Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E574AD42300711F0B1AEC6CBDAE4EC9C.roa
File: E574AD42300711F0B1AEC6CBDAE4EC9C.roa (raw, json)
Hash identifier: +cjGQwEmtYCAcFY0YKvOSMtDL/LsVTSCrJxx9NtkaZI=
Subject key identifier: 03:54:55:A0:9C:20:40:98:14:14:2D:1A:34:32:5B:AE:96:95:B2:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015408
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E574AD42300711F0B1AEC6CBDAE4EC9C.roa
Signing time: Tue 13 May 2025 14:38:12 +0000
ROA not before: Tue 13 May 2025 14:38:07 +0000
ROA not after: Fri 04 Jul 2025 14:38:07 +0000
asID: 138195
IP address blocks: 156.234.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87048 (0x15408)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 13 14:38:07 2025 GMT
Not After : Jul 4 14:38:07 2025 GMT
Subject: CN=68235954-24b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:a8:6c:1f:3d:e9:1f:0c:5b:7c:bd:0e:71:
cd:0a:66:4a:c5:1b:d2:35:17:ab:2b:fa:eb:45:e8:
c8:60:65:82:13:d4:af:ce:5d:ee:08:72:5c:72:34:
da:70:c3:10:60:c0:e5:18:b7:20:ca:2c:ce:39:6d:
49:fc:c0:47:b6:dd:21:47:7f:ed:24:84:30:92:75:
1d:87:3b:94:e4:d4:9b:8b:4f:32:cc:ae:cc:59:30:
e2:d6:41:3f:e1:09:35:72:b8:54:ea:3d:15:52:2e:
58:71:5a:61:fc:4b:4f:1e:03:f5:a3:c8:c6:3e:4f:
25:1b:ee:08:c8:10:6a:ef:81:39:cd:64:d2:60:e0:
86:94:06:26:f5:64:b7:78:d6:c4:3c:24:f4:c8:e7:
94:90:92:71:83:59:cf:19:d4:14:a5:df:20:ae:91:
42:df:b5:c7:71:6e:3f:1b:11:80:48:7a:e7:2f:33:
62:68:33:ed:c6:0b:a0:26:b2:ab:ce:d5:7a:11:0c:
3e:02:8c:60:4a:d1:60:80:41:e9:79:82:e9:2f:81:
4e:28:b8:0b:a8:06:99:d7:22:cc:09:c1:97:6a:d7:
a8:51:e4:1b:f4:5a:a1:ef:df:56:7a:8f:25:2c:56:
55:b8:52:82:02:35:d2:af:48:7d:16:50:1b:4e:ca:
a8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:54:55:A0:9C:20:40:98:14:14:2D:1A:34:32:5B:AE:96:95:B2:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E574AD42300711F0B1AEC6CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:1f:84:b8:87:5d:00:8a:c9:b1:27:13:6a:5f:83:db:0f:6b:
d5:03:c3:17:2d:10:46:73:d7:53:3f:17:9e:be:f3:2d:9a:13:
2e:01:d5:c5:87:bf:7f:f3:29:ac:97:c1:88:0a:f7:a0:e1:17:
b1:78:53:a1:71:37:32:49:f5:58:14:75:20:eb:10:1d:ee:32:
af:c7:60:35:d0:05:60:19:40:b4:ff:11:81:1a:ae:ac:fa:63:
a0:c7:26:e2:5b:56:16:bd:69:3f:5e:6a:89:1c:f8:0f:9f:83:
ec:39:72:c9:ff:02:07:af:74:d3:cf:f2:de:4f:b3:cd:d0:0e:
33:35:8a:b1:79:b6:d9:87:88:fb:d7:fd:cc:a0:d0:53:de:bb:
80:97:af:03:62:19:1d:e8:99:47:2d:47:77:81:fd:72:dd:4c:
b1:90:b4:30:86:9e:d7:f6:1c:00:fe:88:3a:41:55:c6:58:b9:
b1:9e:54:14:b1:2a:df:f0:e1:24:3a:52:60:a3:5a:9a:c9:e4:
4d:45:95:24:8d:73:8c:bc:c9:15:29:98:72:08:96:f8:8d:f9:
82:ae:f5:b2:87:37:aa:47:d7:09:71:1a:c9:3a:6b:7f:d2:98:
0e:0a:f7:c6:d0:78:b1:d1:90:43:90:2c:8e:ff:ef:87:54:a3:
ff:a9:d0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:38:11 2025 by rpki-client