Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F94A3E4439711F0B497F7D2DAE4EC9C.roa
File: 7F94A3E4439711F0B497F7D2DAE4EC9C.roa (raw, json)
Hash identifier: 7sKNb/Egt8LHD8NGg4zJtp0tNMyH+ntuEF0d2o8qKMI=
Subject key identifier: D3:78:B3:0A:A0:AB:A2:6E:76:83:A2:AF:8C:6C:99:20:3D:9D:19:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015A4B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F94A3E4439711F0B497F7D2DAE4EC9C.roa
Signing time: Sat 07 Jun 2025 12:04:01 +0000
ROA not before: Sat 07 Jun 2025 12:03:56 +0000
ROA not after: Sun 22 Jun 2025 12:03:56 +0000
asID: 398704
IP address blocks: 156.245.192.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Jun 2025 01:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88651 (0x15a4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 7 12:03:56 2025 GMT
Not After : Jun 22 12:03:56 2025 GMT
Subject: CN=68442ab1-9553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:69:a6:65:00:76:7b:f8:7b:ff:d2:81:ab:61:
e7:7c:af:9c:e4:dc:e4:7d:f2:60:5a:f7:1c:34:96:
30:0e:02:a7:39:0b:e7:35:5b:30:8e:26:23:90:e0:
63:53:b3:6b:01:7c:fa:6e:49:05:17:66:31:be:25:
38:ba:67:ce:6a:76:33:70:f2:d8:a6:c1:98:4b:fe:
5b:89:87:86:52:1f:b6:7d:9b:e1:25:7a:18:71:cf:
1e:1a:bd:85:f5:c1:b9:fb:88:88:cf:1b:b6:7c:3a:
1a:ce:22:76:a2:f8:72:5d:1d:c7:6e:a9:25:b1:96:
04:2f:d9:b8:fa:52:de:26:41:b1:ee:e6:a4:ab:2a:
34:88:8f:b4:65:60:41:04:51:00:88:eb:e0:9f:2c:
9c:d6:99:dc:61:63:a5:7d:18:71:e9:60:a9:bf:9b:
bb:4a:5d:ad:85:1e:7e:b8:bb:be:32:36:2f:96:f3:
f1:53:dd:ce:86:e1:07:4a:fc:45:ad:78:11:f0:7f:
ab:62:86:49:04:91:b7:33:4f:3f:70:d7:eb:56:ce:
3c:d9:1b:24:6d:77:19:74:20:cd:e1:f7:29:67:eb:
0a:0d:d1:b2:bd:80:94:24:e5:1e:99:15:d8:40:e7:
60:bb:c6:e4:f2:89:2e:41:ae:e4:65:bb:62:c6:28:
85:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:78:B3:0A:A0:AB:A2:6E:76:83:A2:AF:8C:6C:99:20:3D:9D:19:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F94A3E4439711F0B497F7D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.192.0/23
Signature Algorithm: sha256WithRSAEncryption
14:8d:0d:e2:64:24:58:6c:f0:18:9e:e5:e1:16:5f:cf:2d:8d:
7f:c0:96:fa:7d:32:75:8f:61:c1:87:0e:90:fd:06:32:59:2a:
c8:2e:d2:1f:16:f0:90:8b:f0:f4:80:1e:93:9f:27:6e:d5:98:
ec:04:85:12:13:57:4b:06:2c:04:22:1e:97:c3:33:78:ca:0d:
d4:9d:6d:f5:9b:98:d4:3e:d3:ef:32:ea:d6:8a:3c:b9:b4:69:
8e:43:85:34:8b:29:ee:9f:df:a6:09:68:b6:c7:66:ab:dc:30:
4a:c1:9e:b4:3f:d0:9c:83:78:11:50:c3:34:2c:5e:93:fb:d1:
51:63:63:d0:4e:c5:f7:3d:b1:55:65:be:da:af:47:7c:2d:6d:
db:34:1f:aa:fe:f3:92:0c:b9:96:66:b8:a5:cf:e1:8f:0c:59:
bf:58:eb:53:8e:2f:db:e1:54:06:03:84:f7:8b:e0:64:e4:b0:
70:91:08:00:bf:bd:be:5e:dd:fd:d9:28:2c:46:e7:e0:5e:a0:
c4:bb:ee:f0:c3:c9:11:92:2d:f8:5e:39:da:73:12:96:e2:6a:
8d:65:0e:95:45:1c:99:c0:96:51:e4:c8:b4:bd:c1:e9:65:fe:
9d:89:c0:65:80:8d:fd:9b:00:87:cc:19:09:ed:2d:db:49:2c:
eb:15:24:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 08:24:13 2025 by rpki-client