Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/445CB7B4393611F098DE63D9DAE4EC9C.roa
File: 445CB7B4393611F098DE63D9DAE4EC9C.roa (raw, json)
Hash identifier: heXelqxz+3qRrrtfTH+IhRR3HIMgCrt3cd8v+eHbx5A=
Subject key identifier: 42:7F:73:6F:11:33:80:55:D8:AA:0E:25:2A:60:AB:9C:21:28:AC:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01576F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/445CB7B4393611F098DE63D9DAE4EC9C.roa
Signing time: Sun 25 May 2025 07:02:49 +0000
ROA not before: Sun 25 May 2025 07:02:44 +0000
ROA not after: Wed 24 Jun 2026 07:02:44 +0000
asID: 984
IP address blocks: 156.227.133.0/24 maxlen: 24
156.245.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87919 (0x1576f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 25 07:02:44 2025 GMT
Not After : Jun 24 07:02:44 2026 GMT
Subject: CN=6832c099-6035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:b4:9d:5e:74:e2:51:f0:9b:e3:05:4c:76:
ac:a3:89:4c:ab:ba:ab:4b:61:33:04:9a:e4:51:3a:
c7:45:99:64:3a:ab:85:dd:77:ec:54:41:43:3f:26:
29:88:c9:8d:75:d4:07:e9:ec:cc:2c:62:84:69:ce:
c0:5e:35:b6:38:c4:1d:88:49:e0:f5:e0:e7:a3:b5:
07:d9:42:f7:3c:71:1f:8f:c1:72:ec:ea:64:c7:c8:
da:29:48:0f:47:25:7d:e9:d9:db:f9:2a:5d:37:2c:
72:d3:c2:57:ec:86:45:f2:91:58:97:cd:b3:ed:77:
a1:23:94:91:af:2d:f5:fb:a8:bc:a2:b8:94:90:1d:
99:bc:ec:fe:e9:3c:e4:a8:53:97:87:8a:81:2a:2c:
53:9c:2c:44:7c:c4:c1:54:38:6a:9d:93:dd:75:a9:
29:24:f6:60:d4:b3:e2:93:57:a6:c5:6a:08:91:81:
99:36:9f:57:fb:62:60:54:84:c0:f2:ab:2f:ea:2d:
8a:d0:39:72:6d:47:cf:f0:7a:fd:f6:85:cd:52:c6:
ee:5f:05:96:96:15:27:34:50:c8:ac:72:d0:02:54:
04:2a:48:24:4e:6e:63:98:07:49:90:3b:19:35:09:
5b:17:c0:13:27:4e:4e:a4:61:0d:f1:f7:fb:66:fe:
8a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7F:73:6F:11:33:80:55:D8:AA:0E:25:2A:60:AB:9C:21:28:AC:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/445CB7B4393611F098DE63D9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.133.0/24
156.245.179.0/24
Signature Algorithm: sha256WithRSAEncryption
33:d8:39:68:d8:b7:cd:91:5f:c9:36:eb:e8:de:c8:fe:20:c4:
f6:1d:8d:59:fa:2f:35:b8:fa:8c:6e:8c:7a:dc:ac:ce:c7:83:
06:56:36:80:b4:36:0c:1d:25:66:8d:63:e3:a3:14:e1:88:0f:
99:09:2f:37:b9:0c:43:fa:1f:e3:92:d8:de:6f:8e:72:bd:2f:
b7:ed:1b:87:e2:53:3b:4c:60:f9:b6:c5:de:e8:d2:05:4a:4d:
a1:bc:ed:c2:c6:7e:ba:96:a4:97:ec:f5:c1:24:63:6f:1a:1a:
c8:55:5e:3d:90:56:d1:0f:b7:3b:02:ac:6b:ae:9b:65:f9:5e:
27:5b:a5:4e:75:c1:85:3e:7c:83:27:b2:b4:ae:76:85:24:0c:
cc:9d:e1:ba:91:41:69:85:dc:90:99:7a:8d:83:ad:a8:ba:66:
ac:2a:86:f7:d9:48:95:0a:aa:12:00:7d:77:a4:14:47:fa:51:
76:75:99:3f:a4:86:cf:14:b3:f1:b9:94:f5:ab:03:02:25:72:
b4:5b:08:db:eb:96:3d:82:40:8c:95:24:8a:8d:8f:24:1a:03:
05:50:77:eb:72:90:47:5a:9c:19:17:45:10:6b:b9:54:3c:2f:
6b:25:96:fe:91:ea:82:ea:53:76:cf:e1:73:61:23:b2:dc:20:
d6:36:78:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:31:43 2025 by rpki-client