Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44793952490311F0BF82AAA8DAE4EC9C.roa
File: 44793952490311F0BF82AAA8DAE4EC9C.roa (raw, json)
Hash identifier: flzqEJzSKfUyq3Ur61H0Lctfqvsr7ULTBm5TxU72koQ=
Subject key identifier: 69:EC:16:BF:59:9A:A6:F8:16:37:1D:EC:F1:F4:53:9A:D5:E7:32:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015BE5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44793952490311F0BF82AAA8DAE4EC9C.roa
Signing time: Sat 14 Jun 2025 09:38:03 +0000
ROA not before: Sat 14 Jun 2025 09:37:58 +0000
ROA not after: Sat 19 Jul 2025 09:37:58 +0000
asID: 20473
IP address blocks: 156.253.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Jul 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89061 (0x15be5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 14 09:37:58 2025 GMT
Not After : Jul 19 09:37:58 2025 GMT
Subject: CN=684d42fb-5aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:4e:18:69:ee:56:b9:6f:a6:91:5c:d1:25:
59:a5:ab:e2:a3:8c:37:13:82:59:32:bd:9a:c7:f6:
b1:93:8e:3a:76:a8:43:b3:fc:74:37:f1:f3:36:cf:
8e:f7:48:9c:99:85:42:eb:7d:f3:b9:41:d7:cd:f3:
e0:51:55:01:7d:57:4c:d8:8b:f9:af:6f:03:b7:77:
ec:43:8a:66:24:07:1d:e5:59:2f:4e:ef:2f:84:93:
fc:0f:0e:3b:7b:10:ef:48:6d:39:1a:b4:09:13:8e:
82:64:f4:86:1a:ba:69:bd:97:79:94:e3:8b:c4:1a:
98:00:0d:11:e9:32:54:61:4a:83:96:0c:77:25:f3:
54:b6:80:dc:24:23:9f:a5:1d:71:b6:ff:9e:a4:48:
5c:c6:96:e7:6d:2a:59:c8:df:5b:ec:9b:4b:64:da:
b3:a7:f5:7d:91:01:fa:3f:22:62:53:75:c8:90:c7:
f6:57:93:d6:4f:81:2d:8a:79:5a:0e:17:33:13:45:
e0:47:2d:7f:d8:97:d6:5e:63:09:dc:26:46:8e:45:
e8:3e:a3:c5:b1:2b:1e:d5:b9:d9:11:2f:60:bc:15:
df:0f:36:97:bc:97:0c:69:d9:64:25:28:d7:b5:bf:
36:bd:ce:21:2b:cf:ed:66:d2:3e:49:f1:9c:73:a2:
4c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EC:16:BF:59:9A:A6:F8:16:37:1D:EC:F1:F4:53:9A:D5:E7:32:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44793952490311F0BF82AAA8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.56.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:bf:25:da:74:54:49:66:32:02:6c:f3:6c:51:95:6a:0f:61:
91:a0:2f:ea:86:d3:98:a3:8e:c3:58:28:53:a8:7d:31:05:02:
86:48:e5:17:15:fd:84:7f:a9:a7:ce:d3:67:00:98:b3:5c:68:
ce:2a:d5:cf:82:fa:94:34:e3:72:47:bb:32:2a:47:30:5c:be:
1f:4e:f2:13:ed:21:e7:72:b3:8a:40:c5:df:6e:e0:60:c8:b5:
57:e8:c3:e6:a2:f2:96:64:95:1d:a8:ad:81:bc:3e:01:4d:11:
91:31:73:a1:36:b4:9f:9a:72:ca:ce:4b:ed:7c:12:6f:52:a5:
7e:bf:80:62:c0:2e:c2:e0:69:75:3e:cf:23:20:37:eb:69:7e:
39:72:0c:28:07:52:65:d5:13:eb:b7:71:3f:b4:e0:4c:7f:af:
76:3e:72:bf:c8:de:ad:ae:7c:87:ad:c0:d6:d4:6b:0f:c4:7c:
9a:21:c4:11:54:32:19:47:61:9f:dd:36:22:74:86:38:ed:18:
d2:2f:00:6f:c2:d0:13:b2:9d:d6:04:f4:7f:c1:09:33:90:ca:
79:15:a5:f5:e4:a1:2f:c8:05:21:a7:b8:00:69:30:37:b6:1c:
07:eb:45:1b:81:88:25:61:31:a1:dd:7c:d3:dc:98:34:3e:0f:
96:5a:69:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 04:40:51 2025 by rpki-client