Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA008C8638AA11F09B213FC6DAE4EC9C.roa
File: EA008C8638AA11F09B213FC6DAE4EC9C.roa (raw, json)
Hash identifier: onBxF05O39cdsimJHoZNd+urTAfEtP/uGMwx9D7GivM=
Subject key identifier: A2:6C:A3:90:69:53:BA:FF:3A:0E:CF:24:F8:3A:F2:69:DE:EC:14:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01576A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA008C8638AA11F09B213FC6DAE4EC9C.roa
Signing time: Sat 24 May 2025 14:25:17 +0000
ROA not before: Sat 24 May 2025 14:25:13 +0000
ROA not after: Sat 05 Jul 2025 14:25:13 +0000
asID: 211961
IP address blocks: 156.233.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87914 (0x1576a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 14:25:13 2025 GMT
Not After : Jul 5 14:25:13 2025 GMT
Subject: CN=6831d6cd-9bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:01:5d:b0:b2:52:88:17:9b:c0:93:b2:b0:d6:
6c:75:83:00:b9:97:6e:51:8e:2a:8c:15:f5:b6:b1:
8a:3e:5d:80:fc:de:cf:1a:d9:4e:46:7e:43:eb:8d:
c6:07:88:ca:38:f5:fb:27:17:e4:fd:29:51:fe:10:
c7:48:b2:1c:ff:b7:ed:93:68:eb:1e:30:ff:0a:72:
bb:2a:4c:37:56:7b:c3:78:24:d1:fa:89:71:46:57:
f3:31:e6:f7:fa:e7:95:db:00:11:73:51:2e:c8:c6:
46:17:d4:34:e8:bc:00:4b:04:9e:17:e1:a9:90:53:
e4:4f:e1:c5:f0:99:6d:6d:06:09:0e:80:f7:fa:3d:
65:1a:27:cd:59:d9:00:8e:28:86:53:d1:20:54:d9:
2b:12:bc:af:4b:1c:62:a5:2c:b1:7f:e6:3c:e8:7f:
2b:d3:30:e9:36:f8:67:bc:6c:e6:6c:40:18:58:47:
a2:2e:02:e1:67:d8:6a:ee:e3:41:3f:6c:1d:10:6f:
46:e9:55:38:d6:fd:43:9f:37:67:81:85:4c:91:58:
50:8c:f9:91:e2:ae:93:58:c2:b9:4a:b2:71:63:4c:
8c:13:7b:f1:3e:1b:57:85:d7:9f:d0:a4:0b:db:73:
a9:0e:18:fa:fa:87:5b:cd:2b:5d:a7:09:03:9a:18:
16:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6C:A3:90:69:53:BA:FF:3A:0E:CF:24:F8:3A:F2:69:DE:EC:14:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA008C8638AA11F09B213FC6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.34.0/24
Signature Algorithm: sha256WithRSAEncryption
61:5b:ac:db:9f:8b:c6:03:e2:86:76:2a:e1:0d:53:89:14:14:
4f:07:42:6f:59:38:41:a3:98:d8:5e:f5:61:e7:98:7a:26:cd:
e3:68:8f:5b:79:e7:c1:9f:fc:11:00:96:66:34:ba:08:e1:9b:
ee:c7:0d:e3:b1:f3:fa:2e:b7:93:d8:82:54:8b:38:68:08:f6:
e8:06:b2:8a:69:15:01:f3:ab:46:7a:b2:de:45:98:ca:26:b5:
95:b5:41:00:a5:49:5c:b8:7a:bb:29:d6:0f:ac:60:01:85:9c:
8e:d2:cb:25:f7:9b:bd:5e:b6:dd:20:f3:04:a0:f8:e2:a5:cc:
01:1f:1c:92:00:2d:ce:8b:33:25:ba:ea:5a:07:81:f6:44:67:
10:bf:1e:2e:37:84:34:48:2f:2c:fe:bb:e2:b7:06:c0:fb:48:
bb:17:43:fb:3e:e3:cf:88:4f:89:df:5b:a9:d7:2d:92:a3:74:
0e:17:4d:23:95:c1:90:5c:b8:cd:5a:9b:f7:46:2a:87:10:50:
e8:da:42:f7:5b:1e:37:09:1c:91:50:ff:5e:8c:c3:ad:eb:39:
92:4e:e0:85:50:79:aa:d9:05:f2:5f:cd:45:c8:53:95:6f:5d:
69:6a:48:e7:c4:b0:61:2f:60:75:46:b3:74:fd:e1:a3:fc:62:
c4:29:57:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:49:13 2025 by rpki-client