Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12659DAA328011F0876A65CDDAE4EC9C.roa
File: 12659DAA328011F0876A65CDDAE4EC9C.roa (raw, json)
Hash identifier: 9cZCOZlkqla8f5nwDBS34LVGDAj0l9iZkSJsHAHRXQI=
Subject key identifier: 43:40:7B:5A:4A:0A:66:5C:48:AF:ED:A3:2F:53:42:16:C8:C3:75:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0154E7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12659DAA328011F0876A65CDDAE4EC9C.roa
Signing time: Fri 16 May 2025 18:03:29 +0000
ROA not before: Fri 16 May 2025 18:03:26 +0000
ROA not after: Thu 19 Jun 2025 18:03:26 +0000
asID: 53835
IP address blocks: 156.231.104.0/24 maxlen: 24
156.245.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87271 (0x154e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 16 18:03:26 2025 GMT
Not After : Jun 19 18:03:26 2025 GMT
Subject: CN=68277df1-74d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:67:27:9e:d2:c5:55:2e:9e:77:3d:df:e3:62:
a2:14:b9:65:6c:ef:db:6a:60:af:64:47:b0:21:90:
ac:52:f2:fa:dc:57:15:c0:57:fe:b4:93:44:44:88:
b3:ec:e4:2b:9b:75:50:e0:57:30:dd:d1:d8:9e:a8:
7d:68:4a:27:bf:20:14:d9:26:82:f2:81:02:14:05:
eb:a5:60:18:f6:5a:55:3a:cb:ce:39:bb:c2:73:7e:
cc:ab:83:36:4a:d7:11:83:e1:7b:49:f8:f2:45:99:
dc:9b:82:99:18:4c:ac:0e:ae:8b:34:56:47:85:e3:
39:2a:bf:62:be:4c:82:01:b9:ce:18:c4:6c:55:48:
09:fa:22:7d:74:53:a3:f1:6e:75:dd:a0:d2:7f:d6:
1c:10:5b:c3:9f:de:1e:a1:bb:45:24:b9:cb:23:68:
e5:14:96:c9:28:e7:c3:5d:dc:84:ab:42:d9:d6:9d:
a6:08:0e:77:4a:95:96:f6:76:2a:e5:ec:3a:b2:9e:
85:ce:ec:6e:15:54:2b:0e:07:5f:11:ea:1f:ee:0c:
d8:74:6d:c9:ef:a1:23:39:69:0b:9b:e7:df:76:66:
66:9c:0c:c6:c0:42:a2:02:67:71:f4:d0:b9:57:4a:
7f:de:1f:f4:db:22:cf:a6:8c:70:00:5b:d6:e6:41:
36:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:40:7B:5A:4A:0A:66:5C:48:AF:ED:A3:2F:53:42:16:C8:C3:75:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12659DAA328011F0876A65CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.104.0/24
156.245.190.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:3a:dd:ff:b3:5a:1e:9d:59:ab:1e:42:f7:5a:b4:8f:af:cd:
0e:66:26:a6:a3:d5:15:90:b5:c1:9b:4f:9d:0d:a0:e4:4d:f8:
ea:29:41:69:e2:c8:be:04:1e:ac:7e:4b:08:09:86:af:13:12:
a3:8b:0e:27:c5:c4:75:ed:4c:23:64:2f:dd:3d:40:7c:e3:5b:
93:03:38:c0:11:8f:07:d6:72:a9:1a:7e:ad:10:f8:c5:ab:3a:
78:38:d8:45:05:fd:56:c7:ab:17:8d:0b:21:2b:8d:d0:c9:36:
2c:85:87:aa:ae:fd:a9:23:23:22:a5:0a:84:79:bd:cd:a0:8b:
b3:ee:ad:2f:57:d9:73:bf:9e:3b:68:f9:a9:c1:20:74:1f:60:
12:88:6d:93:1f:0e:a5:8e:c3:36:fa:cf:f7:d6:da:18:cb:60:
16:96:29:33:d0:6d:2f:a7:b0:da:5e:b8:4e:a9:50:f3:b8:9c:
14:7e:d3:82:ce:24:e8:79:39:78:e1:5d:62:33:4c:6f:dc:94:
c2:72:b3:94:ee:7c:f3:b6:7e:0e:83:10:67:21:09:c2:74:b5:
4a:09:87:ee:d4:2f:15:f6:81:b6:d1:6b:1c:ea:8d:7f:2f:33:
ef:8f:b7:b4:79:95:ee:1d:c1:51:f5:7e:f5:8a:68:66:68:ab:
b3:e1:8b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:35:05 2025 by rpki-client