Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/975BC6402B2511F0AAA7A4A5DAE4EC9C.roa
File: 975BC6402B2511F0AAA7A4A5DAE4EC9C.roa (raw, json)
Hash identifier: eHaAPmuV0a0nsxDhpWlOnGU17W9R0MzS7D+8yuJoGK8=
Subject key identifier: 6F:85:8D:3B:FC:36:C0:C9:8A:CD:BE:C7:F7:80:61:CF:23:90:35:4E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015284
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/975BC6402B2511F0AAA7A4A5DAE4EC9C.roa
Signing time: Wed 07 May 2025 09:28:11 +0000
ROA not before: Wed 07 May 2025 09:28:06 +0000
ROA not after: Fri 13 Jun 2025 09:28:06 +0000
asID: 20473
IP address blocks: 156.231.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86660 (0x15284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 7 09:28:06 2025 GMT
Not After : Jun 13 09:28:06 2025 GMT
Subject: CN=681b27aa-132c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:d3:9a:47:1f:fa:18:db:35:39:2e:59:42:
6c:ee:08:c0:67:80:8c:ef:7a:0d:ce:6e:d8:d6:e0:
ed:aa:09:a7:68:af:eb:a7:66:b1:75:66:db:72:06:
5f:97:8e:89:97:de:39:dd:6a:25:16:96:fc:5b:48:
34:ff:15:cf:6f:4a:b1:61:cf:50:97:86:af:9b:e4:
74:41:58:da:80:10:3b:ee:3c:cc:de:27:93:1f:1e:
cd:6d:23:f8:a1:63:1a:34:f6:f0:d9:05:72:4c:78:
2e:8b:25:5c:d8:7d:64:90:ea:3f:65:1e:ab:b8:08:
35:86:8a:0a:85:b9:bf:37:43:f7:48:cb:69:f1:26:
26:ee:89:9d:a0:e3:47:b1:83:6f:df:01:ef:87:2f:
f1:c0:4c:c9:54:16:77:95:5b:3f:81:f2:8e:c2:f9:
35:85:16:d7:71:cc:49:47:99:cc:6a:d5:cf:2e:6d:
8b:8d:f6:a5:4d:8d:07:9b:59:cd:a7:22:b3:7a:34:
d6:b6:b0:8b:20:01:1c:f0:6e:05:7e:3b:a0:cf:35:
37:d4:5d:e7:7e:d4:70:a5:2e:c6:4a:1c:d5:dc:49:
25:9c:df:26:7e:a3:76:1c:eb:2b:fd:96:1b:6c:7f:
f0:4f:a2:38:eb:2e:bc:60:b6:85:d6:77:a7:bf:4b:
90:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:85:8D:3B:FC:36:C0:C9:8A:CD:BE:C7:F7:80:61:CF:23:90:35:4E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/975BC6402B2511F0AAA7A4A5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.10.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:4e:b7:cb:9e:65:52:64:f2:f9:39:d7:fd:2c:dd:f2:73:06:
19:1c:e1:9a:b4:55:76:e4:2f:6c:8c:ce:88:ed:a5:36:0a:ad:
55:6f:6c:82:d0:ab:2b:41:80:22:ea:fe:4a:91:28:a1:ae:86:
55:f2:8c:54:e2:ce:ee:a1:d4:01:11:d7:0d:e9:21:25:64:31:
8b:46:a3:34:95:78:a1:fe:00:a5:e6:fd:32:ce:51:3a:f3:18:
79:22:07:26:21:e4:e7:4e:ac:b6:bd:be:00:eb:80:db:30:6c:
25:22:ba:3a:2f:98:2f:ed:1f:ce:d3:58:c7:a2:06:9e:79:3c:
3c:c1:31:b2:66:4b:09:96:8d:a2:57:fd:d7:1c:e3:da:51:39:
74:1c:76:58:e5:8a:88:45:34:2a:cb:66:9a:70:6f:19:38:b7:
98:06:49:d4:d2:b5:48:54:ad:6e:6a:c9:8c:95:30:6d:88:2d:
7c:bf:39:21:ac:cd:04:c3:f0:f0:3b:b7:06:1d:8a:0d:4f:42:
01:99:7e:7c:5d:9c:b7:75:cd:34:84:c3:27:04:91:43:95:de:
18:b6:6e:89:df:b3:85:4b:fc:67:b3:f6:6d:cf:04:a0:85:01:
61:1e:76:b8:2f:62:cb:66:ff:64:7d:fa:9c:3c:73:15:83:cc:
27:52:15:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:25:11 2025 by rpki-client