Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6372778E490711F0844734C3DAE4EC9C.roa
File: 6372778E490711F0844734C3DAE4EC9C.roa (raw, json)
Hash identifier: uWxZzt+Ks7OFwwrg12qqi8e5Vb2bjOlSZh2jWTJnY6M=
Subject key identifier: B7:E6:43:5D:94:D2:F9:1B:F4:C2:8E:B4:DE:45:F4:79:83:48:67:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015BFF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6372778E490711F0844734C3DAE4EC9C.roa
Signing time: Sat 14 Jun 2025 10:07:34 +0000
ROA not before: Sat 14 Jun 2025 10:07:29 +0000
ROA not after: Mon 21 Jul 2025 10:07:29 +0000
asID: 30781
IP address blocks: 156.233.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Jun 2025 01:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89087 (0x15bff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 14 10:07:29 2025 GMT
Not After : Jul 21 10:07:29 2025 GMT
Subject: CN=684d49e5-a150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:47:f4:20:86:d2:d8:25:87:e7:c2:95:c8:06:
7f:9d:79:c1:83:ba:33:52:2e:a5:72:60:66:46:6e:
92:f1:16:e3:6e:dd:60:f7:fc:29:3b:be:f5:ab:b5:
b6:80:06:04:d5:c7:1c:a8:4c:f2:2a:ee:e1:59:8f:
c9:05:87:5e:75:c6:52:12:d3:14:94:9b:29:56:26:
62:3b:4c:f4:88:39:87:da:d5:08:a6:05:43:42:b4:
ad:f7:f4:d9:e5:9b:73:27:2d:2a:4a:c1:fc:ea:85:
c3:aa:b1:6f:62:ab:6a:b7:d5:c2:1a:8a:15:c4:48:
7c:49:f4:0d:72:e8:6e:cb:f1:35:bf:1b:9d:0d:49:
2c:56:70:43:6c:3b:e5:c1:b5:39:c3:82:33:75:60:
d8:22:08:f3:76:1b:78:ee:4f:b9:b4:8d:59:90:7d:
ec:e1:4b:51:0d:78:4a:e9:3f:b8:06:5e:fe:61:7b:
9d:dd:3a:64:72:fe:20:fc:50:27:ff:b0:d3:1c:e7:
3e:8e:14:d9:69:a6:0b:ac:ff:c2:c9:f3:64:e2:5a:
0e:d2:4c:04:28:77:ba:52:56:21:a3:51:1e:60:9a:
59:e7:ec:7a:2b:05:73:85:81:bb:3d:1c:67:49:d8:
87:02:86:65:f2:37:66:7b:c5:44:7b:ec:25:0c:74:
c3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E6:43:5D:94:D2:F9:1B:F4:C2:8E:B4:DE:45:F4:79:83:48:67:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6372778E490711F0844734C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.176.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:a5:1c:9a:bb:c8:3f:49:b5:7c:3f:ce:82:91:4e:5b:21:55:
09:2a:3d:86:a9:9f:2b:59:da:5c:61:2b:8c:5f:5c:54:db:36:
d2:e0:26:d5:fc:e0:6e:d6:62:cb:e9:49:23:75:8d:d1:41:fb:
94:a3:75:0c:a9:5f:b1:4c:b4:4c:01:fd:1b:1e:42:c5:16:61:
45:14:3f:95:12:8c:b4:eb:4a:9e:a7:96:a6:7e:bf:db:11:46:
38:e3:7a:06:36:88:f9:6a:aa:e1:be:38:40:55:b0:98:15:b1:
04:23:e9:5f:87:08:30:c4:a1:32:c5:4b:6d:1e:b7:6a:36:fd:
a6:cc:d4:a1:1d:c9:ed:ee:1a:7c:fd:2f:de:13:0d:58:c8:8d:
0a:fc:9c:c6:05:d2:2d:7d:46:04:42:71:66:4e:5a:73:ee:86:
ae:d1:04:3b:93:39:24:18:1a:1c:ef:7c:1b:8f:49:14:3f:0a:
0d:7a:8a:b9:79:3d:48:db:6e:bc:0b:15:4c:aa:52:7c:b3:73:
cb:39:66:6e:fd:28:50:1b:8a:ac:45:e0:7d:6f:cd:84:34:77:
93:5a:42:9e:22:89:ad:ea:b7:94:c0:5f:53:30:a5:dd:1b:1a:
bd:2f:cb:07:7e:b1:af:b2:6d:76:14:6f:d0:5f:e2:cd:1c:65:
72:c0:0b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 08:23:23 2025 by rpki-client