Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E5BDBE2328711F0B672C67FDAE4EC9C.roa
File: 4E5BDBE2328711F0B672C67FDAE4EC9C.roa (raw, json)
Hash identifier: X4qKwkZ5xVu6+d2gYNLtCkzM9/fkpJu+AydSv552tMU=
Subject key identifier: 1D:4B:C4:00:13:50:6A:22:39:00:66:ED:6A:19:3C:F4:21:51:76:EF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015508
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E5BDBE2328711F0B672C67FDAE4EC9C.roa
Signing time: Fri 16 May 2025 18:55:16 +0000
ROA not before: Fri 16 May 2025 18:55:13 +0000
ROA not after: Sun 22 Jun 2025 18:55:13 +0000
asID: 50053
IP address blocks: 156.253.220.0/24 maxlen: 24
156.253.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87304 (0x15508)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 16 18:55:13 2025 GMT
Not After : Jun 22 18:55:13 2025 GMT
Subject: CN=68278a14-eaea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:13:39:85:02:88:2c:89:28:62:d0:f7:ff:50:
0c:67:f8:34:b8:20:af:48:03:f5:c5:2a:01:a6:a0:
5b:d5:a2:1b:8b:cb:3e:27:67:93:dd:7c:96:26:35:
5a:37:fe:1c:69:9d:5e:11:d6:76:df:2a:8f:49:62:
29:77:4a:bf:79:83:0d:74:8b:69:60:53:de:28:3c:
40:1b:18:a4:f6:4a:64:08:6e:93:90:10:69:ef:b1:
e9:6a:35:2b:da:09:72:b6:ed:0c:c2:9d:1b:38:36:
39:f7:1e:b8:18:89:ac:71:9e:07:55:0a:8c:f7:ba:
d1:0d:a0:53:ed:3f:99:0e:d7:9a:cf:da:c4:df:cc:
ed:ae:16:3c:d6:cb:92:3b:7b:e4:74:0c:19:f7:6f:
ee:a2:29:5d:49:ae:4a:fb:44:88:1e:fc:03:bf:f1:
05:dc:8c:8e:76:3a:b8:0f:b7:aa:5f:03:9d:ed:71:
f0:b2:ca:fb:6a:cd:bb:e2:8f:22:8e:59:6e:b1:ab:
8d:5e:14:cc:1f:2a:82:6d:4c:15:d1:3d:79:8b:07:
b2:4a:89:57:43:f6:8b:c4:07:8b:39:37:39:84:f4:
bb:a9:c6:2c:52:67:48:1b:db:e3:6f:ac:d0:46:e4:
48:ef:97:23:af:ff:11:2c:5a:00:23:13:87:27:e3:
9d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4B:C4:00:13:50:6A:22:39:00:66:ED:6A:19:3C:F4:21:51:76:EF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E5BDBE2328711F0B672C67FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.220.0/24
156.253.223.0/24
Signature Algorithm: sha256WithRSAEncryption
68:81:b5:81:5d:6d:aa:de:67:d5:08:33:bf:d2:e1:a7:09:80:
45:8c:b4:c8:db:67:6d:27:10:17:b2:02:06:df:2c:29:f9:ee:
34:60:6b:d5:5a:43:7d:59:51:82:fb:67:47:f0:ac:b6:0e:7b:
55:79:f5:71:30:18:8a:99:6d:1b:9d:ba:1c:fd:1e:7f:db:a5:
72:6d:4a:04:3d:69:c0:77:01:bb:29:05:f9:9c:13:44:cd:48:
16:ba:fb:9b:bf:2e:ee:ec:ce:ad:9b:1b:14:e5:60:f3:83:53:
36:e0:b0:c3:24:c5:e2:9c:d5:0a:86:bb:13:23:f4:d8:ed:83:
51:aa:4b:46:f1:88:57:32:3d:4a:48:d9:92:5b:be:fa:ee:f0:
ea:c4:21:98:78:ff:8b:5e:68:d8:da:9d:93:83:5f:02:8f:7e:
b8:89:26:0e:a2:d3:60:d4:73:af:60:68:b2:db:a1:42:6b:d9:
66:5d:7f:23:3b:d0:3f:df:bd:24:67:14:8b:1e:4e:f1:d2:96:
10:51:40:c1:6e:a5:76:cf:74:af:3b:00:6d:e9:17:97:aa:e9:
be:80:ca:fb:c9:b3:12:2d:64:db:f1:97:70:c1:05:cb:f1:58:
f1:cc:0d:b2:6c:e5:40:8f:d9:56:ac:cc:d5:6f:9e:2b:be:8a:
2b:ef:8c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:43:20 2025 by rpki-client