Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F2DFDE8557C11F0B5A536D6DAE4EC9C.roa
File: 0F2DFDE8557C11F0B5A536D6DAE4EC9C.roa (raw, json)
Hash identifier: 9aVvSEbtJ2IPD1693AbslVS7Zr6w05jFIIfTRATfkyo=
Subject key identifier: 61:69:60:F5:32:84:15:AC:04:C5:5D:0A:80:D7:32:45:5F:F3:72:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F75
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F2DFDE8557C11F0B5A536D6DAE4EC9C.roa
Signing time: Mon 30 Jun 2025 06:32:57 +0000
ROA not before: Mon 30 Jun 2025 06:32:52 +0000
ROA not after: Fri 04 Jul 2025 06:32:52 +0000
asID: 398465
IP address blocks: 156.255.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 06:32:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89973 (0x15f75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 30 06:32:52 2025 GMT
Not After : Jul 4 06:32:52 2025 GMT
Subject: CN=68622f99-1008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a6:89:81:fd:89:ec:1e:ca:86:e7:b8:a6:f1:
56:a3:a6:1f:80:dd:0a:4c:33:e8:94:75:5f:aa:c6:
85:7e:51:d0:df:e0:fd:6e:65:fa:5e:a6:c3:83:21:
0a:25:e0:e3:f3:30:99:62:6a:55:f9:5c:c6:3f:8c:
cb:28:bc:1e:81:43:17:ab:4c:db:1e:c1:f2:ed:5a:
4a:bb:47:db:75:ae:4a:4b:4c:ee:18:6f:a2:57:f7:
47:71:6b:78:3e:8c:b1:a6:5a:63:f1:8a:ab:c9:c7:
fb:c2:05:02:70:ab:13:ff:d8:d4:42:a6:3c:c4:c1:
03:21:51:bf:e4:ba:77:59:0b:26:d3:28:d7:3c:91:
20:5d:a9:0e:b3:09:b7:8b:5f:30:1d:62:48:a8:ae:
49:eb:22:58:0a:8d:af:e2:33:32:b3:44:a2:1e:10:
fb:e9:dc:1e:32:4b:15:96:38:bc:1c:5b:fa:f1:67:
e1:51:7a:27:d7:19:d0:f4:bb:10:f2:26:09:71:fc:
90:31:fc:22:06:ab:5e:9b:5c:7e:cd:58:83:9b:26:
a1:60:0e:a4:bf:a8:ea:92:88:7c:2a:b5:19:b0:52:
d7:24:cb:53:98:97:e5:df:79:75:7b:c5:9b:ff:8a:
87:73:64:d4:84:ba:fc:de:e2:6a:17:bb:d0:dc:71:
77:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:69:60:F5:32:84:15:AC:04:C5:5D:0A:80:D7:32:45:5F:F3:72:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F2DFDE8557C11F0B5A536D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.24.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:ce:e6:43:b1:18:86:15:d5:3e:4a:bd:92:9a:e0:2a:98:90:
d6:52:ff:5b:3c:ed:a8:81:1b:bd:41:c7:72:9e:86:e8:a1:07:
30:06:b0:61:c9:4f:46:c4:53:7e:a4:6e:9a:50:23:de:a7:70:
aa:be:f2:51:da:2e:58:02:b6:9a:c1:ae:25:8e:cd:7f:ed:03:
49:2f:0e:07:fd:f9:5b:bf:99:13:41:ca:c4:eb:ea:0c:28:68:
3c:98:33:81:48:2e:a5:1c:fe:c7:2e:c5:3b:94:ed:86:93:e7:
61:43:31:90:84:33:18:6d:ec:00:01:15:b2:4e:19:ab:3e:0f:
c4:9c:5e:35:a4:d4:e4:e2:14:a7:36:09:34:ad:a0:61:75:56:
8c:0e:00:b1:5d:54:5f:7c:e5:08:5c:b9:66:7f:4e:11:e1:e0:
09:22:21:fb:e8:e5:73:19:5f:0a:36:05:2c:3d:70:49:5a:a1:
65:03:fc:22:56:db:bc:04:2e:15:33:4a:7f:87:d4:6c:82:43:
a2:b8:13:42:bd:e0:0b:f0:35:86:f1:c6:af:55:5b:f0:9f:2d:
b1:bb:fe:85:1a:40:60:84:a2:16:8c:b7:1d:27:23:19:6a:a5:
e7:05:f6:1c:31:9b:ef:43:31:9d:c5:ef:28:5f:a0:e5:97:bc:
ed:fb:f1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:50:34 2025 by rpki-client