Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E030FFC412811F0B7834483DAE4EC9C.roa
File: 0E030FFC412811F0B7834483DAE4EC9C.roa (raw, json)
Hash identifier: dsY5ly00dNX0Q61xrUgNcw0vzg9x4Je9nAvSQXN7IFg=
Subject key identifier: DD:6B:2D:4D:B6:DC:50:FE:FA:0C:07:9B:CF:E9:18:68:DD:6B:A8:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01599D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E030FFC412811F0B7834483DAE4EC9C.roa
Signing time: Wed 04 Jun 2025 09:41:14 +0000
ROA not before: Wed 04 Jun 2025 09:41:09 +0000
ROA not after: Tue 08 Jul 2025 09:41:09 +0000
asID: 200373
IP address blocks: 156.228.107.0/24 maxlen: 24
156.228.108.0/24 maxlen: 24
156.228.109.0/24 maxlen: 24
156.228.110.0/24 maxlen: 24
156.228.111.0/24 maxlen: 24
156.228.112.0/24 maxlen: 24
156.228.113.0/24 maxlen: 24
156.228.114.0/24 maxlen: 24
156.228.115.0/24 maxlen: 24
156.228.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88477 (0x1599d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 4 09:41:09 2025 GMT
Not After : Jul 8 09:41:09 2025 GMT
Subject: CN=684014ba-45cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:b1:34:0a:36:78:9e:06:40:8d:2c:9a:50:
24:48:0a:51:cf:1f:7a:60:b9:c5:91:37:bb:32:e8:
a1:0c:0b:81:05:75:12:5c:81:63:03:99:20:ad:69:
02:cb:17:b4:c7:64:e7:dd:8b:47:56:d9:92:e8:7a:
01:39:06:70:4e:3d:63:35:01:d3:bc:a7:0f:71:be:
73:81:16:3c:5b:ef:26:16:47:a6:c7:9c:0c:b4:81:
c3:d4:0a:aa:02:26:be:ef:37:ab:46:0f:c4:ea:be:
d6:be:70:95:d7:d0:98:8d:7f:20:73:c9:40:61:74:
e4:37:4e:92:26:38:9e:67:ab:6d:ac:b4:02:09:b2:
00:00:0c:b8:f1:8f:4e:c1:cf:84:15:c4:f6:0e:5e:
a1:de:ae:00:a8:df:f3:37:a4:7a:07:eb:03:8e:5b:
43:8a:9b:57:36:59:0b:a7:40:2e:64:06:77:2b:01:
d5:e9:54:33:61:06:c1:6f:45:77:51:68:fe:d1:ec:
e5:de:b9:bc:83:bb:41:de:e8:b4:f8:bf:8a:77:25:
87:d8:51:f9:33:d3:55:f2:31:f9:43:43:e0:7d:bf:
ef:a2:99:de:62:0c:70:50:34:a6:7d:21:31:e5:09:
02:0b:2d:c8:8e:67:c4:c1:42:a2:12:37:ba:75:51:
c4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6B:2D:4D:B6:DC:50:FE:FA:0C:07:9B:CF:E9:18:68:DD:6B:A8:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E030FFC412811F0B7834483DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.107.0-156.228.116.255
Signature Algorithm: sha256WithRSAEncryption
17:66:15:44:3d:95:13:81:af:07:27:e4:a1:72:0d:64:c0:96:
0a:e2:55:a3:2c:16:aa:35:17:c3:23:08:26:55:a7:84:bb:66:
58:9a:2e:b4:41:4d:ad:03:d9:7c:a0:4f:4a:20:cb:65:5c:b4:
81:72:8d:aa:fb:c6:c1:e8:5e:5c:06:4b:f0:26:b3:98:14:83:
fd:95:46:6d:4c:9e:e2:fd:4c:b3:0d:49:e6:41:2a:71:a3:46:
ed:4b:b9:b6:4d:ec:86:d0:ca:bc:45:1b:92:ad:75:ed:8a:50:
d8:95:ef:2d:e2:d1:cb:e9:4c:5b:81:35:e5:60:8b:96:10:32:
cd:3e:85:cd:2a:36:09:78:ef:d6:53:b9:ff:04:9d:88:37:72:
8d:37:8f:3e:1e:55:a1:94:c3:a3:a6:f7:b7:28:cb:03:54:98:
c5:0a:d9:f8:48:59:9d:5b:02:f3:59:27:94:dc:74:6e:06:07:
1a:c2:bc:8e:ad:42:76:a4:70:c2:df:72:1f:a3:08:0a:28:10:
f4:ac:9e:a5:ec:58:f7:6f:66:8b:00:61:01:97:ca:47:88:f1:
a2:db:4d:77:6b:53:6c:f3:cd:c1:7a:04:09:d7:05:cd:d3:a0:
56:4e:75:25:7a:83:8b:c4:16:f8:7e:aa:b3:48:36:89:12:5e:
9c:30:e1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 14:22:29 2025 by rpki-client