Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/834304EA452211F096A1B3DBDAE4EC9C.roa
File: 834304EA452211F096A1B3DBDAE4EC9C.roa (raw, json)
Hash identifier: bNmbYCIC/EyFMpqyNdfaC4F/H9pIT8dSqG9o/rqplEs=
Subject key identifier: 3C:17:E7:5C:15:CB:DE:12:28:01:D7:F1:6C:62:14:2C:5E:B7:A9:14
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015A8B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/834304EA452211F096A1B3DBDAE4EC9C.roa
Signing time: Mon 09 Jun 2025 11:11:39 +0000
ROA not before: Mon 09 Jun 2025 11:11:34 +0000
ROA not after: Tue 11 Nov 2025 11:11:34 +0000
asID: 137951
IP address blocks: 156.224.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Jun 2025 06:15:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88715 (0x15a8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 9 11:11:34 2025 GMT
Not After : Nov 11 11:11:34 2025 GMT
Subject: CN=6846c16a-5fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8c:2d:19:d5:e7:dd:11:ed:18:9e:e0:a2:3a:
66:e6:af:28:89:07:90:fe:6b:d9:b2:ca:0f:79:92:
f9:e3:46:f3:77:0b:76:d2:14:f5:f3:dc:64:4f:49:
c6:2d:10:77:cf:3d:d2:b1:5e:e9:7e:3a:5e:5d:88:
a2:4e:4c:06:68:9e:c7:b1:fc:75:e8:ea:a5:92:16:
81:f4:4a:86:2c:c2:a1:24:e7:8f:90:47:35:de:0c:
5a:3c:ed:85:3d:f9:f4:90:dd:e4:32:2b:37:65:d9:
91:cf:29:13:ec:7e:dd:44:02:e2:f8:c5:71:b9:bc:
bf:0c:e5:ba:2a:72:7a:06:dd:d7:c0:0e:01:8b:0f:
34:1d:0b:66:72:d1:6a:81:36:82:52:c0:34:9c:4c:
fc:18:07:40:83:08:b9:d9:4b:a7:6d:1a:2d:19:41:
4e:70:ad:ff:fc:de:48:d6:e0:e3:2a:28:42:67:ae:
9b:03:35:6c:b7:82:a2:a7:21:44:0c:95:1c:e9:3d:
78:83:68:d6:5e:02:e8:f9:01:3b:f8:c6:4c:fc:f9:
f6:a6:80:f9:25:e3:27:8a:e1:c2:9a:ae:72:f7:30:
bd:bc:3d:0b:e8:c3:e2:c4:ed:45:28:32:c2:56:18:
17:7e:91:f7:a3:ce:23:d8:92:7e:82:31:ae:09:bc:
d6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:17:E7:5C:15:CB:DE:12:28:01:D7:F1:6C:62:14:2C:5E:B7:A9:14
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/834304EA452211F096A1B3DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.32.0/19
Signature Algorithm: sha256WithRSAEncryption
4e:df:cd:31:57:e0:f9:59:b8:f8:1c:fa:13:40:2e:50:37:de:
1f:43:19:94:28:9b:5d:9f:4c:8f:a5:e3:b8:cc:ff:40:4a:2b:
8a:77:b9:74:0b:cc:57:87:0b:af:77:f1:3f:42:a1:de:32:3e:
e1:11:40:85:8f:3f:75:ec:7c:e2:1d:9e:54:ef:50:5e:0c:13:
c7:ea:09:b8:0c:63:de:e4:e6:f0:c0:9d:3b:be:b1:76:57:48:
38:9c:3d:00:30:6e:42:5b:5b:bf:4a:5d:83:bb:db:fd:be:ea:
1e:d7:e1:04:51:46:66:0d:34:20:d1:c6:9b:a3:bc:0b:a0:92:
09:db:f2:d4:22:0c:97:57:82:33:26:48:3f:e8:0b:2e:0f:05:
a9:ab:57:16:f5:ba:49:10:5a:86:87:87:63:d1:e9:55:b8:1c:
34:bb:9b:bf:c2:80:b4:c9:18:3c:24:20:c2:fe:3b:ff:c1:4b:
05:af:c2:0e:09:cd:62:dc:65:3a:c4:08:ad:b4:32:af:a2:34:
91:4c:2b:fb:5e:e6:7d:b5:9d:11:9b:7d:d6:65:db:86:58:78:
1f:6d:44:22:ec:13:a4:a2:b0:96:a3:68:ec:62:1d:f5:eb:b9:
a2:12:cd:4c:04:8a:9f:8b:62:94:f4:5c:2f:c6:47:50:21:ca:
b9:7a:f4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 00:17:21 2025 by rpki-client