Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8DEF704382811F0B216EDECDAE4EC9C.roa
File: C8DEF704382811F0B216EDECDAE4EC9C.roa (raw, json)
Hash identifier: Y/rO1LJDT4rDyKhPkrUokzRB+aTzNbVl97vIPLh/5ok=
Subject key identifier: 7B:A4:EB:5B:37:4C:C1:8C:4A:4E:0D:70:4B:1E:C6:4A:9D:C4:49:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01573B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8DEF704382811F0B216EDECDAE4EC9C.roa
Signing time: Fri 23 May 2025 22:53:48 +0000
ROA not before: Fri 23 May 2025 22:53:42 +0000
ROA not after: Wed 17 Jun 2026 22:53:42 +0000
asID: 62610
IP address blocks: 156.241.129.0/24 maxlen: 24
156.241.133.0/24 maxlen: 24
156.241.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87867 (0x1573b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 22:53:42 2025 GMT
Not After : Jun 17 22:53:42 2026 GMT
Subject: CN=6830fc7c-fb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:78:ac:2d:7e:ec:2d:01:6c:78:f8:47:c0:14:
d7:4b:45:99:af:03:7e:3f:1c:63:e6:a4:3f:4c:aa:
11:e2:da:d0:7c:5a:df:a3:1b:3b:bb:c1:a3:12:ea:
a8:19:89:60:38:b7:88:65:9c:2b:9f:5d:4e:29:a7:
bd:79:76:49:f4:4f:2a:6e:9d:40:b3:9c:6e:49:fb:
e4:42:1e:07:bf:28:10:36:1f:a9:07:79:5b:7a:01:
f3:31:93:c4:ce:d1:eb:42:4b:b0:9c:ff:5b:81:c1:
d9:57:6a:ea:70:cc:5e:74:a6:6f:be:c3:0f:e6:30:
b5:72:4c:0a:43:ee:91:4f:fd:08:f7:03:59:83:cf:
6e:80:07:49:b8:37:0d:8f:79:3d:8d:da:e7:7b:df:
35:7e:41:50:3f:42:8a:7f:7d:38:51:d7:85:a9:52:
32:69:1f:b2:d2:7b:ce:ee:73:d2:b3:b3:45:44:a5:
b5:a7:ab:f0:66:d0:be:91:56:cb:67:79:9a:2f:d2:
14:87:b2:bd:13:0e:13:28:a9:53:ef:3b:07:c1:d3:
07:0d:2b:dd:12:59:61:47:22:16:4c:42:c7:f7:eb:
0e:5a:06:f7:ef:0a:7a:69:a7:b1:c5:0a:29:61:5c:
7b:30:fc:99:73:92:ab:92:6a:c4:c7:8e:27:00:d6:
a8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A4:EB:5B:37:4C:C1:8C:4A:4E:0D:70:4B:1E:C6:4A:9D:C4:49:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8DEF704382811F0B216EDECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.129.0/24
156.241.133.0/24
156.241.135.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c5:a1:9e:c2:60:b8:49:f9:98:30:2c:78:83:15:05:56:11:
73:16:02:5b:25:f3:8b:6f:db:f0:a6:b2:9e:14:96:16:56:6c:
d2:33:7a:b9:10:8e:5d:fe:75:c9:3a:e1:6e:0a:b0:b3:3a:95:
f3:81:b2:32:e6:69:11:7a:4b:b2:2e:24:df:5c:98:5c:58:99:
f7:09:a1:71:8f:f0:b2:41:43:93:4f:b3:f9:f7:a9:fc:42:91:
cc:e7:2e:7a:9c:03:91:82:1e:2e:5c:b4:23:16:f7:95:e9:b9:
26:ec:d2:19:1d:d1:6f:ff:12:2c:be:78:f5:ac:f7:67:f6:5c:
40:13:3b:f0:fb:96:02:b5:de:1a:01:44:b5:18:46:af:e4:f9:
62:98:74:61:dc:98:73:5e:64:42:3e:a3:99:1f:7a:9d:96:f5:
1c:5c:11:92:d8:97:15:a7:f2:4c:b9:27:87:0e:5f:f6:56:e9:
77:19:ec:92:7f:de:85:50:9b:f4:0b:53:c4:d0:d8:fb:00:7e:
44:e8:02:ba:40:59:2c:09:4f:7e:e1:01:da:3a:28:4e:d0:9d:
af:0e:45:ba:95:99:ea:1e:c8:6f:a2:92:31:af:0b:58:54:9a:
91:82:20:e8:98:28:37:d2:24:56:f7:1a:cd:a8:87:2c:04:19:
be:f4:ee:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:29:48 2025 by rpki-client