Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBA6AC5E3BB811F0983413ADDAE4EC9C.roa
File: DBA6AC5E3BB811F0983413ADDAE4EC9C.roa (raw, json)
Hash identifier: 0pdentmaPgXtTBxGasWAXzxT3y7GFMQV0SwwsXdSqzU=
Subject key identifier: 59:AC:88:0C:F2:06:E0:21:63:CE:E6:DC:85:BD:3C:29:8B:86:43:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01585A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBA6AC5E3BB811F0983413ADDAE4EC9C.roa
Signing time: Wed 28 May 2025 11:42:41 +0000
ROA not before: Wed 28 May 2025 11:42:27 +0000
ROA not after: Sat 07 Jun 2025 11:42:27 +0000
asID: 5650
IP address blocks: 156.255.16.0/22 maxlen: 24
156.255.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88154 (0x1585a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 11:42:27 2025 GMT
Not After : Jun 7 11:42:27 2025 GMT
Subject: CN=6836f6b1-e160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:bf:17:be:39:6a:a3:2e:9b:76:82:b4:a5:
b9:1f:59:e2:a2:82:e2:d5:70:fd:52:c2:9a:ee:b3:
1e:da:03:12:51:1f:7d:91:b0:50:3c:8a:10:fe:24:
0d:3f:7c:01:b4:73:84:29:12:d6:38:43:5c:0a:f6:
84:fc:35:fc:b7:b2:e6:b2:92:5a:29:21:e1:5c:fe:
a4:0e:66:bb:9c:8c:83:b3:a0:8f:70:21:a0:5a:39:
60:f8:dc:f5:27:86:06:a7:24:82:70:ab:5c:83:a2:
a0:bd:06:20:27:ce:1f:eb:be:35:28:a2:6c:c6:22:
8b:7e:f2:b4:01:d9:4e:71:33:aa:69:b4:a5:13:4f:
4d:c0:07:fc:92:8f:d1:b1:34:f9:69:b7:0a:7c:c8:
58:49:a1:4e:bf:0c:6e:a4:af:70:29:03:b9:29:04:
34:7f:ae:ea:55:1d:f8:48:cb:49:24:53:67:e8:6c:
cb:dd:12:51:55:e2:2f:cd:1e:77:99:c5:92:78:19:
b2:3c:9b:b4:5a:e4:6e:5e:60:cd:23:5a:4e:6f:c6:
8a:b0:f8:3e:ed:47:a0:e2:2c:d5:fa:02:d4:0b:95:
7e:20:71:42:34:f7:56:79:08:39:9d:58:36:9a:72:
f7:50:4a:45:65:21:aa:0f:ad:23:61:43:ee:cb:df:
5e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AC:88:0C:F2:06:E0:21:63:CE:E6:DC:85:BD:3C:29:8B:86:43:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBA6AC5E3BB811F0983413ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.16.0/21
Signature Algorithm: sha256WithRSAEncryption
20:d7:5f:07:fd:1b:0e:ef:65:df:2d:3b:ff:e4:be:1a:c3:55:
e4:81:20:0d:f4:cc:24:68:9c:0a:ae:fb:ce:4b:d4:c3:06:2f:
41:e3:e1:98:42:13:ff:1a:84:96:39:41:ba:1d:aa:fb:00:d8:
0e:21:fa:c5:b5:f6:f7:4d:c5:9a:67:89:7c:65:20:55:59:4b:
d8:e3:de:68:d1:4e:e2:e6:32:69:58:24:3d:67:3f:f2:73:82:
da:71:2c:c9:3b:64:92:ab:2e:41:2e:70:fe:c2:b9:f6:0d:d3:
e8:ff:2e:9a:57:38:97:05:c4:8e:73:66:54:78:59:d6:f4:c7:
2c:e7:f5:17:67:9a:68:df:ef:af:ec:0e:5f:4e:5c:fe:47:fd:
11:71:a9:3b:1b:c2:01:a9:9c:d5:8d:22:20:60:79:4c:25:1a:
27:2f:10:9f:c7:58:90:00:33:a3:18:06:6b:fc:ab:17:69:f9:
0e:ef:be:e0:2c:7b:fa:c0:9b:6f:97:fe:bd:6b:30:84:97:b2:
6a:96:05:f4:32:38:cb:43:47:1d:80:79:61:57:24:2c:d8:c2:
13:18:7e:4d:db:24:9c:60:f2:1d:11:8b:18:6d:6b:9f:47:92:
49:00:b8:02:c3:ac:cf:e7:77:9c:1b:c2:f5:c9:5e:9d:f6:32:
4d:55:3b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 01:42:02 2025 by rpki-client