Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C732A45A3E3611F0AE87B6DADAE4EC9C.roa
File: C732A45A3E3611F0AE87B6DADAE4EC9C.roa (raw, json)
Hash identifier: EipXkj9UpzCTVio6ifjm8GqWXAIrEZXMKYunP9ZYuyI=
Subject key identifier: 85:E1:CE:4E:68:89:49:85:53:97:D1:6C:20:36:69:5D:85:36:E9:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01593A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C732A45A3E3611F0AE87B6DADAE4EC9C.roa
Signing time: Sat 31 May 2025 15:49:04 +0000
ROA not before: Sat 31 May 2025 15:48:59 +0000
ROA not after: Thu 10 Jul 2025 15:48:59 +0000
asID: 395886
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88378 (0x1593a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 31 15:48:59 2025 GMT
Not After : Jul 10 15:48:59 2025 GMT
Subject: CN=683b24f0-aa77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a6:c8:a8:73:bc:1c:07:51:43:51:ed:7b:d9:
cd:68:cf:33:54:e6:81:3e:7f:39:f1:df:41:ec:73:
9d:cc:0e:6a:34:fb:7a:bb:a5:61:b6:8d:24:24:41:
cb:49:e3:90:04:8a:79:7f:c9:4d:16:97:1a:88:8d:
38:00:63:f5:6d:d2:d5:de:d6:33:3e:a5:a6:cb:81:
22:f7:2a:d4:0f:7c:9a:22:52:9b:43:9c:4f:95:48:
77:eb:fb:1d:e8:06:b0:1d:e6:ff:d8:c5:58:ce:94:
4a:3b:e3:5f:e4:20:a3:b0:5c:ab:45:e5:5e:01:4f:
c8:54:dd:6f:41:02:7f:40:1b:da:cc:50:11:e1:98:
7b:93:03:b2:76:f9:5a:71:ea:3e:a3:ce:ef:cc:42:
1a:25:a5:2d:ac:94:15:5d:eb:1e:4d:b3:0f:89:ec:
b3:8c:c5:db:71:9a:eb:0e:4f:f4:5f:83:0c:67:88:
34:06:a3:3c:46:59:e0:99:80:f6:f4:19:1a:ab:64:
17:d2:14:8f:dd:0e:05:44:52:c3:b9:66:a6:e8:01:
49:38:2e:52:8c:b4:24:38:02:98:b1:f5:2c:69:31:
2f:58:1e:74:80:08:bd:0a:99:42:b2:01:1a:26:c2:
6e:e6:8a:e0:dc:20:97:7e:48:29:ba:6e:40:ee:83:
f9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E1:CE:4E:68:89:49:85:53:97:D1:6C:20:36:69:5D:85:36:E9:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C732A45A3E3611F0AE87B6DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
36:16:88:8b:0b:b8:8f:46:f3:34:f5:ea:1b:85:d4:c0:e9:52:
60:7a:23:2c:2e:15:ea:1f:74:9f:ff:1d:bb:c8:9a:60:5b:da:
78:13:7f:21:19:1e:71:07:27:6a:70:bb:1b:04:77:14:60:9e:
b9:a7:fe:2f:3a:c8:9c:71:35:43:fa:c1:71:4c:3b:f8:09:94:
1e:63:3e:6c:d2:5d:60:e0:3c:f1:a6:4a:7e:7d:32:bb:72:f8:
a8:51:a1:a6:bc:14:d3:4f:e4:e0:b5:7c:52:ed:76:e4:d5:aa:
b1:cd:5f:f4:50:7c:57:d9:f5:31:fc:30:d9:95:a3:d7:25:65:
93:d5:fc:26:62:58:e7:35:7b:36:22:de:39:03:d9:c5:19:b2:
8a:2b:68:5d:3b:1f:6d:d8:eb:23:a1:9a:32:a9:1e:b7:28:5d:
a1:19:9f:e2:da:76:bb:a0:6f:42:fc:6b:14:e5:ed:c0:8f:a5:
aa:08:18:d2:b3:fb:8e:cb:84:5a:5a:43:8d:d9:55:b9:1a:98:
66:1d:cd:2a:03:50:7b:12:c4:fb:96:62:16:3d:49:81:f9:26:
22:35:e2:9a:92:62:4a:7c:41:e8:e2:5f:01:1d:be:5b:7c:b9:
87:14:24:28:92:78:1c:e6:5c:ba:34:8b:04:a7:c1:2b:22:30:
1e:d5:d6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:27:46 2025 by rpki-client