Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F75944B8329711F0A8CEE1EADAE4EC9C.roa
File: F75944B8329711F0A8CEE1EADAE4EC9C.roa (raw, json)
Hash identifier: 0TqDPVJbXCB/YhmgTOxhTcvnX0q3HePTE4rEs31X6D0=
Subject key identifier: 66:B4:51:8F:60:D0:19:AE:4E:DE:8E:1E:45:18:4A:CE:89:20:F0:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015541
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F75944B8329711F0A8CEE1EADAE4EC9C.roa
Signing time: Fri 16 May 2025 20:54:32 +0000
ROA not before: Fri 16 May 2025 20:54:27 +0000
ROA not after: Sat 05 Jul 2025 20:54:27 +0000
asID: 36137
IP address blocks: 156.252.144.0/20 maxlen: 24
156.252.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87361 (0x15541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 16 20:54:27 2025 GMT
Not After : Jul 5 20:54:27 2025 GMT
Subject: CN=6827a608-ddc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9d:c0:30:b6:42:af:dc:1a:53:ee:c4:43:81:
7b:6e:18:ba:27:c7:99:7e:bc:d0:a8:69:16:a0:48:
93:6f:44:9f:1c:ac:b2:b7:8f:c1:46:4b:8a:8e:6b:
3d:e3:7b:db:6f:11:48:9f:05:3d:52:5b:1e:2e:63:
68:e7:9c:80:8b:33:bd:2b:52:8d:55:d9:29:5c:75:
c5:e3:9a:9e:ba:4c:da:47:92:9b:0d:3e:c8:89:a2:
67:e6:b4:5d:19:9a:f9:e7:bf:56:28:69:58:fe:80:
4d:b1:22:d6:d1:7c:93:df:e6:5d:ed:43:ab:92:63:
af:70:eb:ff:f8:fe:c4:d7:ea:35:27:92:8a:42:8a:
62:38:26:80:5b:9b:f5:77:96:af:f7:27:5e:b9:e2:
f5:e2:63:79:1a:ef:3a:fc:d8:2d:bc:2d:88:99:7c:
b5:36:08:8a:ec:34:ad:c4:29:43:3a:7a:c6:a2:22:
72:b5:cc:51:45:c5:66:61:90:bf:b9:26:17:bc:81:
c9:3d:52:2e:41:8b:6e:3a:a3:2a:a3:03:7c:54:e4:
2a:8d:76:be:cb:05:47:5f:57:bf:9b:b5:15:d9:b1:
05:79:20:ea:75:25:d2:da:19:37:7a:70:6f:f0:08:
f7:b1:89:7d:12:9c:88:45:38:33:29:77:70:91:a1:
d0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B4:51:8F:60:D0:19:AE:4E:DE:8E:1E:45:18:4A:CE:89:20:F0:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F75944B8329711F0A8CEE1EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.144.0-156.252.175.255
Signature Algorithm: sha256WithRSAEncryption
1a:37:4e:30:d1:94:46:de:77:61:98:a7:79:8c:76:f5:4b:94:
73:e9:ea:3b:6e:f8:57:88:47:0e:fa:86:3a:55:eb:fe:e9:29:
33:a4:97:7e:6d:b5:e1:ea:a6:87:4d:a3:3c:0d:c8:0e:71:16:
8e:92:49:0d:ca:fc:1a:01:8b:a1:74:63:e3:fb:2a:ca:e7:d5:
b5:c3:67:96:ff:4b:13:42:f6:9e:d4:64:9f:da:11:ec:2e:49:
2a:21:dc:d3:16:ce:05:0a:66:cb:35:ef:dd:54:df:b7:72:8a:
d5:98:6b:fb:06:90:d2:f5:c7:fd:e0:9c:aa:56:ad:19:c5:97:
02:69:f6:16:7a:63:d5:14:4b:47:34:f0:33:9d:71:dc:d0:01:
bf:b9:f4:26:ad:50:8f:5f:d6:22:df:2d:bc:64:bd:7c:e6:38:
47:21:3c:b1:7b:0e:12:05:74:63:7f:bc:95:76:40:1e:e5:dc:
ae:48:5d:05:95:d4:5d:ca:f0:3a:50:01:c0:63:f3:d9:28:03:
70:1d:de:e3:d4:67:df:49:60:10:c0:a1:ce:87:41:ad:26:65:
c8:0c:32:00:ac:2d:b9:64:ff:e7:13:f0:c1:43:16:0e:52:b4:
c0:93:a2:8f:19:d0:e7:a2:b8:42:c5:bc:6b:54:04:fb:22:db:
76:50:9d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:34:55 2025 by rpki-client