Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6172269E323911F0B97E5080DAE4EC9C.roa
File: 6172269E323911F0B97E5080DAE4EC9C.roa (raw, json)
Hash identifier: fv3VnoS/xsF2K48tc8Oeh+nj0T0VEdNnk1xa1K3BDek=
Subject key identifier: 59:A4:E3:AB:31:18:08:E0:F2:DA:88:DF:8E:10:BC:A0:EF:C2:31:DE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0154CB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6172269E323911F0B97E5080DAE4EC9C.roa
Signing time: Fri 16 May 2025 09:37:28 +0000
ROA not before: Fri 16 May 2025 09:37:24 +0000
ROA not after: Thu 05 Jun 2025 09:37:24 +0000
asID: 138415
IP address blocks: 156.247.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87243 (0x154cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 16 09:37:24 2025 GMT
Not After : Jun 5 09:37:24 2025 GMT
Subject: CN=68270758-e830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:c4:d3:7f:d2:dc:ad:16:af:58:f7:08:22:
eb:bd:b8:51:0b:56:6f:ae:50:85:59:c6:18:f3:4b:
f7:e4:67:38:e3:c2:60:b9:2a:92:40:93:f7:35:95:
67:87:df:42:f8:92:ff:12:b2:fa:91:97:31:78:48:
5e:b0:8a:f8:ae:d4:24:c2:97:73:d6:b9:cc:91:e5:
8d:f1:c8:0a:34:18:58:00:af:0c:d4:ee:ab:f5:b6:
bb:95:94:a8:ba:f0:4d:09:0a:ea:c5:09:6c:56:ba:
9f:9c:59:31:6e:9a:41:7d:d9:03:53:94:b8:a6:b2:
24:ad:22:37:8f:d3:61:89:34:4c:9b:cc:d7:a7:5a:
6e:dd:d0:e6:31:26:6b:28:7a:30:1d:8c:c6:88:c4:
aa:91:cb:fb:4e:22:80:7f:a9:a3:4a:9b:6e:b7:4e:
be:5d:e3:cc:44:fd:fd:ac:c3:84:18:cc:24:1f:95:
4c:e8:1c:18:36:ca:70:9b:55:a0:50:46:4e:42:73:
23:34:f3:4c:60:63:63:14:c1:9b:5c:1c:b7:9c:e5:
1c:ce:fd:82:53:68:c6:dc:73:bf:c4:f8:57:bf:66:
9a:b5:3d:c4:8e:65:74:4f:bc:7f:d2:f2:c3:06:9a:
7d:02:0d:aa:b0:98:40:9f:b7:12:0e:29:62:ba:59:
61:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A4:E3:AB:31:18:08:E0:F2:DA:88:DF:8E:10:BC:A0:EF:C2:31:DE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6172269E323911F0B97E5080DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.32.0/19
Signature Algorithm: sha256WithRSAEncryption
8d:03:fe:7e:65:6a:66:0d:0a:5b:43:bc:25:84:b4:bf:8e:c5:
a5:98:52:4b:82:89:a8:07:a0:5c:61:9b:3d:1b:f2:4c:07:94:
83:5a:c9:d6:98:b9:57:30:0f:20:ad:90:87:0e:8d:d7:57:12:
43:92:10:da:0a:ae:48:4d:56:c9:bf:60:00:bc:8e:b5:b5:e5:
d9:3c:5b:f7:d0:31:da:00:61:69:1c:be:24:a3:51:19:77:01:
4f:52:08:f4:1b:4f:fd:eb:41:26:d4:f3:f6:d0:15:4d:c1:c4:
f3:8b:c2:6e:e1:1b:a0:74:b1:c9:83:65:1b:be:c5:96:33:66:
ea:53:58:e1:9f:b5:86:91:ff:73:a5:7a:a6:85:b0:b4:2d:15:
09:c6:eb:d0:cd:31:05:4a:9e:a7:f2:d4:1b:6e:13:48:8c:c6:
8a:65:e5:89:68:ff:97:80:ff:4b:f4:40:d2:78:a9:7e:79:a2:
8f:92:df:4a:fb:cf:17:18:e9:5e:d5:f1:92:47:63:24:2e:53:
e8:f1:be:0e:aa:70:6d:1e:48:f7:c3:1d:9d:76:5e:d6:1d:c9:
ef:9c:35:9d:a6:c5:99:f0:6b:00:b0:3b:26:cb:64:75:82:40:
56:d6:ce:34:8a:d9:0e:ca:b5:db:7f:4f:96:fa:11:77:28:9a:
6b:21:28:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:58:30 2025 by rpki-client