Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A324B362A5611F0983EE6BCDAE4EC9C.roa
File: 7A324B362A5611F0983EE6BCDAE4EC9C.roa (raw, json)
Hash identifier: 53RwKOn56n0uQ5ewKsuAiR0U/7AeiyeATb7msRTA8pA=
Subject key identifier: 02:DA:0F:26:2B:94:9F:C9:8A:7F:EE:E2:1A:FD:CE:2B:C1:4D:62:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015241
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A324B362A5611F0983EE6BCDAE4EC9C.roa
Signing time: Tue 06 May 2025 08:45:36 +0000
ROA not before: Tue 06 May 2025 08:45:31 +0000
ROA not after: Fri 13 Jun 2025 08:45:31 +0000
asID: 398993
IP address blocks: 156.245.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86593 (0x15241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 6 08:45:31 2025 GMT
Not After : Jun 13 08:45:31 2025 GMT
Subject: CN=6819cc30-d4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f0:fc:61:df:bb:ed:7b:94:0d:32:d0:f6:37:
89:1b:d7:d4:d0:37:50:f8:90:92:1c:90:59:9b:de:
5a:f1:b2:e2:bc:86:98:a4:ba:97:4f:bd:a7:c6:ec:
dd:45:98:0a:d1:26:de:01:c5:2c:7e:d4:27:b2:61:
be:12:a5:07:30:f7:83:1c:7e:68:5a:7c:57:8c:42:
b1:cb:4e:8c:e7:22:05:99:51:c2:9e:57:56:a9:48:
6c:2c:a2:1e:9a:2b:3f:76:5e:cc:eb:3a:f5:00:75:
5e:61:02:65:00:90:f3:ee:92:aa:7e:59:54:d2:2d:
4d:05:24:a9:b5:ce:c1:8c:7f:28:c4:59:29:fc:6c:
35:c1:87:5e:00:e2:4c:da:d9:da:e6:44:41:f9:97:
30:18:68:57:e8:dd:74:5f:1f:30:a1:15:62:ff:df:
e9:8a:30:19:aa:55:8c:e5:3d:4d:42:e7:b5:a7:27:
d7:23:43:35:9a:bd:71:ee:f0:7e:e1:48:0e:68:8e:
8b:87:9f:5a:e6:60:3d:68:ec:8c:56:07:e1:5e:3c:
49:28:f5:03:99:0d:8b:2f:b4:23:c2:af:71:40:ce:
69:09:9a:11:0a:14:3c:86:af:5f:6b:34:17:c4:81:
60:b6:2f:37:e5:97:c6:33:31:6e:1a:0d:02:28:eb:
7b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DA:0F:26:2B:94:9F:C9:8A:7F:EE:E2:1A:FD:CE:2B:C1:4D:62:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A324B362A5611F0983EE6BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b3:e0:6f:57:03:5d:d6:f3:81:e5:ca:ef:f4:e2:11:68:15:ac:
1c:cd:2a:67:e8:8a:df:44:2d:dc:0c:88:9d:e0:22:c0:4b:c0:
aa:9e:73:3d:42:79:68:74:34:9d:a8:a6:fa:94:8d:ab:52:72:
b6:dc:51:fe:55:11:40:3b:e2:fb:aa:17:54:49:2a:96:2a:d4:
ec:c0:84:e2:30:ce:45:62:30:c3:61:ca:0e:92:52:51:0b:59:
3a:7e:9a:13:36:e3:4f:00:76:c1:25:27:5d:5e:90:8d:81:bf:
da:de:18:aa:79:95:7c:89:c3:55:32:8c:2c:0e:32:c9:85:2d:
9c:3b:20:11:0b:be:a1:9f:03:e9:60:bf:9d:b2:a6:d6:ce:64:
7e:a5:ca:b2:0f:83:04:a0:eb:16:d6:a5:ad:c9:d9:20:a0:08:
4c:7d:94:01:9c:78:18:6d:65:07:32:16:9e:13:ae:fd:bd:cb:
47:39:59:b5:d3:58:fa:ef:df:73:99:f9:70:86:29:d1:8b:bd:
43:11:c4:e7:79:b0:63:1b:42:af:c5:68:d8:7e:82:01:9f:41:
f3:7e:4b:f9:04:5b:e3:74:06:bf:e2:98:c6:74:67:4e:f3:72:
22:e3:43:16:4c:55:92:bb:ed:6e:e2:29:62:dc:d8:dd:89:28:
0e:40:a9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:31:09 2025 by rpki-client