Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7A0C7A6609D11F0B904EA9FDAE4EC9C.roa
File: E7A0C7A6609D11F0B904EA9FDAE4EC9C.roa (raw, json)
Hash identifier: wI022gBV/gJC0wPicg82opfA0OlKsWVpiLFo6venZcQ=
Subject key identifier: 9F:DB:9E:50:51:DB:ED:E8:13:DF:04:0E:4D:A5:1E:B1:6B:12:85:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01650E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7A0C7A6609D11F0B904EA9FDAE4EC9C.roa
Signing time: Mon 14 Jul 2025 10:32:56 +0000
ROA not before: Mon 14 Jul 2025 10:32:52 +0000
ROA not after: Mon 25 Aug 2025 10:32:52 +0000
asID: 61112
IP address blocks: 156.231.139.0/24 maxlen: 24
156.246.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91406 (0x1650e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 10:32:52 2025 GMT
Not After : Aug 25 10:32:52 2025 GMT
Subject: CN=6874dcd8-80dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:02:85:eb:27:88:81:d7:2f:a1:b8:32:b5:98:
76:93:8b:91:7b:83:4d:b4:87:f7:b5:46:25:ca:cd:
d9:9d:27:33:d7:d6:80:5a:ad:92:9a:c7:c3:be:f9:
53:f6:bd:0d:fe:9e:88:e9:aa:a7:c5:9f:bb:8a:de:
5a:ea:0a:52:3c:8f:0b:e9:94:ac:4f:b4:8c:47:f4:
77:1e:4c:3a:b0:19:85:ab:4b:54:2e:de:f0:98:03:
0b:bb:3b:aa:64:8b:c8:96:91:ea:4c:ca:f8:dc:45:
23:cf:c3:16:f9:0b:db:66:3d:bb:e4:b8:bc:8d:b5:
79:84:9e:f8:db:8a:7d:87:4b:55:75:c3:da:92:8c:
54:84:97:f0:59:d9:d3:7a:de:7a:69:04:67:c4:ae:
7a:42:03:76:05:eb:be:12:17:0f:d5:63:33:ff:42:
56:40:4c:5a:f9:94:1a:ae:81:9a:62:d2:94:e0:2b:
db:b2:37:38:42:25:78:1a:dc:ec:20:fc:39:6f:ff:
76:c1:ec:ad:1f:00:20:22:ff:d6:a3:e4:1c:a2:2d:
93:da:74:9e:25:1b:c3:ad:db:61:38:5a:4d:e3:b5:
0c:3e:1a:dc:65:2f:f7:fd:36:5b:e7:ba:cd:12:e2:
ba:5b:ee:2d:8d:80:d4:24:c8:ee:ff:2f:04:43:09:
f3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DB:9E:50:51:DB:ED:E8:13:DF:04:0E:4D:A5:1E:B1:6B:12:85:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7A0C7A6609D11F0B904EA9FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.139.0/24
156.246.88.0/21
Signature Algorithm: sha256WithRSAEncryption
ae:20:9a:c8:1c:22:d2:d9:73:08:ee:57:f5:3c:1a:75:26:23:
e5:d6:2e:90:5c:aa:55:ef:00:90:9a:9e:40:d7:16:f6:f8:43:
14:8e:cb:df:9b:7b:47:84:d4:46:9e:c8:46:79:65:be:1a:0d:
a0:34:e6:f6:59:03:94:68:ca:96:c8:ff:af:14:3c:de:a6:4f:
da:73:40:bf:48:58:6c:fc:5e:5d:d2:67:3d:06:23:9f:34:fd:
04:22:4f:bb:45:36:78:38:a0:d2:a6:56:ac:4d:0a:28:f3:77:
7d:a4:9c:c1:70:98:59:82:a9:0d:93:ff:61:fa:f6:8e:56:17:
64:ae:66:19:e9:89:d3:d9:87:22:6a:b6:67:84:cd:53:34:79:
44:24:80:b5:79:71:8d:5b:c9:43:ff:2d:a0:ad:b3:b1:5b:86:
e3:f7:95:17:05:f1:4d:12:f3:42:57:60:66:06:5a:07:29:fc:
1b:32:5f:ee:8a:c1:30:fe:d7:3c:17:90:7b:ba:4e:77:be:17:
c1:c0:79:12:6e:ee:5b:c3:6a:d1:a1:86:62:f0:53:f1:3c:8a:
2e:3c:39:d6:8c:dd:37:49:61:86:1e:15:97:3c:e4:e7:58:fe:
0d:65:99:b1:e5:da:03:ba:0b:7d:3f:ac:44:8f:76:0d:60:de:
53:6a:ca:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:25:02 2025 by rpki-client