Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32ACCF04694711F0B61F139CDAE4EC9C.roa
File: 32ACCF04694711F0B61F139CDAE4EC9C.roa (raw, json)
Hash identifier: NL+qmSxxQg6eZDaSoxvtnwgIVrPjhMneAjmFovvD2LE=
Subject key identifier: 7B:CC:08:26:2B:25:F2:D3:6C:93:55:F2:A9:B5:72:66:5B:CE:D3:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0167B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32ACCF04694711F0B61F139CDAE4EC9C.roa
Signing time: Fri 25 Jul 2025 11:04:57 +0000
ROA not before: Fri 25 Jul 2025 11:04:52 +0000
ROA not after: Fri 08 Aug 2025 11:04:52 +0000
asID: 38193
IP address blocks: 156.238.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92088 (0x167b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 11:04:52 2025 GMT
Not After : Aug 8 11:04:52 2025 GMT
Subject: CN=688364d8-3a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4b:76:fc:df:40:dc:77:1b:0a:a0:e1:41:2a:
2a:c8:5c:af:cb:28:c6:24:35:0d:2a:e2:16:34:ce:
23:aa:8c:dc:54:17:1d:ed:59:fb:47:7e:90:39:87:
10:71:7b:10:54:74:a7:b9:e5:a0:65:f6:e1:bf:76:
53:45:57:8c:7e:da:9b:3f:c4:5e:5e:39:28:9b:bf:
6f:a5:73:e4:89:89:a0:ae:bc:cb:2a:fe:5e:d6:46:
91:ed:10:20:f6:54:38:f5:81:dd:c0:d5:2e:3a:4d:
fd:38:12:3a:59:28:6e:c0:b7:26:fe:cb:64:52:2b:
67:43:39:fc:8a:dc:64:cd:21:fb:a5:c4:33:9d:c3:
e2:4c:03:30:c8:c8:84:1f:ae:07:82:71:22:93:78:
9a:95:52:42:f0:8f:ac:30:e3:6a:a9:53:3e:9c:d5:
58:f0:ab:7b:8f:1b:6b:55:9f:dd:af:81:dc:40:09:
e4:97:03:80:57:d5:26:b5:8b:52:b8:1f:d6:1b:99:
91:cd:ba:d5:5e:a9:fd:fb:83:78:b7:f3:8f:13:17:
3b:81:94:cf:85:a7:3f:d2:d6:bf:de:45:52:21:85:
eb:52:c7:33:ce:e2:4b:12:0b:69:a8:5a:3e:11:32:
f1:9f:a9:e5:41:69:9b:be:7b:49:8c:34:95:58:f7:
e3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CC:08:26:2B:25:F2:D3:6C:93:55:F2:A9:B5:72:66:5B:CE:D3:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32ACCF04694711F0B61F139CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.80.0/24
Signature Algorithm: sha256WithRSAEncryption
53:82:d1:5b:97:8c:f8:b5:a4:fa:d6:6e:3b:18:b1:83:f2:13:
08:4d:63:5f:f1:98:a9:ac:b1:a3:22:d6:13:34:52:80:73:a3:
77:90:2b:e9:68:43:22:45:33:4d:7b:c8:07:28:08:d5:c5:47:
1e:7b:66:cf:32:e8:7a:1c:18:a3:1f:91:9f:6e:94:c0:c5:1c:
47:bb:73:f1:1b:8a:0c:cd:84:df:71:15:01:d5:fe:14:34:fd:
2d:2c:4d:44:dc:10:32:36:0f:06:0a:c6:bc:93:d7:97:3c:15:
20:8a:13:45:55:a1:e0:0d:96:4a:a2:54:55:c9:2c:8d:15:42:
3b:a2:44:5b:25:73:30:4f:10:1e:e3:b8:e6:35:8f:9c:6e:b5:
63:09:8e:16:83:1a:3b:b1:e1:b2:5d:27:59:b7:f6:84:a8:92:
29:d5:62:5b:05:a2:4d:cb:68:aa:4e:0e:a6:8d:1f:eb:8d:06:
19:3e:b7:34:32:07:b1:63:a1:b8:ba:41:80:cb:04:c0:9c:a3:
a8:02:42:3d:88:cd:ce:a6:67:16:ce:dc:bb:97:cd:02:c7:07:
c2:cb:4b:5a:f4:63:b6:f3:76:64:17:61:47:59:81:59:f4:48:
6c:e9:d7:b3:cd:2b:c2:c3:29:59:41:eb:ef:cf:a1:92:8c:30:
1f:03:b0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:22:35 2025 by rpki-client