Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89A4A74E356911F0A84E70D3DAE4EC9C.roa
File: 89A4A74E356911F0A84E70D3DAE4EC9C.roa (raw, json)
Hash identifier: rnHDi2wND9vqR41elwQ0Uc0Jm1a3sSEJv8POIi4kYhM=
Subject key identifier: 0D:B4:D3:48:51:DF:AD:2D:B7:91:32:A8:F2:BE:0D:7F:B2:37:29:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01563A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89A4A74E356911F0A84E70D3DAE4EC9C.roa
Signing time: Tue 20 May 2025 10:59:45 +0000
ROA not before: Tue 20 May 2025 10:59:40 +0000
ROA not after: Fri 27 Jun 2025 10:59:40 +0000
asID: 44559
IP address blocks: 156.246.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87610 (0x1563a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 10:59:40 2025 GMT
Not After : Jun 27 10:59:40 2025 GMT
Subject: CN=682c60a1-c882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3a:8c:e4:f3:a6:dd:19:ea:01:a4:a4:28:49:
c9:46:21:5a:db:23:0b:03:9c:76:b8:9b:84:fe:9b:
c8:32:1f:a9:56:54:de:50:c7:e7:73:d3:92:1d:07:
f2:ad:ed:2a:77:a9:1d:d2:86:56:81:bd:3f:15:4f:
be:ca:72:aa:f8:dd:ee:30:8e:d4:9a:4e:ba:55:b7:
cf:d2:f4:f8:06:d5:e2:61:49:4f:5b:bf:a8:49:be:
26:59:8d:43:88:92:f5:13:53:92:90:3c:42:e4:cc:
fb:59:97:95:16:84:07:31:78:b8:0c:41:91:a6:af:
ab:ea:b3:f5:77:89:1a:3b:e8:19:46:b9:26:47:4c:
8e:c4:08:bf:9a:7a:34:05:f0:a8:36:32:aa:ca:16:
23:4e:09:7f:14:87:fb:59:e1:68:de:68:fe:5b:f8:
42:a9:24:1b:71:09:5b:86:b6:72:7e:f0:00:44:a9:
34:e1:11:26:12:6b:8d:7b:76:49:05:f0:a5:2e:fc:
04:12:86:43:24:9c:0c:e7:b7:2a:37:c7:a8:84:fb:
a9:f4:70:02:14:57:93:66:64:d1:f0:e6:71:39:a0:
66:8d:19:70:fd:05:0f:05:71:2a:c9:8d:f7:b0:80:
15:b5:b3:f2:11:50:ae:e1:6b:b8:19:09:ec:f0:68:
d2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B4:D3:48:51:DF:AD:2D:B7:91:32:A8:F2:BE:0D:7F:B2:37:29:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89A4A74E356911F0A84E70D3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.252.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:c2:bf:44:35:61:8f:09:e1:d5:c9:db:7d:0c:0c:9a:92:1a:
aa:6e:c1:47:72:c5:37:15:27:00:30:32:33:06:e1:7d:cb:15:
ed:da:d5:b0:e7:7a:62:5a:df:db:e5:f8:71:35:cb:fa:59:47:
c1:7f:c0:9f:13:96:6a:cd:19:30:0c:fe:b9:ef:19:30:46:4f:
5a:a8:3f:93:69:65:fe:de:72:22:e4:29:cc:6b:6b:d3:0e:6c:
f2:09:b3:94:9f:dc:a6:82:3f:4f:d2:20:e4:37:23:de:d1:28:
cc:c5:ae:2e:dc:3a:59:46:8b:34:4e:d9:39:31:1e:85:77:e5:
b6:db:20:a3:14:62:b2:af:0f:e0:fb:0f:8e:f4:e4:31:a4:14:
3e:44:3b:e8:75:9b:49:21:56:00:87:b4:b0:5c:fc:e8:3e:6e:
2c:d4:3f:a6:a5:7b:bc:b0:03:1c:2d:67:87:43:1a:93:10:ae:
c1:5a:b9:a6:53:2f:ee:a5:6e:04:8a:62:40:40:2f:77:2c:77:
76:fb:bf:07:16:dc:6a:a9:dc:06:c0:80:5e:d3:50:23:0d:7b:
0b:91:b3:09:a7:85:eb:a5:d2:25:e3:01:33:93:be:1b:66:f0:
4c:8e:e8:ac:a4:0d:78:91:94:50:40:5e:d9:43:77:96:b7:ff:
7f:23:75:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:58:36 2025 by rpki-client