Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25BB5B083E2211F0B8CD51D7DAE4EC9C.roa
File: 25BB5B083E2211F0B8CD51D7DAE4EC9C.roa (raw, json)
Hash identifier: 2uic5Papl/G2Hu9F6AXrAZfcMHr50bHArzLOrjfuxTg=
Subject key identifier: B2:BC:C2:4A:4E:05:4F:D7:69:A1:64:33:64:59:3E:00:B0:33:7D:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015916
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25BB5B083E2211F0B8CD51D7DAE4EC9C.roa
Signing time: Sat 31 May 2025 13:21:23 +0000
ROA not before: Sat 31 May 2025 13:21:19 +0000
ROA not after: Sun 22 Jun 2025 13:21:19 +0000
asID: 40779
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88342 (0x15916)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 31 13:21:19 2025 GMT
Not After : Jun 22 13:21:19 2025 GMT
Subject: CN=683b0253-d8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:43:4f:d4:55:7a:e4:d5:10:22:28:e6:71:76:
98:c6:28:62:b7:3a:2b:b3:20:16:6a:d8:55:15:a5:
8c:a0:e0:f3:a1:b3:2f:69:28:3c:18:1e:2f:ea:68:
f1:52:9e:b9:15:c9:93:4d:1c:72:e6:b6:ed:6a:d6:
27:7d:c6:08:66:e1:44:64:e9:2b:b9:90:28:d6:41:
65:f3:f2:1b:79:5e:04:be:bb:2e:c6:37:c9:62:c6:
23:92:f0:2b:03:e2:fb:c0:24:70:b1:87:b6:c4:e0:
57:ab:32:51:f6:cb:2a:53:ab:93:6c:92:c2:f8:78:
5f:1c:8a:8d:cb:6f:53:29:02:4e:83:af:14:a1:57:
7a:fe:1d:d2:5b:91:fe:e4:75:11:80:31:9b:2c:73:
33:2e:0b:b8:f7:b2:f1:b3:c0:d5:24:b9:07:f9:61:
10:90:1b:52:2e:88:d6:d4:b7:d2:da:5d:bb:ae:32:
1a:20:08:23:cf:c5:44:56:7b:69:f5:e0:42:4b:73:
0c:3e:2e:79:1d:8d:0a:c9:98:6c:24:82:f3:0d:38:
4b:b3:66:fa:46:6a:db:68:f5:9c:1f:49:bb:39:3b:
a5:95:84:a7:c1:e7:e0:0f:8b:32:c9:6b:8c:52:07:
66:f5:2b:d4:1c:8b:e4:45:51:e5:f6:61:50:81:ed:
92:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BC:C2:4A:4E:05:4F:D7:69:A1:64:33:64:59:3E:00:B0:33:7D:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25BB5B083E2211F0B8CD51D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
a0:3e:bc:ee:90:7c:20:a4:03:bd:6e:37:39:36:a7:73:a0:47:
96:18:82:d2:df:d6:c1:11:2c:c5:0e:49:33:aa:d1:42:a5:7c:
5a:e2:6e:20:8e:1b:40:76:b5:16:db:36:73:9a:f7:80:95:63:
a6:17:da:1a:d3:76:12:04:08:5f:21:e9:eb:81:c9:b4:1f:49:
1a:d2:d7:b4:2a:71:a7:11:37:97:55:24:7c:49:99:27:ec:04:
82:9f:bc:24:24:0b:50:f0:96:25:d4:14:d4:04:f6:13:5d:0d:
ec:9c:c2:26:79:8c:eb:f9:8a:33:2d:e1:ae:ba:6f:11:df:79:
9f:b6:8b:8b:ba:85:2d:05:83:93:bd:c3:7a:12:39:8d:22:66:
94:79:fe:05:ea:dd:17:e0:1f:55:56:f2:c7:6e:a7:56:36:bf:
bf:eb:d2:53:0d:b8:d5:df:bc:d9:55:71:4a:84:27:de:35:5c:
fc:62:a6:4c:38:30:bb:5d:88:97:18:b4:3d:8e:bb:a3:00:74:
84:66:fa:15:e9:d0:fc:03:9b:10:94:af:4b:bb:64:65:96:56:
f6:b9:1f:11:8d:0a:79:b6:bc:38:cb:1b:3a:cc:a6:ab:68:68:
9e:87:8b:ce:b3:79:df:29:b6:3d:ae:06:04:60:f7:a8:1b:d3:
9e:97:7a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 09:17:17 2025 by rpki-client