Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4C0FFA42B3311F098B67884DAE4EC9C.roa
File: F4C0FFA42B3311F098B67884DAE4EC9C.roa (raw, json)
Hash identifier: tAimYqycAHIbElmx1hvArgSVjmmUb/wD2rwQigpPLxY=
Subject key identifier: C0:AD:C6:7C:C3:54:1E:C7:62:74:62:C4:23:EC:38:42:79:0F:E0:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0152B0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4C0FFA42B3311F098B67884DAE4EC9C.roa
Signing time: Wed 07 May 2025 11:11:00 +0000
ROA not before: Wed 07 May 2025 11:10:55 +0000
ROA not after: Fri 27 Jun 2025 11:10:55 +0000
asID: 20326
IP address blocks: 156.229.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86704 (0x152b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 7 11:10:55 2025 GMT
Not After : Jun 27 11:10:55 2025 GMT
Subject: CN=681b3fc4-d937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3d:4b:54:01:a5:20:22:3d:ed:98:5a:ef:82:
45:c1:16:4f:7b:03:b0:26:a0:02:3a:af:4e:53:e5:
45:f5:02:a8:f2:c9:fd:a3:d0:cf:0f:26:c0:fb:aa:
f2:26:c5:98:8f:ad:6d:7e:83:c4:6c:e5:2f:5e:5e:
66:23:71:df:c2:5b:5d:fb:5e:52:68:d8:24:cc:e8:
c2:f5:a2:64:95:fa:e8:a9:4f:27:19:96:dc:df:d2:
e0:4f:c6:5b:45:b4:de:40:09:11:e3:50:db:48:28:
d8:82:b3:7c:13:50:43:1f:05:73:1c:10:23:b9:24:
00:45:81:08:1b:a6:4d:86:cc:78:bc:8a:4d:d1:8f:
fe:82:a0:9d:49:c2:dc:71:95:b8:98:c2:1b:40:a9:
3e:1e:4b:d9:01:df:ca:7b:49:7d:4a:a8:20:6e:d3:
2d:d4:d2:f9:3b:ad:6f:14:9d:f1:46:8f:11:91:55:
87:d8:2b:aa:61:29:a1:49:69:00:44:31:08:8d:c9:
7d:c2:ce:58:93:e3:13:da:c7:78:51:e3:82:e8:79:
dd:5d:9e:96:32:0c:76:a7:d8:29:ea:67:f3:e0:5c:
0e:ba:60:03:50:8a:8e:7e:b6:cd:67:0f:48:7e:31:
49:77:00:c4:6d:b3:88:b0:f2:57:48:4d:93:9a:fc:
dd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AD:C6:7C:C3:54:1E:C7:62:74:62:C4:23:EC:38:42:79:0F:E0:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4C0FFA42B3311F098B67884DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.26.0/24
Signature Algorithm: sha256WithRSAEncryption
06:88:3b:74:e9:69:71:79:cd:29:43:19:1b:39:66:b1:c3:74:
19:31:cb:21:72:4b:9a:37:03:f9:87:48:c6:3f:a3:42:ed:c2:
46:a7:77:4a:aa:e4:e2:bf:ec:56:2a:3d:52:85:a8:d7:be:a4:
5c:1a:1d:14:a8:c5:f7:99:fd:b8:7d:ba:09:b7:db:f0:10:b3:
7b:fa:aa:1c:d2:c9:8b:8b:4b:03:7d:e1:96:5c:f7:a8:65:15:
b6:f4:8c:75:6a:ef:46:87:35:15:d5:c0:88:b9:7d:71:6a:0c:
dd:df:99:3c:83:55:56:f7:d3:3f:5b:a5:71:39:48:d0:42:6a:
22:18:01:b9:1e:5e:71:58:c9:c5:6f:a8:47:44:50:26:cf:c4:
e7:ed:b7:ba:00:90:04:07:ba:86:47:77:48:09:84:4d:7e:73:
6d:87:69:d6:3d:95:6b:3f:16:d3:87:7c:eb:b5:20:b2:c0:6b:
ac:40:58:7e:60:af:b4:94:2e:32:46:aa:3b:9d:8c:ea:5a:0d:
30:7a:db:ca:95:59:39:b9:0a:22:07:0b:c5:94:6d:0d:03:37:
c6:79:61:60:6d:04:6c:a8:04:b0:c8:86:7e:a5:15:03:23:cf:
2b:b3:2e:01:85:65:ca:9d:77:89:21:9a:ed:03:d2:96:b7:6c:
c9:2c:d6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 02:07:46 2025 by rpki-client