Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/615DF01443A211F0803D8C9BDAE4EC9C.roa
File: 615DF01443A211F0803D8C9BDAE4EC9C.roa (raw, json)
Hash identifier: 76wvJsraIqQ7cEtQeu0Ww8Q7sBJk7aHPMmmib6IJ+kA=
Subject key identifier: 8C:31:B5:78:ED:D8:CB:EE:4A:6A:73:FF:3E:8C:C9:41:6D:59:12:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015A5F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/615DF01443A211F0803D8C9BDAE4EC9C.roa
Signing time: Sat 07 Jun 2025 13:21:55 +0000
ROA not before: Sat 07 Jun 2025 13:21:50 +0000
ROA not after: Sun 13 Jul 2025 13:21:50 +0000
asID: 397423
IP address blocks: 156.225.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88671 (0x15a5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 7 13:21:50 2025 GMT
Not After : Jul 13 13:21:50 2025 GMT
Subject: CN=68443cf3-cf01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:cf:b4:fb:82:cd:a7:32:88:b9:ca:c5:0d:8b:
d6:97:55:e4:ad:c9:e0:db:8f:e0:bd:44:f8:1a:9d:
7c:16:47:b5:5d:4b:09:7a:0b:01:a7:a9:a0:34:af:
23:1a:c4:aa:bf:55:44:5d:dd:f4:55:d6:86:c6:0b:
39:10:4f:42:07:ec:4e:d3:4d:b4:0c:d7:84:e2:c7:
a8:12:74:c1:28:40:e6:c4:9b:09:e2:31:ae:4d:6e:
9e:19:9d:64:06:4f:fe:bf:6e:d6:af:8e:3a:29:e0:
06:9f:f5:93:13:9f:b7:10:66:63:ef:57:e4:55:a3:
00:7e:0c:32:ac:fe:5c:0e:73:cf:bd:a7:f3:60:18:
d1:44:0a:ff:cb:e5:43:d1:e9:75:97:80:d2:8a:6b:
fd:35:9e:0f:cf:92:cb:35:ea:8e:fc:98:d5:2a:ff:
f7:7b:a0:c5:1d:65:f9:23:3c:06:66:ab:2e:46:3a:
fe:d3:a1:50:da:76:48:16:82:e9:b9:de:2d:03:70:
0b:8d:e6:2b:83:bf:72:5e:14:34:01:14:7b:b2:dc:
b7:86:b5:dd:ee:d9:ec:a7:ab:a6:33:24:6c:f0:45:
46:f7:12:b1:33:21:17:da:ee:00:9f:26:5a:ea:3e:
fa:6f:c8:63:36:dc:6f:68:74:23:a0:f1:21:27:90:
5a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:31:B5:78:ED:D8:CB:EE:4A:6A:73:FF:3E:8C:C9:41:6D:59:12:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/615DF01443A211F0803D8C9BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.65.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:3c:1f:c4:ea:10:32:9f:8c:6b:53:0d:06:95:cb:17:2a:91:
fd:5d:de:63:da:c9:2d:9b:24:61:b7:cb:6e:fc:60:30:bd:78:
82:d9:ae:1a:eb:45:62:5c:7f:6e:2e:4b:9f:f8:35:24:ef:ea:
e6:95:4f:2e:cb:15:c0:e2:59:e6:35:ab:e1:4e:06:83:eb:f8:
25:01:84:41:bc:b4:b3:26:be:73:6f:62:64:44:a1:44:3b:80:
dc:67:22:f5:bd:ad:38:9b:23:58:86:d1:93:c1:5e:40:ad:55:
39:8b:ff:96:3e:e6:c9:d0:45:15:37:3f:67:fc:70:a2:93:f3:
d6:e5:78:94:82:3e:b7:4d:2e:af:53:69:f7:ec:63:65:85:ad:
85:f9:00:e6:58:9b:78:50:45:66:88:4f:46:ae:d3:74:73:fb:
27:8d:bd:ba:68:0f:e8:e4:46:87:cf:1a:d9:a5:66:0c:cc:fa:
fe:4e:9a:c5:26:c5:e3:de:5f:fa:69:ea:b1:6d:5f:3b:57:2e:
8d:46:ea:57:e6:4d:26:7c:8c:c7:3e:4d:81:b0:4e:36:5b:1f:
6f:46:f6:e4:9f:c9:24:43:9b:67:79:35:54:28:22:4f:b5:4d:
50:3a:5b:2c:c6:17:1c:b9:00:c3:59:35:4a:fb:42:8d:76:13:
39:fd:1c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:29:55 2025 by rpki-client