Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDBEAE14380711F09259749BDAE4EC9C.roa
File: EDBEAE14380711F09259749BDAE4EC9C.roa (raw, json)
Hash identifier: QEEGmIF0pT3hQt5lLJ1DzzhzhvHyx9fQK+bDD89ijG0=
Subject key identifier: 48:86:80:E5:FC:1C:46:55:A3:03:69:41:94:0B:BF:76:6B:57:78:01
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01570D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDBEAE14380711F09259749BDAE4EC9C.roa
Signing time: Fri 23 May 2025 18:58:36 +0000
ROA not before: Fri 23 May 2025 18:58:31 +0000
ROA not after: Sat 05 Jul 2025 18:58:31 +0000
asID: 142032
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 12:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87821 (0x1570d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 18:58:31 2025 GMT
Not After : Jul 5 18:58:31 2025 GMT
Subject: CN=6830c55c-0afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e9:4e:40:6c:59:5f:7f:51:95:ab:66:50:5e:
a1:5c:58:b9:db:cc:c4:df:3f:4b:7f:04:2e:d4:37:
b1:33:39:8f:b2:da:bc:14:0e:e0:83:e7:be:ef:ee:
ba:4e:5f:0a:93:f1:74:80:c7:a1:af:7c:0c:8e:50:
14:74:82:71:99:89:f2:84:b2:1e:4e:c4:d4:db:6d:
f9:b4:e8:c4:2c:51:c4:e8:da:29:6c:e8:a7:2f:de:
bc:96:f4:82:f7:15:72:1e:8d:80:b7:c6:ab:d7:a5:
3a:a6:ab:cb:ab:56:2f:0f:32:b1:75:ce:41:d0:93:
6b:58:18:78:1d:a8:f4:fe:fd:4d:f7:7c:89:b3:92:
9f:f4:f8:0f:ac:29:69:be:93:33:e6:a2:cf:d8:9b:
06:b4:ef:19:31:37:e7:e6:9d:8c:f7:19:87:44:13:
68:2e:a9:e7:2f:96:57:3e:6e:59:a0:a5:53:aa:53:
b8:81:54:d3:83:0d:6a:43:00:dc:b5:b2:f2:bb:ce:
83:11:16:4c:fa:5f:d0:c0:04:77:3a:14:26:62:22:
22:1f:cb:89:59:23:6d:a0:7d:79:2c:e2:a2:df:85:
86:b2:31:34:c9:77:eb:8b:eb:08:ad:2f:d7:07:98:
02:0d:17:ac:f2:c3:2f:f5:5a:09:a5:2e:17:92:f9:
ba:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:86:80:E5:FC:1C:46:55:A3:03:69:41:94:0B:BF:76:6B:57:78:01
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDBEAE14380711F09259749BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
1d:6e:fb:7e:39:9c:c2:8d:32:38:94:d4:60:30:87:07:d9:e8:
b7:0a:57:40:f0:eb:4c:5d:62:4e:22:b0:6c:c1:9e:6b:36:5b:
86:53:4f:f2:30:4b:f7:f4:43:1c:6d:0c:f4:b0:33:96:d5:31:
6e:95:f1:2f:09:b7:73:8a:79:ce:0c:41:06:a6:cd:71:a2:4b:
37:5a:35:6d:20:88:2f:3c:f6:ec:16:18:f1:87:a0:3f:cb:0e:
97:49:df:19:dd:40:15:6d:e4:c1:3b:cc:0b:12:94:97:3d:2b:
14:ff:eb:22:4e:41:32:41:c2:09:28:fd:99:f9:3e:c2:0d:4f:
ea:0e:18:9d:49:b8:d2:af:41:94:54:70:0b:7d:48:ba:7c:c5:
ad:57:f3:d1:44:48:ab:f1:95:34:30:7e:4b:41:57:6c:84:c6:
26:1f:75:34:37:ee:fe:76:44:c8:55:be:56:74:8d:42:de:6f:
6c:3d:cf:64:23:29:3e:2a:09:f1:5a:6b:d7:26:04:8f:b8:7f:
30:d3:88:25:21:e8:53:ab:37:26:87:86:4f:e2:8c:69:2d:50:
ff:77:96:37:12:8a:a9:80:cc:c7:02:e4:c0:ba:4d:5f:69:12:
96:4e:86:3d:8f:85:55:ce:99:ac:20:38:70:65:af:a6:12:5f:
97:e9:96:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 02:07:46 2025 by rpki-client