Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20992DD02A5411F0ABC7BBACDAE4EC9C.roa
File: 20992DD02A5411F0ABC7BBACDAE4EC9C.roa (raw, json)
Hash identifier: VS4HBgtzHGXQP/15elsLObjk+xqzw/4JURqqmOUilgk=
Subject key identifier: D2:68:49:21:06:61:E6:47:48:33:BB:4C:06:26:C6:93:6D:7C:21:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015239
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20992DD02A5411F0ABC7BBACDAE4EC9C.roa
Signing time: Tue 06 May 2025 08:28:46 +0000
ROA not before: Tue 06 May 2025 08:28:42 +0000
ROA not after: Fri 13 Jun 2025 08:28:42 +0000
asID: 54600
IP address blocks: 156.245.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86585 (0x15239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 6 08:28:42 2025 GMT
Not After : Jun 13 08:28:42 2025 GMT
Subject: CN=6819c83e-44c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:e2:07:8b:87:75:ea:74:fd:51:f8:43:e9:
9a:5c:53:5b:8a:75:54:13:18:42:ae:b7:ff:1a:56:
59:8c:fc:d7:3a:93:e1:59:cb:c2:af:f0:53:cf:7d:
32:2b:22:ef:bc:4d:7c:fb:65:d4:cc:ee:55:10:93:
f1:e3:99:c8:f4:96:6c:22:a9:11:90:67:1a:c4:f5:
7c:96:ad:ad:59:d2:9b:90:71:c8:5b:d0:fd:20:52:
08:22:08:23:9e:a9:09:98:18:46:8a:34:27:d7:90:
0a:ff:fc:07:24:32:46:52:c6:4b:4c:62:c9:fc:50:
1d:9e:3f:af:87:12:6b:d4:ad:35:eb:a5:c1:23:2a:
ba:d7:c6:da:22:f9:6d:09:9f:93:92:d6:3b:f2:f6:
0d:38:02:f0:fa:91:98:a3:9d:bb:b3:0f:51:b0:8e:
18:87:33:4d:e6:cb:4d:50:62:67:3e:ba:6c:79:4b:
11:9c:9a:6c:85:1d:37:5a:7f:c9:d5:b2:1e:19:49:
94:e7:93:16:9e:e7:e3:3a:63:5a:a4:f3:df:b4:bf:
e0:d4:e2:84:11:ef:eb:a9:71:c5:b0:05:8d:f7:26:
68:69:0d:af:d7:39:0c:03:60:b9:10:cb:d6:1a:50:
ea:3c:17:23:51:b2:71:9a:5c:7d:35:6b:2d:56:87:
88:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:68:49:21:06:61:E6:47:48:33:BB:4C:06:26:C6:93:6D:7C:21:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20992DD02A5411F0ABC7BBACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9e:38:e0:a3:56:65:4a:3a:0b:7e:24:bf:62:bb:2a:ec:39:5d:
05:68:6d:31:5d:a3:fc:0a:3a:c3:40:a9:c3:f4:ee:f6:64:73:
f4:12:34:85:d2:a9:ac:e3:dc:54:6d:23:3d:89:0f:d5:53:97:
ad:43:82:88:8f:c2:8e:f0:c0:fc:71:17:eb:78:ed:3b:81:d1:
83:4b:74:07:ee:33:b2:1e:e6:92:0e:68:c9:4d:08:94:b6:3c:
93:38:2f:f7:4d:e7:e5:d1:30:f9:ca:46:80:45:3e:e6:17:88:
bb:c8:59:df:44:68:54:e0:dd:a2:07:a8:fe:bd:73:d9:14:fb:
4a:57:63:c7:59:72:35:e9:50:ee:cf:69:44:d4:ce:cc:31:73:
3f:c9:1c:0e:25:40:b4:93:d7:2f:71:8c:55:2c:a3:33:05:44:
ac:2b:ca:63:f9:21:3d:7f:18:fb:1d:62:91:7c:1a:19:63:d0:
12:aa:a2:6f:83:38:c5:55:d4:00:79:39:cd:40:28:8f:95:d5:
e6:14:48:8f:4f:e0:d5:2a:05:f8:c5:d2:2b:8c:90:ed:30:47:
61:c7:94:1b:e2:af:2e:db:c5:be:a5:07:3f:02:02:e8:56:65:
80:ff:e8:da:46:4c:fb:3b:52:d1:e9:4e:da:d0:bb:9a:e6:df:
6a:fa:03:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:31:48 2025 by rpki-client