Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7AD6C702F2F11F08A81BDA6DAE4EC9C.roa
File: A7AD6C702F2F11F08A81BDA6DAE4EC9C.roa (raw, json)
Hash identifier: lJoEBtj+XAAD87qB6L3+oHzP2LFj9BCBayGYfBv/jiU=
Subject key identifier: 47:86:E0:FB:36:F1:B6:58:11:24:FE:83:BD:E8:7B:13:3F:FE:27:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015369
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7AD6C702F2F11F08A81BDA6DAE4EC9C.roa
Signing time: Mon 12 May 2025 12:50:18 +0000
ROA not before: Mon 12 May 2025 12:50:13 +0000
ROA not after: Tue 17 Jun 2025 12:50:13 +0000
asID: 395793
IP address blocks: 156.230.159.0/24 maxlen: 24
156.230.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86889 (0x15369)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 12 12:50:13 2025 GMT
Not After : Jun 17 12:50:13 2025 GMT
Subject: CN=6821ee89-ccf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:12:30:21:99:41:61:f9:32:03:09:a7:bf:f6:
9a:cf:f7:96:8b:86:cb:a7:9e:fd:10:41:e3:f1:fb:
39:6f:f4:dc:90:9b:9e:a1:a9:c0:0b:46:2d:84:56:
4c:29:98:09:ac:75:e3:24:c7:b8:12:f4:b7:bc:75:
2c:af:7b:96:c8:a1:7f:45:a6:96:8e:94:90:52:61:
c3:29:5f:a8:0a:0c:70:6b:f7:59:40:70:81:20:fd:
66:3e:04:b5:39:9c:8d:e1:06:ac:f5:4b:5d:6b:c5:
14:06:c4:33:71:9f:f8:40:8e:e0:94:2c:1c:2f:53:
62:7f:51:3e:ee:1a:56:4d:12:64:0a:53:8f:49:23:
b5:34:6c:16:6e:b1:6b:2c:c6:71:08:04:d3:08:fd:
fb:0b:d4:df:d2:32:0f:12:6e:3d:a7:37:47:6d:34:
0e:25:15:aa:15:d5:3c:66:49:c8:3a:44:31:d1:51:
1c:ee:c6:d9:7c:9b:ad:d5:cf:cd:91:76:26:21:42:
af:93:30:a6:cd:77:95:5d:dc:a6:82:4d:87:84:f7:
da:cd:95:e6:74:1d:a5:8f:ea:b9:9e:f5:8b:eb:06:
e6:24:3c:55:33:de:6e:a5:7f:0b:89:1f:83:ad:80:
a2:90:3e:71:81:15:7c:76:d4:34:1e:23:df:48:c6:
ad:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:86:E0:FB:36:F1:B6:58:11:24:FE:83:BD:E8:7B:13:3F:FE:27:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7AD6C702F2F11F08A81BDA6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.159.0-156.230.160.255
Signature Algorithm: sha256WithRSAEncryption
3f:ee:4c:72:e6:5c:b1:1b:57:46:e1:6e:02:cb:fc:ac:89:ac:
73:64:80:74:64:dc:30:98:4d:34:53:38:ba:f6:81:26:d1:cc:
c3:60:aa:f7:27:0d:fb:af:76:e6:a9:6e:a8:c8:5b:dd:96:f3:
5e:44:d9:b2:b3:9f:78:ed:30:43:48:70:27:c8:0a:fe:4e:74:
31:1c:15:2e:59:04:f8:15:5f:3e:2a:82:d2:01:47:b5:51:2c:
38:fd:d1:1d:c8:7a:48:99:79:4a:85:cb:00:0b:16:08:55:82:
07:ba:2e:5f:53:10:b4:12:4b:fa:15:37:9d:e9:9b:76:e7:41:
32:97:2b:d4:67:00:17:64:dd:17:a1:5c:7c:b1:75:66:4d:25:
af:43:dd:6f:73:42:f7:c3:fb:a5:da:6b:63:64:ff:11:49:20:
97:12:d4:0d:48:62:75:b5:77:34:7c:52:27:4f:17:b3:3a:f8:
06:b1:97:07:d1:a1:55:59:ce:8b:18:e9:63:ac:1b:53:14:53:
49:d4:64:ed:c7:55:d3:e5:96:8f:05:f9:62:af:24:3c:23:bd:
ea:b0:85:a4:89:55:d8:2e:b0:85:bf:8b:59:22:0e:c0:0e:e6:
ed:55:fd:1b:2e:a5:2f:6f:27:e3:e9:f1:35:83:8b:40:7e:be:
0f:31:6b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:32:20 2025 by rpki-client