Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6C289A2332611F0970B35AFDAE4EC9C.roa
File: B6C289A2332611F0970B35AFDAE4EC9C.roa (raw, json)
Hash identifier: 9iCcCfNYmx25j3GBLaPtJ2hwJYSEbIm7TfddYIRc6i0=
Subject key identifier: D8:1E:26:E8:0E:D5:18:D0:97:97:AA:6B:1B:DE:B3:67:0E:4A:AD:45
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015589
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6C289A2332611F0970B35AFDAE4EC9C.roa
Signing time: Sat 17 May 2025 13:56:22 +0000
ROA not before: Sat 17 May 2025 13:56:17 +0000
ROA not after: Sun 22 Jun 2025 13:56:17 +0000
asID: 213448
IP address blocks: 156.229.236.0/24 maxlen: 24
156.253.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87433 (0x15589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 17 13:56:17 2025 GMT
Not After : Jun 22 13:56:17 2025 GMT
Subject: CN=68289586-b91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:34:a6:e8:d8:e4:83:f6:fc:64:9e:47:6d:
c8:6d:f6:fc:d6:06:72:50:b7:23:53:44:70:a0:11:
8d:d0:58:10:da:87:bf:88:ea:db:9b:68:ef:30:8f:
b8:c5:38:e4:e5:85:64:8d:2d:5c:39:4b:fd:c0:94:
e5:ff:af:b2:81:5d:52:f9:ad:0b:d9:1e:9f:a7:4b:
36:a1:3b:1e:88:be:a8:98:16:9e:a0:d0:5a:8a:9c:
ad:da:4e:23:0a:cd:e7:66:59:d1:44:0f:2b:10:d5:
98:06:f1:0e:e6:43:55:de:67:2f:b3:79:15:2e:0d:
03:e0:5c:4b:bf:a1:0b:53:3b:84:69:ca:db:d4:ca:
a3:12:af:df:bc:e3:61:de:0b:d3:75:2d:ad:44:c5:
8c:3e:8e:f1:33:9c:f8:a5:f8:4c:85:b5:dd:14:9a:
49:e2:06:ee:2e:6f:06:26:49:ac:64:09:91:c8:da:
a9:2a:22:e3:f7:02:59:31:d8:f7:f1:ec:3f:9d:f5:
72:20:85:38:16:fe:d5:1c:76:15:bf:52:6e:fe:da:
d2:cb:1e:66:34:66:3a:8f:3b:7e:7b:7f:54:58:bc:
7f:54:36:fd:5f:d6:39:54:34:59:37:a2:9f:bc:25:
aa:66:af:e5:22:ee:f1:9b:1c:a6:77:7f:7a:87:f4:
29:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1E:26:E8:0E:D5:18:D0:97:97:AA:6B:1B:DE:B3:67:0E:4A:AD:45
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6C289A2332611F0970B35AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.236.0/24
156.253.222.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:33:40:fb:81:21:cc:18:62:3c:9c:b7:3d:5f:f0:9d:40:e0:
dc:95:0e:b2:eb:08:d7:2c:b2:3c:b6:5a:7e:72:ff:0d:f3:95:
a4:61:8f:df:3b:e0:27:a9:d7:59:70:8d:dc:dc:97:2a:ee:ad:
1b:5c:7a:e7:d2:cd:66:76:fb:6f:05:1a:a9:bd:f0:af:1f:fd:
8a:48:ac:b2:39:0f:f7:97:db:df:2c:dd:bc:3c:5c:e5:07:15:
e0:fa:90:1c:1d:2e:c8:a2:e1:b0:d5:54:a8:81:d9:8e:6e:82:
bf:a6:f8:68:13:99:e1:a3:59:54:51:87:c3:32:5f:67:56:2e:
2f:2c:ba:aa:bd:f5:12:b1:23:93:1a:5c:4f:18:02:33:59:58:
6d:3d:e9:ba:3f:e2:fd:88:38:50:9c:51:22:e7:6b:f4:72:dc:
db:96:0d:ba:63:47:b8:9e:ea:7f:b8:c2:f3:e0:08:f0:7f:c3:
9f:53:af:f9:d5:eb:bd:b4:30:7c:2b:4b:c8:1d:b2:ee:62:0f:
9e:2a:11:20:f6:da:6b:16:0f:62:88:03:e1:70:fb:a7:54:65:
12:c1:f7:fe:25:46:8d:69:7f:21:64:74:9f:58:0d:b7:0f:bd:
a5:62:79:5c:e6:74:06:07:4d:7a:9e:bb:7f:0d:eb:0f:19:4e:
27:21:a4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:32:02 2025 by rpki-client