Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E554FA622B1911F087A95DD6DAE4EC9C.roa
File: E554FA622B1911F087A95DD6DAE4EC9C.roa (raw, json)
Hash identifier: HtpK0EeDhYQbF7DGEexFGrNo7g0X4m4itjRLI1gGRew=
Subject key identifier: E1:F6:54:B1:2B:EA:61:31:F8:97:C8:94:62:04:4B:C7:58:0D:AA:FA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01526C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E554FA622B1911F087A95DD6DAE4EC9C.roa
Signing time: Wed 07 May 2025 08:04:28 +0000
ROA not before: Wed 07 May 2025 08:04:22 +0000
ROA not after: Wed 11 Jun 2025 08:04:22 +0000
asID: 50053
IP address blocks: 156.253.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86636 (0x1526c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 7 08:04:22 2025 GMT
Not After : Jun 11 08:04:22 2025 GMT
Subject: CN=681b140b-cef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:3b:f8:b1:0b:79:b6:f2:cf:ab:19:14:69:
17:74:6e:64:0b:3b:56:56:3e:e4:40:e1:de:84:ba:
ca:ad:90:50:14:fa:d9:c7:e5:5c:b7:32:35:0f:ac:
55:e2:48:3b:5c:8d:06:88:34:bc:8e:71:76:2d:49:
f1:37:30:0c:c0:fc:5d:69:ca:3e:1e:49:15:04:e4:
5e:30:bf:54:bd:fe:ed:fe:d8:1d:50:07:f3:6e:d1:
dc:90:07:6a:84:bf:88:da:91:49:57:f5:97:20:8b:
07:4b:30:d3:af:a8:2e:d9:2d:8c:07:90:a3:28:77:
31:fe:d2:0e:cf:db:b7:4c:c4:02:8f:13:76:61:5f:
9f:3f:b0:eb:d9:0b:e9:9f:de:eb:a4:73:ec:b9:17:
05:06:df:e1:f7:41:c4:97:62:c8:8f:1b:81:fb:da:
eb:9a:c0:4f:3a:65:48:40:98:c2:5f:89:7a:d2:f7:
9a:75:e7:36:ce:07:12:cd:ba:aa:bd:d9:58:e0:25:
57:53:00:a3:c6:91:86:14:48:ce:72:86:94:85:e6:
33:5c:98:54:da:65:50:41:35:96:3b:c0:c9:3e:91:
9c:6d:f2:87:3e:e4:82:14:fb:0d:10:69:93:25:ec:
a3:cf:3d:46:40:d6:b9:7b:a0:d8:d8:5d:8b:94:c4:
f2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F6:54:B1:2B:EA:61:31:F8:97:C8:94:62:04:4B:C7:58:0D:AA:FA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E554FA622B1911F087A95DD6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.251.0/24
Signature Algorithm: sha256WithRSAEncryption
20:00:9b:2a:8b:dc:e4:dd:2c:e2:a1:be:98:67:e3:85:85:38:
7d:30:7e:08:6a:2d:91:09:9b:c3:cd:b5:22:9e:8a:03:4e:05:
b7:41:ff:33:b7:5f:25:dd:1b:1b:d4:aa:52:cf:86:ab:db:f5:
13:b3:6e:07:9f:0b:3e:5e:54:f5:63:69:0b:2c:a1:9d:0d:9d:
fc:b4:34:40:82:00:ae:35:22:3b:f0:a6:4b:91:87:4b:65:71:
b6:ee:89:6d:c4:49:8d:a3:47:3b:57:9e:31:5b:78:57:80:4b:
bd:b1:76:d2:5d:bd:ac:93:36:77:a7:3d:d0:05:88:ee:a5:7a:
10:c7:be:37:ff:95:37:f5:88:ad:62:06:5b:10:f9:13:8e:fe:
2a:0f:f8:fb:b1:e5:0b:e4:5b:00:38:e7:d7:98:78:4d:1a:31:
b8:90:e9:e9:99:ef:5a:e4:4f:9d:76:28:e8:2a:bf:1e:50:49:
dd:3a:ee:d2:ca:cb:0f:1b:d9:24:bd:7d:8d:72:1f:5a:43:78:
ea:9b:98:e5:4a:ef:20:21:4a:fb:31:1e:50:89:0d:a4:7a:f7:
d3:c2:41:58:71:52:29:ce:49:ee:70:54:39:42:38:7e:55:0f:
ac:62:48:52:52:6e:ff:f5:d7:01:74:21:df:fb:ec:31:11:0c:
a6:d8:0b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:28:17 2025 by rpki-client