Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DEC01C4381611F0823FCBF5DAE4EC9C.roa
File: 0DEC01C4381611F0823FCBF5DAE4EC9C.roa (raw, json)
Hash identifier: tWJwnz69d0iKgtePg74yfL7bdgKVvo1rOKAIgrGAzmE=
Subject key identifier: F4:BB:B2:E0:C9:E3:64:C1:4E:15:39:AC:FB:26:FC:E5:32:42:9D:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01572B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DEC01C4381611F0823FCBF5DAE4EC9C.roa
Signing time: Fri 23 May 2025 20:39:43 +0000
ROA not before: Fri 23 May 2025 20:39:38 +0000
ROA not after: Wed 17 Jun 2026 20:39:38 +0000
asID: 394432
IP address blocks: 156.245.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87851 (0x1572b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 20:39:38 2025 GMT
Not After : Jun 17 20:39:38 2026 GMT
Subject: CN=6830dd0e-d6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:e3:3a:0c:d0:0b:76:41:58:40:83:3b:6f:
78:f5:aa:56:d4:4e:11:9f:c3:dc:eb:a9:93:ad:a6:
18:8f:b4:3d:12:5e:1e:76:40:ec:67:53:e0:23:61:
79:83:aa:d3:64:3f:0f:33:1f:b3:55:e4:88:2b:ef:
67:5b:c9:4b:7d:87:58:89:d2:6c:1b:e7:39:96:f0:
05:68:91:09:ad:52:71:2b:12:99:23:85:26:8c:07:
1c:35:74:7d:53:37:5e:72:d1:88:bc:dd:19:9b:53:
ee:d9:53:a0:50:a3:67:1c:75:0d:92:c5:85:14:ed:
93:c2:cb:fc:51:91:82:e5:a6:0f:9b:bd:35:4b:11:
f2:76:ea:15:ea:c5:cd:60:5b:47:c4:f9:a2:a3:dc:
80:15:ea:af:d9:f0:f9:13:fc:00:07:f8:e9:d6:59:
8e:0a:2f:7f:9b:24:4f:98:32:77:5e:72:21:bd:ba:
fb:74:60:18:a7:9c:cd:09:84:d8:02:cb:46:e6:d3:
f6:91:c5:68:98:ba:99:d9:34:a8:13:5d:9f:3a:91:
56:ea:7a:37:f7:28:c8:53:90:46:20:eb:51:37:a2:
ee:9b:48:a6:c8:da:c9:13:7a:97:b3:67:9f:e1:d0:
da:c7:75:aa:85:97:81:8b:fe:46:01:6d:93:6b:14:
5d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BB:B2:E0:C9:E3:64:C1:4E:15:39:AC:FB:26:FC:E5:32:42:9D:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DEC01C4381611F0823FCBF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.64.0/18
Signature Algorithm: sha256WithRSAEncryption
37:f0:df:6e:9e:2f:8d:fd:a6:b6:e0:a9:8b:9f:c8:5d:3d:cb:
e2:68:37:d5:45:c7:7a:23:e9:76:22:e3:62:d5:1d:7c:55:b8:
56:ee:d0:f2:a4:a3:b5:e3:e5:a5:84:bc:50:6c:53:8d:f8:44:
1b:86:73:58:27:e1:80:61:fd:5d:a0:35:48:88:72:19:eb:48:
af:40:41:bf:1a:b3:c8:d1:31:19:4e:0d:26:95:f2:62:00:53:
a1:00:a2:aa:91:27:bc:82:53:c1:00:4d:c0:bd:6c:50:7d:90:
7c:94:17:71:d2:c0:07:dd:4c:50:5e:bd:c6:83:4f:4d:77:3b:
81:54:94:2a:22:80:75:a4:dc:59:d5:70:f5:a8:eb:7c:bf:32:
46:84:b1:d8:19:22:e4:03:3a:b4:bb:c4:69:b1:5a:f6:23:a7:
cb:ca:ff:d7:5d:06:3f:07:6e:c2:e6:7d:14:d8:5d:66:67:6c:
7e:4c:e6:01:35:be:47:44:52:56:ac:a5:01:92:4d:bf:3b:ee:
16:d5:46:e6:c1:56:b5:7a:b7:14:77:40:cb:a3:8d:10:c9:fc:
79:b6:14:8a:91:a4:ae:9e:87:d0:a0:07:d5:89:01:97:99:18:
78:07:3f:af:35:a3:54:3b:82:2b:d9:1d:c6:14:cd:9a:a0:21:
79:68:2b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:26:07 2025 by rpki-client