Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA7B775A2BEC11F0BCAB32DADAE4EC9C.roa
File: DA7B775A2BEC11F0BCAB32DADAE4EC9C.roa (raw, json)
Hash identifier: aNEC6Hx2RJJWctQfpbYU0OoGCOMAgyrhWK5aBn7EARU=
Subject key identifier: 43:98:13:56:49:EF:BB:09:11:6A:56:BA:A1:70:EC:DB:0E:CE:A8:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0152CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA7B775A2BEC11F0BCAB32DADAE4EC9C.roa
Signing time: Thu 08 May 2025 09:14:33 +0000
ROA not before: Thu 08 May 2025 09:14:29 +0000
ROA not after: Mon 09 Jun 2025 09:14:29 +0000
asID: 200373
IP address blocks: 156.242.32.0/20 maxlen: 24
156.242.51.0/24 maxlen: 24
156.248.80.0/21 maxlen: 24
156.249.56.0/21 maxlen: 24
156.249.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86733 (0x152cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 8 09:14:29 2025 GMT
Not After : Jun 9 09:14:29 2025 GMT
Subject: CN=681c75f9-9000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:11:3a:2f:7f:a8:04:9b:ba:29:c3:cb:44:1d:
56:aa:f6:a5:f8:ea:07:78:cb:b5:72:16:94:f2:52:
d4:6c:7c:27:0b:3c:27:1e:bb:df:00:67:8f:07:34:
2b:4a:07:fc:8b:e1:50:96:4e:b5:61:1d:3a:99:cc:
45:f2:42:ed:ea:77:00:c8:e4:f8:8c:b4:03:c3:b1:
ce:da:4b:09:38:b3:71:cb:b0:65:97:7d:61:8e:5a:
78:1e:b8:65:70:ca:26:42:aa:4a:d1:d8:c9:59:20:
68:1e:9b:96:62:ea:89:cb:a6:d8:e8:bd:db:de:0e:
57:ea:4b:ad:3c:32:e6:bd:17:ce:76:c7:cb:df:bc:
91:c9:cc:9b:ec:02:38:7f:23:29:2a:7e:a3:be:16:
58:ac:ac:59:26:4f:e2:c4:bd:d7:36:b2:f1:3f:ff:
a0:d8:8a:8d:dc:9e:10:03:f5:19:7b:dd:1b:06:a2:
52:c0:48:b9:e4:48:15:90:c2:16:8e:9e:7f:08:2f:
04:5b:01:1b:b9:95:98:a7:f3:50:8a:97:b1:a3:43:
03:7e:2f:6d:41:57:d9:ac:34:9f:e8:5d:56:7b:56:
4e:f3:48:e6:1a:0a:92:52:6c:6e:d9:39:d8:87:e6:
5d:59:da:5b:b0:8c:48:4b:10:9f:26:48:e9:3a:9d:
f9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:98:13:56:49:EF:BB:09:11:6A:56:BA:A1:70:EC:DB:0E:CE:A8:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA7B775A2BEC11F0BCAB32DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.32.0/20
156.242.51.0/24
156.248.80.0/21
156.249.56.0/21
156.249.124.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:87:3e:e0:36:28:59:d8:c3:66:4b:f5:c2:19:54:65:58:f2:
e0:12:02:1d:3d:c1:63:c5:82:56:79:95:75:ac:15:31:02:83:
60:f3:f4:1a:0d:84:98:ec:85:42:e4:5d:0a:f0:22:5f:6d:60:
29:39:4b:11:e4:f2:71:2d:4b:dc:2a:49:dd:26:3a:f1:4d:2b:
2d:2e:10:eb:c2:1e:5d:7c:c7:77:e7:11:c7:e2:cd:c9:32:1d:
7b:d2:d8:e6:e6:66:af:03:4d:8e:75:7e:06:b1:61:27:66:d8:
1f:58:7c:08:d9:d1:7d:81:15:2e:4b:bd:33:08:ac:5d:2b:9b:
05:5f:83:c3:bd:c0:84:a2:a3:f2:0b:aa:2e:b2:92:7f:d2:ca:
a1:e3:67:28:54:b3:13:b7:77:0a:ad:de:45:e3:3b:b1:18:f5:
6d:1c:8b:7e:0b:96:08:4f:e7:2c:04:75:6d:26:d0:20:84:b0:
86:49:57:de:2e:44:ef:da:bf:9a:b9:31:68:01:e2:8a:4d:5f:
07:56:05:98:93:01:e4:8a:c4:f9:dd:f7:56:f8:a3:be:27:d9:
52:96:d2:2d:fc:ce:0e:69:2b:22:1a:ec:25:c8:e3:6e:43:ad:
48:d9:aa:52:f0:41:b5:84:7c:4f:6a:2c:b5:98:33:4c:43:0d:
ea:f0:3e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:24:13 2025 by rpki-client