Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81ACF99A380911F0B37829A6DAE4EC9C.roa
File: 81ACF99A380911F0B37829A6DAE4EC9C.roa (raw, json)
Hash identifier: spPNM2H0XtGIfffIOrqmRc0doTQMZJ58olce01hVSjc=
Subject key identifier: 5B:4B:E0:D0:D8:41:CF:05:C6:B2:D0:85:F3:14:B0:A6:B0:79:A0:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015711
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81ACF99A380911F0B37829A6DAE4EC9C.roa
Signing time: Fri 23 May 2025 19:09:53 +0000
ROA not before: Fri 23 May 2025 19:09:48 +0000
ROA not after: Wed 17 Jun 2026 19:09:48 +0000
asID: 36137
IP address blocks: 156.245.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87825 (0x15711)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 19:09:48 2025 GMT
Not After : Jun 17 19:09:48 2026 GMT
Subject: CN=6830c801-a41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:29:af:7d:d9:52:d4:f2:d6:a9:e8:13:8b:ed:
7e:19:47:6a:dc:32:f1:ce:2d:96:e8:f2:1d:59:43:
38:b3:f7:4c:84:72:ee:8f:23:cc:04:1b:ba:a0:42:
8a:79:f6:25:41:8d:24:e8:bc:f9:d8:c2:21:f9:e0:
a5:4e:16:e7:71:ba:d2:6a:40:26:49:96:bc:05:9c:
17:0b:40:9e:3f:f8:69:19:8a:f3:32:01:06:4f:cd:
f1:61:68:4a:c4:25:f4:cb:42:f0:03:46:c5:90:ec:
4f:eb:e4:57:a4:c8:c9:f2:90:e6:c5:be:d1:1b:40:
39:3b:84:d3:fa:1e:bb:7a:f9:ca:2a:96:ce:49:6a:
e3:66:04:e0:63:fb:e5:01:a4:30:0c:ac:14:23:87:
0f:b7:ea:e9:3e:d1:01:c5:f2:39:88:b5:bf:da:d4:
8d:86:5b:16:f9:96:77:08:da:18:79:5e:c9:26:0d:
8e:db:20:fd:b6:7e:6e:2c:2f:b0:f0:9a:2b:63:db:
16:30:f1:7c:c8:7b:59:0a:55:aa:73:1b:3b:a6:f9:
f4:99:6a:3b:80:e4:27:9e:53:b3:18:f4:9b:81:1d:
c5:15:7d:26:3c:bb:68:77:69:80:4a:39:99:4f:ca:
a4:91:fa:82:40:78:be:df:33:7e:07:b3:bb:87:b6:
1b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4B:E0:D0:D8:41:CF:05:C6:B2:D0:85:F3:14:B0:A6:B0:79:A0:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81ACF99A380911F0B37829A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.64.0/18
Signature Algorithm: sha256WithRSAEncryption
83:12:25:46:c1:f9:50:d4:4a:a1:95:8b:18:c4:60:5c:35:5b:
f0:91:ec:f0:ab:bc:29:ec:d1:4a:ec:60:be:37:3e:5f:7d:a6:
f6:e6:0e:cc:af:fd:bb:87:76:d5:07:30:e1:a1:38:ff:c5:f9:
12:5f:c4:6d:54:a1:df:b6:69:c7:92:3b:7a:d1:59:5d:9c:69:
9e:ed:33:17:0f:8f:c2:be:10:87:09:8b:35:08:e1:34:62:9d:
b0:3a:b9:0c:bb:42:e1:de:e6:97:d2:03:07:98:d6:f0:5c:a1:
8c:ec:f2:7a:91:0a:7a:71:41:80:9c:e6:a0:7a:9e:bc:7c:20:
a1:fb:60:34:43:44:b3:1d:9f:02:55:d4:64:2e:82:57:c4:ed:
4c:42:80:9d:0b:2e:7a:84:63:03:4e:d7:7e:a9:8a:73:f8:44:
34:81:d7:3e:21:65:88:87:bb:29:dd:62:3f:33:06:30:bc:39:
69:e4:d1:1d:68:30:b2:ab:da:8e:41:7b:e0:b8:6e:47:e3:85:
1c:f4:8e:ac:d1:97:2e:f4:46:c7:f8:c8:d6:94:7d:c5:2e:2f:
27:d6:37:be:b3:e5:83:f1:e9:0b:88:f6:09:b3:ad:80:86:e8:
76:de:65:f8:ad:e6:e0:a4:52:75:2a:a1:fe:60:6c:16:45:46:
cd:bb:46:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:56:23 2025 by rpki-client