Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DF546BA2F3811F0841A13DDDAE4EC9C.roa
File: 2DF546BA2F3811F0841A13DDDAE4EC9C.roa (raw, json)
Hash identifier: 5XoK6CWTpSD+gy3a3mGSpdqSQ4w43I/orWmhrDxtIfk=
Subject key identifier: 77:CD:14:7D:AD:55:EE:3E:35:56:6C:61:A9:3C:63:2C:E8:DC:F3:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015381
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DF546BA2F3811F0841A13DDDAE4EC9C.roa
Signing time: Mon 12 May 2025 13:51:19 +0000
ROA not before: Mon 12 May 2025 13:51:14 +0000
ROA not after: Thu 19 Jun 2025 13:51:14 +0000
asID: 57043
IP address blocks: 156.253.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86913 (0x15381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 12 13:51:14 2025 GMT
Not After : Jun 19 13:51:14 2025 GMT
Subject: CN=6821fcd7-bbf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3f:50:0b:4a:40:1f:b3:1d:25:10:18:9f:a0:
d9:c0:b8:ab:61:d7:86:cf:a1:b4:58:31:da:56:43:
77:e7:18:7c:2e:82:48:2a:71:76:32:6f:00:2e:ea:
fa:0c:34:21:6e:42:3b:a5:3e:59:29:08:27:e3:62:
fd:ea:55:c5:36:8c:2f:0b:6a:9a:aa:d3:79:ec:be:
d2:24:e6:25:ff:64:60:03:8c:f6:1f:bf:38:8f:bf:
15:ac:c2:e6:8c:a5:28:f8:47:e1:d0:94:8f:7c:ab:
0f:b5:20:da:2f:19:30:b6:b1:66:7c:d3:77:45:56:
48:aa:f4:45:f6:d3:76:b8:3d:03:65:eb:09:83:f7:
4a:76:07:c7:4a:d4:49:ba:c4:fe:27:11:9a:78:6a:
4b:ec:08:bc:9d:6f:b2:ce:5f:1b:34:47:5c:cc:66:
01:3d:04:01:fa:fa:35:19:f5:c9:91:e6:9c:ab:27:
89:48:2c:a4:c7:2b:35:2e:3e:ae:d0:66:01:ac:19:
d1:62:f5:54:21:91:5b:d4:93:83:59:69:b3:4f:69:
22:3c:72:33:bf:24:f7:25:e0:71:e8:2f:a7:da:7d:
18:48:da:a6:d6:bf:8a:1e:94:3f:da:81:d7:18:eb:
ce:ed:48:f1:a1:92:0a:4a:e2:2e:11:e4:a8:25:48:
2f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CD:14:7D:AD:55:EE:3E:35:56:6C:61:A9:3C:63:2C:E8:DC:F3:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DF546BA2F3811F0841A13DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.34.0/23
Signature Algorithm: sha256WithRSAEncryption
43:66:de:57:5d:f4:7a:eb:ea:b2:06:8d:73:c6:43:11:b9:e5:
3f:b1:76:cd:0b:6c:86:95:8c:ec:3c:d1:14:12:9a:0a:be:91:
b4:a9:cd:83:1c:52:18:88:b5:fd:ed:a2:5f:2c:00:05:61:57:
02:c3:cd:31:5a:e4:b3:99:24:e6:bd:d3:e7:56:e6:ab:82:b8:
81:87:79:4b:22:1f:f3:0a:ea:61:14:b1:d3:34:74:09:c7:27:
58:a5:4c:b6:c6:ba:09:2a:b5:0c:32:17:60:dc:bf:6d:91:74:
aa:62:6a:f4:6f:18:aa:dc:0c:23:3d:47:59:19:c1:c3:ee:30:
df:b1:31:95:36:f1:29:5b:c6:2d:3a:a3:7f:d9:6d:12:93:71:
e5:ab:96:aa:d6:da:31:aa:6f:57:c6:47:9a:83:f7:28:07:8c:
45:31:a3:eb:35:e9:f0:91:f0:bd:d8:cb:10:19:a3:ea:7f:fe:
b3:95:96:78:43:cf:93:75:6f:60:e2:6b:ec:be:ff:5c:60:6f:
35:33:ab:20:f8:48:8b:2d:a3:64:96:d2:6b:e0:a0:c9:50:19:
2c:77:9d:f5:77:dd:dc:d4:ce:f0:a6:f7:8f:6e:b6:df:e9:c7:
81:72:54:9d:d8:77:e3:2b:91:e4:3d:a5:3b:c5:d5:15:94:3d:
7e:e4:0f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:25:59 2025 by rpki-client