Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2C1677260A211F0B5CD8BC0DAE4EC9C.roa
File: E2C1677260A211F0B5CD8BC0DAE4EC9C.roa (raw, json)
Hash identifier: FXWSdmVHaf3AkkMhXsIqrA+0C2ZXzX7ws+RZcBaOflI=
Subject key identifier: E0:3C:81:BB:DD:43:82:53:BB:69:51:FB:1B:0B:27:DF:AE:6F:C5:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016520
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2C1677260A211F0B5CD8BC0DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 11:08:36 +0000
ROA not before: Mon 14 Jul 2025 11:08:31 +0000
ROA not after: Wed 03 Sep 2025 11:08:31 +0000
asID: 64013
IP address blocks: 156.234.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91424 (0x16520)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 11:08:31 2025 GMT
Not After : Sep 3 11:08:31 2025 GMT
Subject: CN=6874e534-c591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:21:2d:25:9c:c4:af:e8:77:1f:5a:f7:83:20:
bc:dc:40:53:cf:0d:70:f4:e0:ec:0e:e4:af:58:ce:
6d:29:4d:f8:b8:d5:c3:7d:87:8e:ac:99:9c:f9:4b:
1e:39:14:40:24:5d:5b:20:7e:8c:53:cd:35:46:f5:
14:8e:53:b1:c2:fd:6f:7a:de:ba:1d:35:72:dd:55:
0e:3a:0e:dd:5d:ae:ba:d1:ca:2d:3e:3e:73:26:b2:
1c:35:18:4b:a1:14:b8:d6:00:9a:2b:47:93:ae:7c:
b0:b6:ce:c6:98:8b:51:9f:e8:8b:a8:06:cd:37:1a:
63:f0:d1:97:0f:e8:70:6b:d1:b6:60:c1:67:c2:02:
48:35:4a:89:35:26:ba:1b:3b:8b:7d:51:91:e5:c6:
e7:91:36:da:70:37:3e:f8:55:db:51:92:ce:91:c7:
f3:c8:a2:3b:bf:d3:07:6f:2a:c7:4c:9f:b6:88:8e:
e5:d8:6d:e4:22:a0:48:e9:50:f7:bd:be:50:ab:8e:
f9:8e:0b:94:5f:d3:1a:1f:14:a1:bc:e9:41:18:78:
71:24:26:31:f3:da:df:80:fe:c5:4d:43:09:f6:af:
1d:30:e3:1f:72:54:06:da:1e:15:b9:7e:93:6c:fe:
26:f3:7f:cc:f1:e6:dd:6d:84:61:5a:05:a8:59:09:
c6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3C:81:BB:DD:43:82:53:BB:69:51:FB:1B:0B:27:DF:AE:6F:C5:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2C1677260A211F0B5CD8BC0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2c:ce:f6:49:a3:bd:15:9a:57:81:0f:89:9d:fb:61:f4:d0:3c:
be:51:3f:14:00:23:4f:2c:2a:ae:b2:b9:73:a2:b5:ca:bd:19:
c5:20:7b:9b:a6:a3:41:03:6a:d4:9d:7d:bd:12:45:0b:08:fb:
bc:fc:1c:c2:ca:78:f2:a4:77:ca:94:54:40:d8:79:5b:cd:8c:
33:72:f7:73:6b:95:1f:86:8e:07:b6:cb:7c:a8:9a:88:f5:6b:
9f:d2:12:ca:18:f2:23:c0:9f:ed:d7:3d:d6:47:77:33:11:37:
47:49:16:af:69:f5:94:70:e1:7c:a2:01:64:71:f4:cf:39:8d:
6a:47:11:4c:81:89:d4:6c:d3:eb:32:bf:ca:33:54:72:82:2e:
3e:d6:a4:95:02:d1:d3:c5:0b:3a:1d:a2:54:64:a5:98:b0:db:
c6:fc:c1:2a:74:56:21:fa:59:46:67:74:b2:0c:53:96:28:43:
0a:0c:10:ba:0c:38:fe:02:3b:d3:89:3a:6d:c3:68:80:7b:d0:
e0:c5:4a:d1:b3:a3:63:a9:16:a8:43:c4:1c:94:31:97:aa:96:
f6:98:b5:47:14:1a:57:83:71:d8:6e:86:b2:11:79:1a:da:84:
05:db:60:14:1c:b9:bc:1e:12:e9:25:33:a5:8e:47:d4:66:0f:
6b:7a:e9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:36:03 2025 by rpki-client