Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C48588C355111F0A7929AB3DAE4EC9C.roa
File: 3C48588C355111F0A7929AB3DAE4EC9C.roa (raw, json)
Hash identifier: A0FscrfkZSPY0e69zNi+cSkaxltVUjlzqNBaw8lfIdQ=
Subject key identifier: D6:C2:C6:D6:D4:19:D4:E3:1C:40:FA:E2:D4:E8:D5:D2:82:8B:67:FF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015607
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C48588C355111F0A7929AB3DAE4EC9C.roa
Signing time: Tue 20 May 2025 08:05:47 +0000
ROA not before: Tue 20 May 2025 08:05:42 +0000
ROA not after: Thu 26 Jun 2025 08:05:42 +0000
asID: 395793
IP address blocks: 156.228.62.0/24 maxlen: 24
156.228.210.0/24 maxlen: 24
156.228.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87559 (0x15607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 08:05:42 2025 GMT
Not After : Jun 26 08:05:42 2025 GMT
Subject: CN=682c37db-adba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8b:12:df:7f:f5:94:56:73:59:f6:bd:c1:2b:
2b:1f:4b:3e:6b:1f:bd:e1:95:58:b3:a5:7d:c9:03:
0a:46:eb:ca:71:ff:42:b6:bd:e0:74:78:12:85:9f:
b7:79:66:23:ac:d1:2a:38:00:fc:93:38:f5:56:10:
58:81:22:41:f0:4d:7b:17:40:7e:33:cc:70:c1:89:
4f:6f:5a:ad:48:3c:86:df:f0:2c:75:5f:b9:f4:aa:
b4:31:9e:93:91:fa:33:1c:56:fb:92:f4:71:b6:57:
45:78:ec:d9:93:ab:60:67:34:4e:de:ab:f2:d7:ab:
37:8f:5d:a7:4c:51:e2:e9:2e:78:86:a2:9e:fb:5e:
a0:4c:13:c7:34:d1:51:91:61:2b:a6:91:df:5f:ab:
a7:06:26:9c:31:31:e1:fc:66:83:77:5b:94:e6:83:
c6:a7:73:6e:c5:4b:72:55:47:4f:a4:a5:9d:17:ce:
fe:40:fe:17:79:28:a4:47:54:4e:d1:68:8a:cf:11:
8a:26:c4:28:a7:91:9a:1d:d2:9c:d9:ac:02:25:a4:
eb:6f:7b:61:b9:a9:e4:d9:e6:6a:9e:88:e0:5e:a3:
fe:c7:7b:47:61:75:04:73:34:3c:83:98:ca:2c:55:
3d:92:ab:42:d2:2a:89:b4:6a:04:94:5d:12:0d:0c:
87:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C2:C6:D6:D4:19:D4:E3:1C:40:FA:E2:D4:E8:D5:D2:82:8B:67:FF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C48588C355111F0A7929AB3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.62.0/24
156.228.210.0/23
Signature Algorithm: sha256WithRSAEncryption
92:20:73:70:d6:a9:1a:b1:40:5a:ec:a1:e0:fc:ab:07:b2:88:
18:ca:02:c8:c2:6a:9d:2c:25:df:03:c3:4c:45:9c:4e:10:6f:
fe:6d:43:75:64:02:ba:72:e6:62:c8:02:88:d7:5d:d9:c4:c6:
ee:00:a8:84:b9:99:55:a2:d3:af:d4:d9:a9:21:43:55:83:cd:
2a:8b:5b:24:31:e1:ae:b4:73:0b:b2:45:76:c6:c7:ad:26:de:
11:8d:75:e6:e8:d3:7c:40:ca:53:d8:42:62:f8:d8:4e:aa:a8:
e1:5a:00:e2:14:c9:3a:0f:a4:cb:c5:89:15:0b:f2:1f:9e:68:
96:c1:7b:7d:d2:11:7c:16:a7:2e:9e:27:a3:12:74:1a:35:b4:
db:7f:44:88:75:72:ac:c2:ed:69:9a:f9:39:3e:12:a7:ff:bb:
48:7f:1e:bc:52:d5:39:3b:7d:32:f6:dd:f8:fb:84:6f:d2:a3:
87:97:95:8e:80:6e:1d:6b:8f:73:ba:b5:01:04:8c:3c:e2:bb:
3b:06:e8:49:17:73:ea:3e:16:a2:92:52:11:61:43:8b:fb:cd:
b7:7b:cf:ef:dc:5a:12:48:b3:93:90:f7:01:d8:56:e1:c1:b5:
49:26:c5:13:a4:0f:f7:00:73:29:73:17:1b:d2:3e:0d:45:54:
da:51:b3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:26:51 2025 by rpki-client