Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3043220E42D711F09DF97EF1DAE4EC9C.roa
File: 3043220E42D711F09DF97EF1DAE4EC9C.roa (raw, json)
Hash identifier: c/RrUrGTK8V6Afs/rBM/XiqOq+ToxcgHhlW67ZaWMnk=
Subject key identifier: 68:20:F9:C1:0E:BB:D4:D2:3E:88:59:68:76:20:FC:A6:43:99:F9:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015A06
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3043220E42D711F09DF97EF1DAE4EC9C.roa
Signing time: Fri 06 Jun 2025 13:07:25 +0000
ROA not before: Fri 06 Jun 2025 13:07:20 +0000
ROA not after: Fri 11 Jul 2025 13:07:20 +0000
asID: 395839
IP address blocks: 156.229.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Jun 2025 06:15:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88582 (0x15a06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 6 13:07:20 2025 GMT
Not After : Jul 11 13:07:20 2025 GMT
Subject: CN=6842e80d-0e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:40:6b:4b:6c:a2:5a:0c:79:6c:b1:5d:ea:d1:
4f:8e:88:ea:23:e9:4c:a4:ab:3e:b6:08:09:06:50:
33:8c:35:d4:74:54:6c:f6:6d:1d:1f:dd:84:e2:c1:
d0:0b:bd:f0:99:c6:f6:58:48:08:47:fd:cf:be:f8:
80:b3:73:4b:c8:bc:2d:d6:ff:13:4a:0c:a4:b9:82:
32:55:5a:62:a2:3d:db:40:ac:ea:a6:72:04:b7:00:
25:95:48:ce:f8:97:74:4e:61:fb:61:06:4c:df:75:
ff:e9:14:d5:c2:06:81:d4:e4:cb:a7:b3:b0:b9:a0:
61:d2:73:a2:79:92:f5:2c:e6:70:10:d1:7f:33:fe:
31:5c:43:b2:24:a2:f4:d5:03:7f:35:34:a9:f3:64:
7e:94:7b:69:4a:7f:21:5d:3e:9b:50:c9:85:93:45:
3f:ab:27:e1:c3:cb:9c:3e:d7:29:d4:c9:05:88:a8:
0b:30:a7:3b:e7:82:67:99:a2:4b:ce:93:ff:3c:ad:
4e:fc:70:89:8e:ae:61:95:15:af:59:29:29:e6:71:
68:43:98:74:0e:c2:66:07:85:dd:43:ad:b5:c3:cf:
a8:fc:e1:85:bb:c6:e1:db:c1:bb:3b:b4:c4:16:fb:
a9:41:5b:72:3e:28:46:af:ad:11:71:46:2d:3d:ad:
59:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:20:F9:C1:0E:BB:D4:D2:3E:88:59:68:76:20:FC:A6:43:99:F9:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3043220E42D711F09DF97EF1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.27.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e8:5a:6b:98:cb:67:ac:c1:dd:28:c5:5e:d1:c7:19:e7:68:
6c:e5:18:6a:15:07:2f:6b:73:90:11:68:53:00:5b:0a:c0:48:
3a:44:eb:81:c5:36:9d:e1:b2:aa:2e:15:22:02:ea:67:f1:33:
22:31:31:ab:4f:0b:22:4c:2a:c1:14:84:3e:13:20:bc:3b:db:
02:a9:87:dd:d5:31:58:b2:e1:2f:5c:98:50:8f:ba:28:78:b3:
32:f5:f8:3d:57:b9:b5:6a:f9:6d:23:65:93:21:32:b2:b8:b4:
36:aa:a1:15:75:17:be:90:9e:43:65:d0:6e:38:6e:94:1a:e7:
4a:47:d3:fc:17:92:20:87:89:f0:27:a3:d1:4f:2b:58:28:66:
25:83:2b:b3:7c:be:0b:62:4b:c4:7e:9c:2c:f9:f0:b9:ea:9a:
d2:13:af:dd:37:59:aa:24:b1:79:cb:20:b6:6f:c8:0f:b6:60:
5c:12:ad:99:33:a8:78:ce:07:18:28:b2:e9:0b:c3:82:32:29:
a1:eb:0a:45:a7:91:a1:40:e4:a7:26:53:2d:1a:de:a9:db:dd:
ce:a8:ae:21:80:cd:92:a3:6c:7c:a6:97:88:f5:30:ae:a5:75:
76:a0:15:b2:04:3e:60:8a:67:dc:50:ad:ce:fb:dc:b8:bb:91:
49:a1:d1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:01:22 2025 by rpki-client