Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3237E80332411F08F0DBBA1DAE4EC9C.roa
File: A3237E80332411F08F0DBBA1DAE4EC9C.roa (raw, json)
Hash identifier: 5BvEZNqWjC88EfksQ/HJmM/8fmFIulMPXanNopbtXQo=
Subject key identifier: CB:CE:91:1F:20:91:60:2D:07:D7:E8:C5:85:9F:32:11:B5:BE:25:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015585
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3237E80332411F08F0DBBA1DAE4EC9C.roa
Signing time: Sat 17 May 2025 13:41:30 +0000
ROA not before: Sat 17 May 2025 13:41:25 +0000
ROA not after: Mon 23 Jun 2025 13:41:25 +0000
asID: 138648
IP address blocks: 156.247.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87429 (0x15585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 17 13:41:25 2025 GMT
Not After : Jun 23 13:41:25 2025 GMT
Subject: CN=6828920a-2302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:ff:e1:9d:4b:78:fb:f7:8d:c9:58:12:18:
c0:40:63:bf:71:b9:44:6b:41:71:50:15:38:a7:9c:
d1:58:10:0f:b3:92:3b:e2:27:f9:34:1f:ee:f7:ba:
3a:6b:df:6b:ee:5f:9e:98:24:bd:b4:bc:1b:68:e4:
29:75:99:df:35:e0:fd:92:45:c2:68:f2:73:93:62:
32:7e:dd:22:67:af:4d:99:ba:f8:3a:a1:bd:4b:06:
b3:e9:58:bc:62:4e:9e:f2:1b:d3:eb:f5:6f:7b:71:
4c:c5:b9:8f:24:b4:7d:27:8a:7c:84:17:01:15:4b:
86:3e:4c:c0:99:4b:3c:91:4d:a4:23:d0:72:75:1f:
f5:33:8f:4e:a2:37:d6:a0:6a:51:37:51:a9:6b:97:
9b:89:f3:b6:74:6c:95:1a:8e:de:c6:84:1a:a5:cf:
44:b0:89:88:25:2d:54:5d:3f:cb:be:5c:b4:93:05:
bd:cd:bc:72:e1:c4:76:1c:9d:9b:32:c4:65:c2:68:
99:12:69:26:b2:21:8b:bd:34:dc:2a:33:44:a8:58:
b4:35:a1:20:01:f2:da:64:61:46:f8:66:1b:a8:b2:
9f:39:07:d4:e8:64:fb:a0:2d:0a:e1:6c:5c:ee:e5:
f3:7f:a7:a6:56:dd:0e:4e:b3:3e:ba:cc:ef:a7:1e:
4e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CE:91:1F:20:91:60:2D:07:D7:E8:C5:85:9F:32:11:B5:BE:25:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3237E80332411F08F0DBBA1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.62.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:47:c0:14:46:ea:b6:9d:80:56:6c:5f:5b:ac:a7:8f:6c:62:
51:6b:52:02:74:2b:db:f4:9d:94:e0:ff:fb:38:7f:2c:b7:c0:
3c:e8:12:ab:e5:8f:bb:dd:56:45:3a:c9:16:3f:57:94:03:ed:
e5:d4:d6:eb:27:30:c7:81:a1:01:83:bc:02:a2:02:30:ba:0a:
86:8d:7b:23:42:22:2d:75:2a:fa:d4:61:8f:8c:8b:62:88:f8:
c9:8e:f6:2f:88:13:9b:0c:fc:50:4f:ef:9e:5e:1d:fe:48:85:
29:33:6e:a6:7a:1e:05:ba:4a:e2:89:9f:47:6f:9b:c7:d7:d0:
15:6c:f0:2f:ca:cb:d8:45:19:b9:fd:35:4a:88:42:1f:af:49:
4c:f1:5d:8d:c7:b0:c9:3a:96:47:f0:ec:ed:fe:20:68:ed:a6:
9d:17:59:f9:53:54:72:4b:b8:f5:8d:32:4a:99:53:ae:5d:66:
84:2d:c7:47:e3:39:13:7b:83:b2:32:6a:a9:d9:f9:2e:20:90:
51:6a:7e:77:46:df:8a:1c:81:0e:f1:6e:87:4c:84:67:16:6f:
21:03:3e:c5:34:3f:53:55:60:d3:e7:1b:64:7e:6c:89:d2:b7:
ac:3a:33:ea:c5:38:8d:ec:6d:7b:f6:be:c4:07:9d:5c:d2:1e:
0a:98:e8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:29:59 2025 by rpki-client