Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85A28C9A2B2F11F0B1ABE0E4DAE4EC9C.roa
File: 85A28C9A2B2F11F0B1ABE0E4DAE4EC9C.roa (raw, json)
Hash identifier: 9gzNuOYWTPdS0tzuBXh6usiNB2yTUjBGRGc0ewgWbVU=
Subject key identifier: 88:04:F3:6D:CB:97:68:56:1A:D5:27:DA:B7:0C:86:39:86:28:32:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0152A4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85A28C9A2B2F11F0B1ABE0E4DAE4EC9C.roa
Signing time: Wed 07 May 2025 10:39:16 +0000
ROA not before: Wed 07 May 2025 10:39:11 +0000
ROA not after: Fri 06 Jun 2025 10:39:11 +0000
asID: 398993
IP address blocks: 156.245.64.0/20 maxlen: 24
156.245.80.0/20 maxlen: 24
156.245.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86692 (0x152a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 7 10:39:11 2025 GMT
Not After : Jun 6 10:39:11 2025 GMT
Subject: CN=681b3854-fb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:21:fd:df:d3:2c:fb:2d:d6:3f:0c:54:7b:
03:b3:ec:55:4c:b6:c5:86:97:dc:d7:86:0f:7e:c0:
50:dc:02:5d:1e:47:4e:dd:81:b6:c4:c2:a2:2d:51:
ea:d8:1a:cb:6c:44:f3:33:16:26:ab:87:0b:f8:81:
d7:01:2c:d6:7a:3e:a0:41:10:18:4c:de:e8:d1:2f:
b7:db:ef:ce:43:8a:13:5f:1b:a1:2f:c7:ef:7e:ec:
a8:d5:01:cd:0f:3d:ae:ff:c0:63:ee:ec:af:84:a3:
13:b4:4a:64:7a:70:d0:f4:4e:fd:b4:19:48:63:bb:
cc:7b:75:e3:29:c9:93:f1:0c:51:fb:6f:74:3b:75:
1e:67:d2:64:3e:12:28:fc:cf:a7:96:0c:55:ae:3e:
19:d4:4e:2d:5f:6a:bc:8f:2e:64:6f:da:b6:b8:58:
b4:51:88:8d:05:f2:0c:83:41:51:46:48:c0:11:84:
01:71:56:f5:af:13:8a:23:b3:9e:d9:39:b1:63:7b:
7b:e4:8d:1b:ea:ba:57:d6:cf:ae:40:50:96:33:49:
fd:a2:f9:3b:d0:a5:1d:29:9c:5c:a3:9f:39:4f:94:
d0:e8:95:ac:f2:24:bf:65:61:d7:17:32:bc:0d:41:
70:cd:5b:c6:9c:1c:ad:b0:c1:f5:3b:38:7b:0d:82:
a0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:04:F3:6D:CB:97:68:56:1A:D5:27:DA:B7:0C:86:39:86:28:32:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85A28C9A2B2F11F0B1ABE0E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a7:c2:55:b5:84:72:fe:b5:a2:4a:39:02:06:91:17:0f:2b:f8:
7b:f1:a7:70:99:38:33:a3:62:37:ba:14:81:26:56:11:05:71:
a5:5f:4a:b0:80:97:93:7b:21:a6:91:41:f4:3a:92:25:17:da:
bd:fe:65:e2:ff:c1:a5:b3:3c:a8:de:f3:d5:62:46:6b:0a:14:
ca:2d:50:36:68:f1:c7:54:f5:a0:91:72:2f:f9:08:32:a7:0a:
37:ca:11:3e:ce:b1:f7:5e:e1:0a:5b:43:25:65:00:0d:19:31:
f7:a5:97:ab:be:81:37:6f:05:59:a8:a7:c0:ae:bc:b1:a0:bb:
c4:65:c9:52:c6:ef:5d:00:aa:14:70:95:4b:f0:c0:a2:0d:2a:
d3:09:55:f9:db:09:8f:d0:85:a1:72:f2:e6:ef:04:71:94:15:
17:f8:a7:2b:7d:44:7a:0d:60:51:bc:af:cd:d5:46:20:d7:38:
cb:b4:f0:c2:8e:4e:69:8e:f6:18:e0:ef:91:07:92:87:ec:d5:
8b:00:77:7e:47:61:73:2f:01:e8:a8:01:2e:a6:7b:79:cc:48:
7d:03:f0:40:cb:00:bf:f3:e6:3d:12:ff:c6:64:f0:50:91:9b:
11:27:bf:41:db:03:9a:7f:38:a2:3f:7d:b8:20:f0:66:0c:b4:
73:31:c4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:40:50 2025 by rpki-client