Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0276ECCE42D811F094A1D9F5DAE4EC9C.roa
File: 0276ECCE42D811F094A1D9F5DAE4EC9C.roa (raw, json)
Hash identifier: bGIsj8oRAJUqNkpr97pNka9udaYt62MpOEd7fqEw7CU=
Subject key identifier: 01:78:C4:7D:9A:8F:B7:C4:AA:A2:61:20:B3:DD:0D:0C:8E:55:57:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015A08
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0276ECCE42D811F094A1D9F5DAE4EC9C.roa
Signing time: Fri 06 Jun 2025 13:13:17 +0000
ROA not before: Fri 06 Jun 2025 13:13:11 +0000
ROA not after: Fri 11 Jul 2025 13:13:11 +0000
asID: 57043
IP address blocks: 156.229.120.0/24 maxlen: 24
156.229.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88584 (0x15a08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 6 13:13:11 2025 GMT
Not After : Jul 11 13:13:11 2025 GMT
Subject: CN=6842e96d-3a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:17:9d:2f:b9:49:52:d0:7d:39:34:0d:27:44:
87:ee:fd:99:25:b4:6f:fa:09:c9:4f:eb:30:e2:90:
3f:0d:3e:b9:7e:45:4b:45:87:4d:21:95:be:f8:66:
78:cf:ad:91:3e:a5:b9:74:8e:c6:fe:30:e7:24:8c:
3c:e0:00:fb:59:5c:a6:b5:02:10:ce:c8:7f:42:09:
3e:09:04:2b:8f:ac:a8:cf:36:b7:d8:61:40:87:75:
cf:e9:c7:c9:e7:d9:55:26:85:24:eb:eb:38:ef:68:
ff:17:b2:86:b8:28:a8:e7:fb:05:18:b2:61:4c:29:
66:78:70:e6:8a:4a:95:33:1e:aa:bb:8e:ed:2b:35:
a4:c9:34:21:09:7e:7b:ee:e6:1e:7f:bb:d3:59:fb:
6b:d5:a7:7e:98:c2:93:e3:33:cd:92:90:72:8f:7a:
f8:96:19:4c:40:88:01:af:96:04:b8:3e:df:8b:ba:
9c:c3:87:f4:6a:1b:be:ec:f9:59:47:30:60:d6:60:
06:21:bc:e4:ee:12:6b:21:d6:1d:76:c3:ca:eb:4a:
32:14:df:20:b9:98:3d:2d:89:b3:cc:dc:29:f4:c5:
dc:c3:5c:6f:61:83:9e:a7:9e:a3:dd:61:d7:dd:24:
46:4d:30:f5:c5:dd:05:ae:50:f8:1e:29:08:aa:16:
16:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:78:C4:7D:9A:8F:B7:C4:AA:A2:61:20:B3:DD:0D:0C:8E:55:57:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0276ECCE42D811F094A1D9F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.120.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:96:a3:59:93:94:43:dd:92:6d:3b:d7:de:92:33:c9:d8:78:
ad:b4:1f:b1:9a:93:b1:57:61:25:93:33:6b:b1:a3:9a:36:33:
1a:e1:2d:5a:69:63:64:0e:fb:9e:03:50:17:8e:2c:76:45:21:
cd:13:47:cb:93:42:df:89:9e:a5:49:7a:83:e0:be:61:a2:d9:
36:ff:95:75:34:4f:a2:57:24:a1:11:de:e9:b7:25:29:b9:94:
ab:e3:2b:05:f8:66:60:1d:7f:38:e4:b2:1f:cc:e3:b2:58:5a:
11:d0:ea:65:ed:39:4e:de:cf:1c:81:44:35:02:88:1e:40:2e:
15:08:9f:af:84:00:00:79:9b:4f:53:e3:54:5c:b0:92:aa:6d:
ee:e6:59:c7:d9:51:62:59:04:5e:5f:47:b8:7b:62:be:c4:24:
c9:83:f9:88:4e:9e:47:62:14:3c:6b:02:46:90:8c:6c:13:e2:
89:e0:1f:61:35:fd:a5:02:e2:f8:68:13:a9:62:9e:fe:f5:02:
07:96:0a:50:91:54:ea:b6:b2:77:9c:17:ba:46:03:10:a7:51:
db:02:a9:4e:0a:f5:e4:24:e7:89:88:fc:8b:df:5e:eb:e2:8c:
5d:0b:bd:7b:31:0a:5a:ea:92:3a:40:f6:57:d5:f0:bf:34:cc:
74:4e:4d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:24:43 2025 by rpki-client