Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF1756863BBC11F0A08E3CC7DAE4EC9C.roa
File: EF1756863BBC11F0A08E3CC7DAE4EC9C.roa (raw, json)
Hash identifier: itUy4eZD91PzHKcyT3heBKuq1n122aXwZd7VYrBHPn4=
Subject key identifier: 4C:DB:79:C6:79:72:E8:27:C1:99:20:67:68:C8:AF:1A:A9:4D:5E:DE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015860
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF1756863BBC11F0A08E3CC7DAE4EC9C.roa
Signing time: Wed 28 May 2025 12:11:50 +0000
ROA not before: Wed 28 May 2025 12:11:46 +0000
ROA not after: Sat 07 Jun 2025 12:11:46 +0000
asID: 398465
IP address blocks: 156.255.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88160 (0x15860)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 12:11:46 2025 GMT
Not After : Jun 7 12:11:46 2025 GMT
Subject: CN=6836fd86-3cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:48:ae:74:6e:ec:4c:37:39:4e:02:0d:9b:76:
b5:30:4f:81:ca:be:4a:9b:ca:14:1b:ef:e1:dc:bb:
c4:c8:69:50:b2:e7:8f:fb:89:36:7e:3f:94:c7:13:
39:95:9b:20:4b:d9:3c:fb:ce:bb:25:1f:d6:c1:31:
76:a0:a7:cf:51:f5:16:e0:1a:dc:99:00:48:b2:fd:
eb:df:03:8f:ae:b3:f8:dd:6d:75:b0:be:15:02:d6:
9e:3d:54:b9:43:ae:18:c3:74:a4:d0:83:7d:00:04:
e6:33:74:c6:26:45:72:03:b4:39:3d:9a:ca:23:21:
5a:e4:21:e6:67:7c:08:e3:51:24:8d:f9:44:56:aa:
34:20:76:ec:2a:77:4d:1c:63:22:dc:67:28:45:5a:
1e:64:10:6a:9d:66:da:d3:bb:f4:07:58:5b:c1:e4:
e9:63:17:94:61:fb:18:8a:d5:85:25:fa:00:ba:99:
bf:1c:2e:b3:56:4c:85:eb:db:7e:85:00:5b:c7:00:
3c:fa:da:9b:05:90:aa:ef:20:48:83:66:ed:dc:44:
be:4d:c9:5c:9f:75:cd:5e:bb:d8:66:12:7d:58:38:
ca:fe:57:cb:ba:cc:24:01:30:18:02:62:bd:90:fd:
eb:e9:f2:a2:2b:60:1e:d0:e0:f5:c8:bc:7a:6b:ff:
39:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DB:79:C6:79:72:E8:27:C1:99:20:67:68:C8:AF:1A:A9:4D:5E:DE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF1756863BBC11F0A08E3CC7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.24.0/22
Signature Algorithm: sha256WithRSAEncryption
64:dd:f3:03:02:43:35:76:ef:80:02:50:a1:20:11:ad:4e:4c:
27:f2:93:fa:d1:d5:93:95:a7:98:5b:d9:8d:00:1f:22:3f:b5:
54:e0:29:56:72:ea:92:c5:70:d2:b6:c1:93:eb:1b:8c:e6:a1:
b7:66:e5:20:62:16:12:3e:34:cd:9e:9e:71:10:96:54:61:a7:
7c:51:46:51:0f:c7:a6:fc:65:28:d8:33:e3:5e:0a:71:ef:65:
02:38:f2:2e:91:7b:42:c8:7f:b8:bb:d8:fe:b3:ed:af:4d:65:
75:21:e7:22:b8:d3:eb:9c:a3:72:ac:f5:2a:d1:30:5d:63:89:
17:12:ba:19:bb:59:f3:3e:54:ab:d0:9e:fa:70:81:9b:41:1e:
68:09:02:6c:02:4e:4b:e9:17:32:7b:a0:de:db:a4:9f:a6:55:
04:bd:88:05:5a:67:fd:87:69:d4:2a:b3:38:ab:c6:be:69:c1:
8c:3e:57:51:69:4e:fa:5e:d2:9f:a8:c4:08:e0:b9:ac:3e:1d:
69:d7:47:fd:e6:10:2a:e3:29:cc:68:29:ac:60:fb:44:a9:b9:
89:ef:35:24:44:38:2e:af:f1:4d:0c:ab:e4:ad:01:3d:55:bc:
df:6f:1e:f9:4d:e3:1b:6a:6c:0b:be:6c:df:c7:1f:4a:c6:a1:
28:3b:d0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:28:16 2025 by rpki-client