Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61F805F8479111F092DBF3AEDAE4EC9C.roa
File: 61F805F8479111F092DBF3AEDAE4EC9C.roa (raw, json)
Hash identifier: cBTdOaxtetd9BkKbtpuvvRUiESnO522AtSjuCxUqTOc=
Subject key identifier: FB:5B:FD:D8:0D:34:57:D7:8E:86:DB:B6:37:DD:02:D3:C6:AA:53:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015B91
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61F805F8479111F092DBF3AEDAE4EC9C.roa
Signing time: Thu 12 Jun 2025 13:30:19 +0000
ROA not before: Thu 12 Jun 2025 13:30:14 +0000
ROA not after: Tue 22 Jul 2025 13:30:14 +0000
asID: 40779
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88977 (0x15b91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 12 13:30:14 2025 GMT
Not After : Jul 22 13:30:14 2025 GMT
Subject: CN=684ad66b-1596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:76:3f:86:62:48:39:82:07:19:64:fe:a1:ab:
5a:9d:56:9b:07:04:79:99:ac:fc:2b:db:20:8c:7a:
bc:52:b5:bd:9c:f3:53:9b:b6:3e:68:66:7f:21:5a:
60:7f:ef:0f:85:3a:b3:26:8d:73:1f:77:d4:f9:7a:
50:5d:12:a3:41:bc:5b:f6:47:2d:22:77:65:81:16:
16:a0:96:d1:78:d5:6f:b8:57:4f:f9:1f:ff:9e:79:
fa:d4:ed:94:0d:df:26:16:e2:c4:70:15:36:e9:98:
40:03:b9:77:d9:1e:f7:7f:d6:7a:e7:ad:15:29:88:
91:04:f0:5b:ce:44:41:a6:e7:d1:6f:0d:5a:a6:f9:
36:dc:43:f1:d0:18:55:f5:57:2a:80:c7:4f:70:a3:
82:f6:c2:f7:c4:da:03:d4:77:e4:54:db:a6:bc:9a:
b9:da:c0:cd:7a:f9:21:42:f9:8c:52:f3:cf:85:71:
90:a2:e9:be:2a:cb:c9:d4:4a:b8:c7:d0:ee:a0:03:
15:d4:c8:fa:87:95:4f:d1:5d:fc:b5:33:31:58:24:
b6:ef:7e:45:28:37:0d:c8:2f:6e:e2:59:0e:df:4c:
b8:60:40:f0:2a:0a:27:df:97:ed:07:dd:cf:df:5d:
13:8f:39:b0:5b:b8:78:7b:15:92:34:64:eb:06:2b:
3d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5B:FD:D8:0D:34:57:D7:8E:86:DB:B6:37:DD:02:D3:C6:AA:53:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61F805F8479111F092DBF3AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
7a:30:42:0e:11:8c:77:2e:67:d2:ff:09:d8:4f:6e:57:d9:45:
4c:32:46:c8:29:ce:fa:ab:b7:c5:15:1d:76:47:9e:82:67:4f:
49:8d:fd:13:a0:ad:93:b4:0e:90:c5:57:d4:ef:a1:1c:87:f6:
62:4d:a7:8f:5e:da:b8:9f:b1:57:28:5b:15:a6:a9:16:3e:d9:
36:4b:25:67:e2:08:3e:13:63:7a:61:3e:27:40:1d:c1:3c:12:
c1:3d:5a:ff:2d:cf:22:a3:2a:d7:d1:25:7a:d8:0a:fa:c4:de:
2d:74:a6:b0:04:04:de:b7:96:fa:a4:cb:ce:fe:10:bf:01:c1:
71:2e:4e:19:07:fb:86:ee:64:e0:60:09:ca:ae:1d:a3:07:34:
45:49:8b:5f:5f:be:ef:a4:01:2d:aa:cf:b2:dd:fb:dd:37:52:
17:ff:2e:6c:b4:4f:e7:8e:00:1b:ff:33:4c:d4:1f:ac:92:82:
e8:b0:0d:e9:85:35:58:8b:42:84:ea:fe:c6:30:9f:72:f4:fa:
a9:10:29:7c:35:32:c9:80:7e:8e:6b:a7:25:c7:f5:8a:fc:34:
cf:b0:87:4d:de:64:47:49:c8:39:5c:5b:2d:1f:05:af:41:5e:
81:76:18:d0:2b:77:e2:a7:8a:30:b8:09:14:b1:b8:82:80:93:
e4:c0:8c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:31:41 2025 by rpki-client