.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91288 (0x16498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 12:01:52 2025 GMT
Not After : Aug 16 12:01:52 2025 GMT
Subject: CN=6870fd35-e70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:82:f8:08:41:3c:a2:75:a7:f3:44:9a:4e:
47:6c:4d:d8:0d:d3:2c:c0:7b:f1:52:9d:cb:78:3e:
b4:c9:a0:36:8b:57:b9:c4:65:1e:30:0e:e0:0e:f6:
79:60:f2:d6:8c:b2:fc:f0:8d:57:76:5e:26:b2:29:
3d:ff:06:9c:6f:8e:4d:c2:57:7d:fe:d0:7f:49:3a:
9b:3a:75:d2:fe:e7:a8:f9:6f:b9:0a:7e:51:3f:e6:
e2:5a:7e:73:aa:0b:99:a3:5d:d2:63:4b:68:15:50:
3b:92:54:21:28:b9:98:55:07:5c:19:a4:da:df:f3:
4a:fd:9c:3f:b9:24:b6:37:bb:d3:e9:aa:70:97:06:
d6:89:aa:d7:b0:c9:ab:57:50:1d:69:da:8c:7a:09:
0d:d7:ef:5b:39:02:44:dd:67:b6:7e:e5:e9:ea:65:
b7:c5:59:97:09:70:c8:4d:86:83:65:82:5e:7b:cf:
e2:54:22:63:10:cb:05:a9:8d:6d:a0:27:72:c8:3e:
c1:9c:36:4d:36:69:02:63:19:d1:97:ad:92:ef:5c:
1b:38:e8:5a:27:5e:77:10:1c:25:d8:a8:93:67:26:
db:86:24:7c:cd:a5:c5:5a:c5:e4:8c:da:86:3b:92:
ee:dd:a3:b9:f1:7a:f0:2d:b8:72:f9:35:17:af:15:
b1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:82:5C:A8:B3:29:AB:06:22:96:AE:21:B2:8C:F0:0E:04:A6:BA:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D76BDDB85E4E11F0AFF87F92DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.2.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:23:d2:72:2c:c0:79:02:2b:37:95:8d:41:4e:1d:96:06:0e:
0e:b0:a3:c8:0a:bd:12:d4:f5:1c:a8:ee:79:82:89:6e:74:98:
b0:6b:6c:05:13:b9:d0:16:5e:f3:f7:b8:c8:3c:93:63:e7:5c:
89:f2:2c:3f:e7:ce:1a:59:6b:42:2c:67:8c:8f:79:44:69:6f:
ea:b7:11:89:41:26:33:19:21:55:7e:14:97:43:88:1d:16:75:
37:70:f4:e0:c1:2b:98:77:d9:7c:87:35:62:ab:78:be:de:09:
80:c7:f0:c6:ce:d9:d3:c9:90:33:b2:79:87:16:ee:d0:a8:fc:
4b:2e:f3:9b:ef:24:41:c1:97:d0:de:0e:13:f0:3a:c1:44:e1:
0b:4d:9a:07:a1:18:9b:70:bf:16:10:84:47:79:9f:04:a0:8f:
70:71:31:6f:f5:f1:5b:ea:ad:53:e7:7d:79:49:7e:6b:c9:f0:
49:eb:21:f2:9f:54:f3:98:0e:40:46:4d:7a:43:46:d3:ed:8a:
0a:e7:48:8e:85:00:c9:17:d0:e1:77:c1:b3:61:81:ec:08:57:
4d:57:f9:cf:d1:19:d0:16:a1:63:3e:b5:99:d7:24:22:1f:19:
7e:1c:d1:b2:4e:ad:a6:58:d2:9e:35:22:a8:0e:82:f5:9c:79:
b8:97:14:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:31:02 2025 by rpki-client