Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41D842563D6411F09B0CAB86DAE4EC9C.roa
File: 41D842563D6411F09B0CAB86DAE4EC9C.roa (raw, json)
Hash identifier: Nkw8Cwk1N5b4nl5iR77SmJcN2qh5/WNoEbdzeJsmygE=
Subject key identifier: BC:05:3A:8D:78:FF:C9:12:22:C5:ED:F9:47:F4:AC:87:DF:22:76:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0158EF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41D842563D6411F09B0CAB86DAE4EC9C.roa
Signing time: Fri 30 May 2025 14:42:06 +0000
ROA not before: Fri 30 May 2025 14:42:01 +0000
ROA not after: Mon 09 Jun 2025 14:42:01 +0000
asID: 210110
IP address blocks: 156.224.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88303 (0x158ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 30 14:42:01 2025 GMT
Not After : Jun 9 14:42:01 2025 GMT
Subject: CN=6839c3be-009f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6f:3a:91:df:db:d0:f8:ca:90:77:75:00:40:
26:59:e3:8e:4a:55:20:8c:f2:d1:55:4e:93:df:be:
fb:04:a1:78:2c:16:a1:a7:1d:37:8d:a7:2f:a0:f9:
24:14:1e:92:79:7b:53:10:ca:e6:2c:5a:6a:d5:78:
11:10:17:67:84:90:7e:c0:e8:a6:31:2e:89:ee:b0:
37:3f:14:53:94:16:38:f1:b1:80:46:0f:df:b0:37:
b2:99:f1:1c:d5:14:69:cb:17:49:8d:1f:a7:c7:6b:
b6:e6:fa:8d:f9:71:31:8a:f9:86:4c:cd:48:3c:d3:
13:64:cf:cc:3e:6f:64:4a:d8:58:13:e6:15:99:73:
71:c8:bc:af:44:f7:a4:ae:48:f0:f9:6f:e9:ff:f4:
5e:18:e7:b2:ad:98:f9:be:a5:70:e5:86:71:5f:19:
79:e9:50:fa:71:b9:2c:05:71:98:7d:92:dc:62:de:
0f:f9:27:55:a3:de:31:d3:b5:00:36:30:30:09:dc:
0b:14:c8:81:5e:8e:d7:0d:ef:43:e1:3a:0c:cb:3c:
b4:94:57:0e:ad:5a:28:6c:e3:d7:88:24:2c:99:4e:
63:d4:6b:f4:dc:88:7e:13:40:f7:b0:89:7f:dd:70:
a6:f8:72:07:c4:02:bc:c8:da:32:89:fa:1b:05:95:
6e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:05:3A:8D:78:FF:C9:12:22:C5:ED:F9:47:F4:AC:87:DF:22:76:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41D842563D6411F09B0CAB86DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.30.0/23
Signature Algorithm: sha256WithRSAEncryption
42:e9:e8:8a:c6:65:03:df:4f:ab:20:02:f8:8f:12:f3:6d:f4:
97:56:ed:65:90:2b:68:65:3e:be:50:f7:01:ba:99:1b:8d:e5:
31:c9:33:38:bd:51:39:72:fc:b8:2c:e2:1b:b3:06:d7:04:c8:
c6:33:31:c9:6e:ed:fc:b8:50:1c:58:29:8b:19:1f:47:eb:ed:
2f:54:6c:fb:f5:42:6a:51:3f:49:2c:09:70:9a:6a:db:81:e3:
e5:be:5c:66:1c:30:91:bb:e0:ca:a5:c8:c7:71:ec:59:0f:3f:
06:06:83:b2:d1:bd:22:8a:ac:66:7d:74:10:d0:e6:59:2d:8d:
d3:6a:ea:3d:b1:41:5c:06:e4:52:bb:5b:b3:a9:89:9f:f3:77:
05:12:9b:53:9d:a3:2c:93:26:ac:5d:72:67:48:81:be:4f:b6:
d4:f7:43:7d:36:c5:96:7c:dc:bd:35:36:a5:43:7d:77:de:57:
26:79:2f:72:3c:93:fa:aa:19:1e:cc:ac:67:12:cd:3e:e6:6a:
e6:83:26:8d:22:ed:48:62:29:c6:88:06:45:53:08:ae:34:13:
87:b9:2a:48:a8:8f:2a:65:24:0a:66:f1:19:20:f1:81:3d:a9:
da:a6:2c:f0:47:4e:c6:68:2a:f7:a9:00:53:c3:8f:08:e5:61:
18:23:57:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:32:04 2025 by rpki-client