Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/708147A23D5911F08CA23EBFDAE4EC9C.roa
File: 708147A23D5911F08CA23EBFDAE4EC9C.roa (raw, json)
Hash identifier: m2zn8f3mG6CtZ63074Fql0KSEQ0BKWEIl76XhK1tGVQ=
Subject key identifier: 59:18:9D:73:0D:97:BF:44:5A:BD:B9:36:CF:DF:9D:27:12:DB:C0:9E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0158DD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/708147A23D5911F08CA23EBFDAE4EC9C.roa
Signing time: Fri 30 May 2025 13:24:40 +0000
ROA not before: Fri 30 May 2025 13:24:35 +0000
ROA not after: Fri 20 Jun 2025 13:24:35 +0000
asID: 61461
IP address blocks: 156.247.128.0/17 maxlen: 24
156.255.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88285 (0x158dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 30 13:24:35 2025 GMT
Not After : Jun 20 13:24:35 2025 GMT
Subject: CN=6839b198-c932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a8:77:32:71:2d:6c:6a:c5:26:9a:e7:65:e8:
22:bf:b7:ed:0f:6e:53:9c:9c:46:7e:b2:31:69:43:
6c:0c:a5:7f:39:00:1a:78:12:68:d6:c0:b9:84:44:
72:8b:c9:91:f2:3c:b1:a2:40:31:82:fa:78:29:08:
0d:5c:00:40:92:96:e2:55:48:6d:31:e8:fa:2b:b4:
04:64:5a:c6:e2:ed:2d:35:78:f0:44:f8:48:37:40:
e0:6d:8f:09:8a:0e:b2:42:7a:e6:19:c7:a9:b5:e7:
c0:35:b8:ab:99:f1:4d:99:91:3b:9a:22:a6:28:c5:
69:cd:9f:6e:5a:33:06:77:88:8e:cb:47:f5:95:0c:
ad:aa:93:1d:08:72:fe:71:02:5c:cf:00:cd:63:f2:
7f:06:d7:a8:37:37:8f:b9:85:41:4d:bb:17:30:72:
8a:09:1e:b7:44:f4:fc:47:cd:23:87:41:8d:54:a6:
18:11:80:d8:99:72:1b:e1:f3:a3:80:47:f8:0b:22:
c5:0c:5d:a3:0a:42:04:e0:15:e1:20:18:a0:c4:a9:
df:4c:5e:2b:20:28:22:71:53:66:97:42:09:e3:fa:
bf:45:17:c3:53:bb:a8:25:64:15:a6:eb:25:0b:2b:
bc:8a:f6:b2:75:ac:85:1a:d7:ce:89:57:af:ef:94:
e1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:18:9D:73:0D:97:BF:44:5A:BD:B9:36:CF:DF:9D:27:12:DB:C0:9E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/708147A23D5911F08CA23EBFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.128.0/17
156.255.128.0/17
Signature Algorithm: sha256WithRSAEncryption
59:1d:00:59:47:d8:f1:d3:47:38:6e:24:18:4b:39:bc:20:09:
c1:01:54:56:7c:dd:b3:df:67:a2:f3:af:85:f4:97:ba:c4:d6:
ab:34:2c:a1:34:8d:55:33:d3:51:83:35:cc:d9:bc:2f:fe:f7:
2c:22:aa:81:0d:c8:8a:21:9d:77:ac:e8:41:48:6e:5a:02:0c:
a9:12:64:ec:0b:5e:db:77:da:57:08:40:16:7b:80:4b:7a:ba:
c6:a6:82:12:03:47:3f:cf:1e:41:fd:32:dc:2d:f6:b8:22:b1:
a3:76:d6:b1:0b:9f:8a:e4:07:e3:78:8e:dd:f8:98:ac:27:ec:
43:d9:07:fd:78:60:3e:b3:77:de:49:eb:49:95:4c:3c:4d:79:
43:50:a8:e0:9f:9f:96:11:1f:26:b6:f4:e8:67:55:2f:a3:0e:
a9:cc:31:a5:f5:ce:e2:68:d5:0f:b1:99:69:85:ff:b3:d8:bb:
6e:6b:df:6f:13:02:fb:c5:47:a2:ff:03:73:d8:09:05:b4:c3:
98:1f:c3:f5:d9:23:68:07:4e:8f:cc:80:5e:67:94:d9:fb:73:
c2:a4:cb:ac:50:94:55:9d:01:b6:c0:af:5b:b0:cc:11:7b:be:
45:e0:b1:ce:8c:a9:e3:08:78:0d:6a:1e:30:a0:a2:94:54:a1:
5d:33:36:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:46:14 2025 by rpki-client