Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51145F12486711F0AFEEC4ACDAE4EC9C.roa
File: 51145F12486711F0AFEEC4ACDAE4EC9C.roa (raw, json)
Hash identifier: ftQDxVAX86U5c0qWfIwe2kvyl8dFVghuz6Bl8oeFhT0=
Subject key identifier: 0F:20:44:50:0B:D9:FC:24:03:12:04:37:0E:C6:4F:C3:6C:3A:99:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015BDA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51145F12486711F0AFEEC4ACDAE4EC9C.roa
Signing time: Fri 13 Jun 2025 15:01:43 +0000
ROA not before: Fri 13 Jun 2025 15:01:38 +0000
ROA not after: Fri 20 Jun 2025 15:01:38 +0000
asID: 36137
IP address blocks: 156.252.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89050 (0x15bda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 13 15:01:38 2025 GMT
Not After : Jun 20 15:01:38 2025 GMT
Subject: CN=684c3d57-4bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:4c:1a:d3:5d:3e:ae:0c:50:14:6d:2e:0b:ab:
5f:cc:f7:ca:f6:c2:5d:85:ff:31:f2:e3:cb:29:41:
b3:0b:11:34:ac:ff:1c:ed:f2:49:4b:b0:3d:3a:ba:
c1:ab:70:fa:cb:93:74:44:c9:1f:ca:2a:2c:15:f1:
1a:26:4c:c2:cb:95:1d:48:01:5f:77:e5:04:87:e8:
57:dd:96:cd:a6:5c:8d:51:61:a3:6b:31:f5:93:82:
fa:31:8b:11:06:b1:58:ba:4b:0a:9d:f2:4d:af:35:
7b:3e:5e:1a:db:7a:ac:bb:e6:36:78:eb:b3:5e:39:
47:80:09:2a:33:b6:d6:e4:79:6b:09:bc:8c:a0:71:
45:a9:63:a4:b7:05:4e:4a:2f:4d:bf:4b:3a:25:63:
9b:ae:5b:d9:14:8a:3d:cd:22:1d:da:50:9e:98:5b:
ea:b8:d3:38:d9:b7:27:13:c2:7b:5d:3b:c5:27:a9:
18:f5:52:66:83:6b:b7:d6:c7:8c:87:e0:89:8a:4f:
91:c3:0e:9e:1f:d6:cd:e2:14:a8:5c:b9:f5:3d:78:
1c:f2:b8:f8:d6:75:04:68:5b:cb:94:bf:f1:66:bc:
33:e1:e6:4d:42:c7:29:1e:b7:a6:29:4e:db:de:ab:
70:21:67:69:3e:a4:46:00:0d:32:af:76:82:90:6e:
f9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:20:44:50:0B:D9:FC:24:03:12:04:37:0E:C6:4F:C3:6C:3A:99:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51145F12486711F0AFEEC4ACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.96.0/19
Signature Algorithm: sha256WithRSAEncryption
60:16:46:f3:9e:66:5f:dc:12:a6:b1:5c:42:d8:15:a2:d2:6e:
38:e2:79:fe:6c:5e:09:ec:b1:b3:3e:1f:0f:db:1d:aa:d6:2c:
7a:31:80:9d:ec:a3:72:9a:37:b6:b2:8c:8a:73:02:7a:0c:f6:
d3:1a:96:6b:1e:bf:90:c4:ee:5b:20:fd:12:de:23:28:b6:2a:
4a:5d:94:0e:30:5e:71:a0:9f:94:77:18:b1:b3:17:e4:7f:fb:
c1:12:a5:87:f7:e1:13:91:31:ad:96:43:fe:75:a5:74:e3:88:
64:0f:ee:b1:e3:6e:1e:e3:60:30:63:10:ef:81:d7:01:8e:94:
59:be:e4:41:17:4b:51:b5:23:c0:ce:5c:93:37:10:84:01:c9:
49:b7:24:0e:37:01:a5:0d:08:fb:43:c5:c4:b0:cd:91:37:e5:
96:87:f7:5d:5f:35:2b:78:1e:26:0b:70:8b:78:26:7d:2b:25:
5c:da:dd:75:5e:86:3e:5d:4c:cb:84:3e:c2:65:4a:f6:c5:7a:
2c:b1:0f:1f:5a:a5:6e:f6:57:61:ba:cf:e1:ab:08:80:86:28:
36:a8:59:f0:df:b4:13:f0:17:9f:fa:d6:92:c3:04:9f:db:ae:
a7:d7:76:3a:33:88:f0:d9:3a:8b:d5:82:4c:27:8d:f3:68:43:
fb:5f:0c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:09:19 2025 by rpki-client