Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A897F4AE30A911F093C9A58CDAE4EC9C.roa
File: A897F4AE30A911F093C9A58CDAE4EC9C.roa (raw, json)
Hash identifier: np/QE6igVo3ftq0VtbqcXLMy/tAKY1Z6ejCKY/bOIm4=
Subject key identifier: E5:6E:0F:8F:76:4E:EF:6B:66:EB:79:92:AB:62:C6:69:F7:C4:8C:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01543E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A897F4AE30A911F093C9A58CDAE4EC9C.roa
Signing time: Wed 14 May 2025 09:56:09 +0000
ROA not before: Wed 14 May 2025 09:56:04 +0000
ROA not after: Sun 22 Jun 2025 09:56:04 +0000
asID: 142032
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87102 (0x1543e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 14 09:56:04 2025 GMT
Not After : Jun 22 09:56:04 2025 GMT
Subject: CN=682468b9-b016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:55:0f:2e:95:80:cb:d2:02:d9:71:1d:34:17:
f5:47:ec:8a:3e:9c:9e:22:ce:fb:5c:0c:e5:c3:31:
e5:a6:eb:ba:1c:c8:ad:ea:67:33:3d:36:3b:f1:fc:
36:75:91:d1:13:7a:89:13:51:85:36:54:27:75:a3:
b9:67:3f:fd:70:97:66:16:64:59:d6:d8:3e:b7:4c:
0a:df:1b:4a:25:6b:3f:a6:70:e9:3b:76:8b:bb:9a:
a7:9c:80:f4:50:92:7e:d4:cd:50:ae:1d:6b:3d:11:
7f:73:29:c6:99:8c:b0:60:60:a0:5f:1e:50:ff:2e:
c7:a4:a7:66:62:2d:82:1a:15:d0:4b:93:2d:47:f5:
17:46:37:3e:7f:fe:73:c4:e3:76:0c:90:49:45:e5:
33:49:3c:b1:bf:a9:50:b2:db:40:e5:d0:84:d0:9a:
7e:eb:db:af:50:c8:f0:26:b7:76:f4:24:54:32:7d:
98:df:96:fc:a8:48:6f:97:52:f4:2e:d6:4d:5a:fc:
7d:56:6b:75:b6:a3:5b:d5:62:33:60:b0:54:a1:c7:
93:ee:db:d9:da:09:10:6f:38:b3:08:e4:0f:6d:c4:
21:2a:7f:7c:db:27:93:47:e6:07:93:1a:03:af:aa:
df:9c:ff:17:4b:09:71:47:dd:05:22:de:7c:ce:6e:
5a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6E:0F:8F:76:4E:EF:6B:66:EB:79:92:AB:62:C6:69:F7:C4:8C:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A897F4AE30A911F093C9A58CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
9d:3b:42:1b:16:06:70:0e:88:57:e3:64:5c:c5:e2:80:26:b7:
55:c6:18:15:f9:58:2a:bd:99:77:e4:f0:27:c5:77:29:63:d5:
2e:12:d5:cc:58:02:b6:d7:4b:e0:43:f5:43:8b:61:fc:87:b7:
bf:09:6c:6b:93:53:f0:7e:4b:39:8c:8e:54:27:98:5b:d2:74:
31:dc:52:41:e0:2a:8b:67:81:f0:41:6b:4d:78:1e:f6:39:42:
d5:df:ff:b8:c9:b2:a7:1e:87:9d:da:c7:c8:e3:3b:40:40:10:
89:d3:28:ed:dc:03:3b:89:e2:be:17:36:46:cb:22:6b:b5:d1:
4b:57:79:99:fd:64:de:77:75:b8:36:79:9d:cc:f5:ea:dd:2b:
74:9d:5a:74:6f:ac:74:7b:46:0e:8d:06:2b:4e:dc:f6:51:f8:
d0:6b:c4:83:4a:dd:c8:a3:ca:f2:ac:47:3c:4e:42:7f:ec:ff:
03:d5:28:34:52:37:0b:47:22:15:e2:3d:88:6c:d7:a5:bc:a6:
56:67:18:43:39:31:55:49:31:d3:0b:ff:26:43:da:f9:a5:32:
ee:1e:26:c0:61:c2:87:e2:90:c3:4a:9a:21:80:ee:6a:ff:18:
aa:e0:6d:33:20:06:f7:35:bd:f1:7b:4b:11:22:99:69:55:c1:
79:0a:65:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:24:32 2025 by rpki-client