Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14013E683E3211F0B3B478BEDAE4EC9C.roa
File: 14013E683E3211F0B3B478BEDAE4EC9C.roa (raw, json)
Hash identifier: GDP6CQpwem5/DnbtxT0D+cnDif2j0njZ1qSu3JrrjcU=
Subject key identifier: 7C:45:AB:34:97:88:AD:98:B5:DA:68:03:79:33:23:14:33:24:0C:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015932
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14013E683E3211F0B3B478BEDAE4EC9C.roa
Signing time: Sat 31 May 2025 15:15:26 +0000
ROA not before: Sat 31 May 2025 15:15:20 +0000
ROA not after: Thu 10 Jul 2025 15:15:20 +0000
asID: 141159
IP address blocks: 156.233.224.0/24 maxlen: 24
156.233.225.0/24 maxlen: 24
156.233.230.0/24 maxlen: 24
156.233.231.0/24 maxlen: 24
156.233.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88370 (0x15932)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 31 15:15:20 2025 GMT
Not After : Jul 10 15:15:20 2025 GMT
Subject: CN=683b1d0e-ed08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:68:0a:bd:2b:3a:0a:26:c3:96:bf:87:67:9d:
8c:c8:2b:a7:a8:1d:0f:2a:7e:39:da:09:45:4e:3f:
c5:68:9c:00:04:1f:1b:f5:1f:5b:49:48:b7:86:1f:
b5:18:52:31:dc:14:04:6d:53:f9:c9:38:99:43:ae:
9e:93:90:b1:33:fd:89:b9:5a:86:1b:32:0f:16:a8:
9c:ab:3c:67:64:53:0f:be:9a:88:dc:50:7e:ed:1d:
c8:8d:be:46:02:9f:56:12:76:35:20:67:2c:fe:d2:
02:fa:f1:22:24:28:56:34:1c:0e:50:13:a0:08:88:
2b:a3:48:0e:3b:44:96:b9:1a:09:dd:80:15:65:02:
63:0e:ea:83:eb:c4:37:10:9f:5d:70:12:1b:92:9e:
c5:66:17:c1:d4:d8:9f:86:bc:43:6b:39:6f:e3:38:
d6:7f:06:94:5f:bc:12:89:f5:e4:db:51:e1:11:45:
45:86:19:83:52:ae:7d:c8:4d:e4:77:bc:dc:3f:82:
f0:2e:f3:46:1e:3f:d5:b7:80:31:9f:3e:ea:11:6f:
c4:8d:d1:68:4e:d9:77:e6:c1:ec:a1:71:c2:ad:80:
2d:9f:e2:b7:d6:e7:95:87:b0:ef:f9:4c:8c:55:20:
bd:bb:c6:65:fb:76:19:14:ae:9a:f8:90:fa:cc:9f:
aa:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:45:AB:34:97:88:AD:98:B5:DA:68:03:79:33:23:14:33:24:0C:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14013E683E3211F0B3B478BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/23
156.233.230.0/23
156.233.236.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:f1:4a:83:8b:22:e4:7b:32:b3:53:0a:81:c2:6e:76:c3:74:
b7:4f:4a:d0:83:19:87:ae:97:96:e3:0c:38:de:f3:a5:e6:2e:
16:c7:7b:64:52:94:25:a3:e4:14:4c:6d:13:b0:34:02:72:40:
b1:72:85:23:f6:7d:02:66:a5:06:05:45:63:f8:22:df:44:fe:
71:c4:a6:92:68:4d:ea:45:88:3a:db:b0:90:2b:bc:86:98:d1:
ee:36:9b:14:0d:e7:aa:20:d7:5b:7b:0d:89:0b:e6:ab:92:ee:
48:11:10:8f:42:75:eb:d8:10:96:d6:62:8f:11:42:cd:1e:04:
4a:9e:a5:90:ac:0a:e8:a4:b0:eb:0e:be:d9:63:ca:ee:6d:ca:
a2:1d:68:b6:d1:9a:33:de:a6:0b:f4:e2:3a:37:ea:a2:17:a0:
6d:76:d0:c0:31:1c:bb:51:cb:1a:1a:b6:2d:9c:79:21:a2:b8:
12:ec:e1:04:e2:89:87:d6:5e:7d:ce:e9:d2:64:fd:72:cd:65:
7e:85:e4:74:0c:fb:6c:1a:2f:9b:33:ad:9b:37:91:24:53:d9:
9e:7b:72:9b:ad:da:1f:af:69:46:01:2f:a9:ce:46:eb:81:d6:
c2:cc:19:30:da:36:64:23:33:f4:cc:09:f7:5b:11:d2:48:05:
81:38:6b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 09:30:01 2025 by rpki-client