Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3494177E41D211F0BA11A1D6DAE4EC9C.roa
File: 3494177E41D211F0BA11A1D6DAE4EC9C.roa (raw, json)
Hash identifier: RlbzTI7UaYCB6/IIHkGDARZ11OLu2PZycTFJfcdcNGk=
Subject key identifier: 58:11:8D:2F:57:7C:1D:FF:BA:C7:FC:E0:CF:D4:57:7B:A8:A9:B7:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0159D6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3494177E41D211F0BA11A1D6DAE4EC9C.roa
Signing time: Thu 05 Jun 2025 05:59:13 +0000
ROA not before: Thu 05 Jun 2025 05:59:08 +0000
ROA not after: Wed 25 Jun 2025 05:59:08 +0000
asID: 135097
IP address blocks: 156.224.128.0/17 maxlen: 24
156.224.128.0/18 maxlen: 24
156.224.192.0/18 maxlen: 24
156.226.32.0/19 maxlen: 24
156.226.64.0/18 maxlen: 24
156.241.64.0/18 maxlen: 24
156.245.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Jun 2025 01:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88534 (0x159d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 5 05:59:08 2025 GMT
Not After : Jun 25 05:59:08 2025 GMT
Subject: CN=68413231-4981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6c:25:2a:e9:7a:32:b8:18:cb:9e:a7:d8:26:
cc:9d:99:99:5f:fa:29:be:0b:ef:11:5e:ad:a3:da:
62:2b:78:ab:9f:85:f7:9b:67:44:51:a3:fc:77:c9:
93:8d:8d:43:64:c0:20:9c:81:49:c6:81:b7:86:c2:
62:49:72:a1:2e:a4:be:b2:2e:16:9b:c0:74:ad:7b:
6e:10:3f:02:03:ba:db:a0:c0:2b:6f:07:d7:eb:13:
d3:4e:63:8a:17:19:d0:82:ee:ac:2d:70:38:93:4b:
67:f7:fb:5b:81:b3:34:be:ad:4a:ff:86:45:1f:31:
45:ed:9b:6c:03:96:8d:79:5d:55:78:7d:2b:1c:d0:
e4:ec:86:9a:4d:96:e6:82:3d:d5:b6:23:4e:ed:5f:
11:78:7f:89:ce:e2:0d:46:03:62:2f:c9:17:77:39:
5b:87:03:ce:21:c3:8e:c0:3a:7d:7d:1d:0b:d6:5d:
eb:69:2e:eb:0a:42:08:14:74:11:ba:8e:6e:e9:74:
3b:71:c9:ec:be:77:c2:c1:5f:22:46:ee:b2:04:95:
00:7b:c8:0c:08:2c:2f:32:39:de:11:97:f7:5e:8f:
81:95:5f:f4:c5:6a:90:4e:db:c4:7b:f3:3c:4e:2f:
e7:ba:91:2b:3e:23:10:c3:72:ee:0f:63:72:7a:ae:
79:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:11:8D:2F:57:7C:1D:FF:BA:C7:FC:E0:CF:D4:57:7B:A8:A9:B7:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3494177E41D211F0BA11A1D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.128.0/17
156.226.32.0-156.226.127.255
156.241.64.0/18
156.245.32.0/19
Signature Algorithm: sha256WithRSAEncryption
6e:2b:d1:c0:a9:c8:7f:ea:d5:e6:c8:5b:b1:8c:a7:63:fb:da:
c2:82:ab:04:fc:34:c1:06:68:1e:24:3d:8c:97:99:8a:91:59:
d0:de:42:8f:b9:86:38:55:0c:b8:85:8a:15:00:ce:a8:60:0f:
21:22:bb:7f:5f:c8:c8:08:0c:9f:1a:a8:e0:5c:b1:ab:77:4b:
de:c0:07:c9:fa:80:69:4d:4e:ed:18:46:d6:10:75:f4:8f:21:
f1:0e:ee:f7:cf:ad:32:19:55:d6:dd:01:4e:ea:3d:b8:91:17:
5c:10:bb:c6:92:de:d0:40:2e:b6:5c:3c:99:25:13:6a:43:38:
2e:1f:66:dc:74:28:f9:62:aa:d2:21:e6:6a:a0:b3:e0:37:8e:
83:14:bd:8a:52:40:fc:b1:0b:05:37:0e:4b:9d:45:2d:bd:45:
a3:39:7a:3b:f2:ca:29:01:4b:5c:c2:08:7e:7b:ff:4f:08:7c:
09:d3:46:0a:7c:61:85:12:f0:f3:38:2b:5c:fa:3b:b5:db:9f:
8a:ed:d3:62:b0:2f:a0:9b:ea:2d:8c:8d:ea:b3:a2:38:58:17:
da:b9:8e:9b:07:d9:65:35:d6:a8:c9:14:0b:00:e3:38:a4:e7:
4e:ce:dd:4f:14:49:e0:02:47:8c:37:6b:b5:90:29:3e:0a:a2:
2c:8d:67:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 18 08:21:34 2025 by rpki-client