Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6124A66355611F0838B3DD5DAE4EC9C.roa
File: A6124A66355611F0838B3DD5DAE4EC9C.roa (raw, json)
Hash identifier: ZAUApQRJh3bW83GIj09EkIwN8DH84wE28b6FsrEOxog=
Subject key identifier: 68:2A:1A:17:E6:2F:1D:5A:5E:94:8B:2C:50:38:5A:8E:A9:6C:C4:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015616
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6124A66355611F0838B3DD5DAE4EC9C.roa
Signing time: Tue 20 May 2025 08:44:32 +0000
ROA not before: Tue 20 May 2025 08:44:27 +0000
ROA not after: Fri 27 Jun 2025 08:44:27 +0000
asID: 20326
IP address blocks: 156.233.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87574 (0x15616)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 08:44:27 2025 GMT
Not After : Jun 27 08:44:27 2025 GMT
Subject: CN=682c40f0-2624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:4c:58:e8:0b:86:af:1c:fa:7d:ad:52:4a:
33:9a:fd:7a:b3:15:2b:3b:cd:2b:01:71:bb:1e:f2:
de:76:be:4b:56:f9:17:99:3d:69:73:b3:a1:74:82:
16:16:92:f8:a4:a1:2a:40:e0:23:4c:f1:ea:fe:c1:
de:77:45:17:22:5e:94:62:c6:96:ea:70:84:58:89:
a3:5f:8f:da:ac:66:20:78:99:72:59:a5:2d:f8:1f:
70:af:81:65:90:de:c9:82:f6:1b:95:65:c9:96:f4:
a5:cb:85:54:a1:26:0a:ab:79:bd:4e:83:98:8c:58:
93:ee:c1:00:e4:8b:4f:e6:fe:9d:23:9b:24:75:1d:
32:bd:56:06:ac:00:61:33:f9:3c:f0:f4:24:e3:9e:
5c:77:49:f0:f5:23:2f:68:d4:08:3a:e0:3a:9e:f4:
83:66:4d:82:ec:51:4d:96:34:7a:b8:d9:a7:d8:dd:
38:30:3e:1d:f2:4e:8d:71:ac:11:2e:e6:b4:fe:39:
18:02:d6:47:c8:92:06:ec:45:5c:95:2a:cc:07:43:
f9:e1:16:9b:c6:dc:ac:0d:ec:0b:e4:c0:3f:7a:11:
f5:d5:6a:dc:34:66:95:72:b1:56:7e:7c:db:57:d2:
29:b2:1a:c2:18:ec:cb:32:58:77:8d:93:c7:43:ec:
c4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2A:1A:17:E6:2F:1D:5A:5E:94:8B:2C:50:38:5A:8E:A9:6C:C4:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6124A66355611F0838B3DD5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.54.0/24
Signature Algorithm: sha256WithRSAEncryption
92:5c:19:10:30:03:80:19:0d:d0:d3:f9:a2:02:09:79:31:48:
3e:9b:6e:d2:42:1f:d8:b7:86:ed:fe:a9:b7:a1:ef:a5:6b:7c:
38:dd:b2:01:8a:7a:1a:2b:fd:54:3c:8b:d6:88:8e:b4:7f:df:
5d:38:32:ef:b8:b8:db:64:10:5e:f9:c4:82:f3:4d:18:58:25:
6d:eb:26:e5:93:3c:7b:06:0e:54:a8:b9:04:89:de:b5:45:eb:
9f:40:ef:c2:3f:e9:38:46:f5:84:00:95:35:60:17:16:28:f9:
b7:45:23:9c:60:98:09:de:ed:5c:6a:15:17:72:a9:89:dd:84:
b1:22:9d:01:8a:ac:7e:e7:f3:3a:6f:f6:77:71:0f:a3:ec:63:
91:52:2b:3f:f7:1c:c8:b0:d4:c1:d3:02:99:8c:72:d7:12:82:
a4:1b:86:6c:5e:50:6a:d3:84:b2:3e:3a:fe:92:43:6d:3a:18:
32:3c:8f:a8:33:c5:5a:95:33:8f:a5:45:f0:96:e7:89:63:9f:
dc:81:a9:61:33:d1:f9:23:9d:7b:f9:11:f7:24:02:ef:06:b4:
e5:3a:8e:fc:3e:40:06:c9:59:30:5d:4f:0b:e1:c2:62:2d:10:
ee:bb:4e:be:da:94:48:b4:23:49:19:1d:06:13:d1:b2:db:c1:
c6:43:1e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:43:25 2025 by rpki-client