Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B93A52AC486411F0BDE4059CDAE4EC9C.roa
File: B93A52AC486411F0BDE4059CDAE4EC9C.roa (raw, json)
Hash identifier: pGu3LNTF+lBak7MbBOp+Ek94sLOM8xML6AQhVww7fBM=
Subject key identifier: 3A:2D:EF:FA:E9:A0:69:FB:85:10:AA:65:A4:E4:1A:DE:A6:4A:CE:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015BD0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B93A52AC486411F0BDE4059CDAE4EC9C.roa
Signing time: Fri 13 Jun 2025 14:43:09 +0000
ROA not before: Fri 13 Jun 2025 14:43:04 +0000
ROA not after: Fri 20 Jun 2025 14:43:04 +0000
asID: 398823
IP address blocks: 156.252.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Jun 2025 14:43:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89040 (0x15bd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 13 14:43:04 2025 GMT
Not After : Jun 20 14:43:04 2025 GMT
Subject: CN=684c38fd-b732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8c:86:64:b3:ba:dd:15:06:ff:bb:e2:e7:da:
40:9b:28:30:70:c8:1a:a4:91:65:52:d8:8b:7e:ed:
c3:f3:f8:9b:19:bd:d5:88:e8:86:e8:45:dd:40:11:
31:92:ed:aa:bf:fe:46:98:f1:e3:51:4b:2a:e2:51:
b3:61:f2:59:83:ca:0a:df:e6:1c:4f:f1:80:00:19:
6f:65:f7:53:80:47:3f:b7:53:66:d0:81:32:ce:79:
25:57:50:9d:88:17:c5:fd:3f:04:2e:42:66:45:2b:
44:e2:6d:e5:b3:88:b4:93:70:0f:c6:7c:f2:cb:ec:
a5:62:9a:4c:82:64:a3:de:c6:b6:a5:0f:34:25:5e:
fc:01:29:36:07:4d:a0:3c:ca:34:a4:4f:c0:a5:be:
96:1d:87:33:69:e5:fe:c6:3e:dd:c9:d2:55:b3:7c:
a0:82:f2:42:07:8f:1a:42:b6:2a:09:e7:ec:52:20:
d9:a8:ae:a0:2f:ba:c0:8c:6c:41:73:88:4f:a7:1f:
54:6a:07:19:b8:56:df:43:25:0f:a1:8b:66:30:bc:
ce:af:44:8b:ad:e1:14:76:67:34:11:d6:ad:30:b5:
f2:32:a0:e2:17:27:a7:de:47:50:2e:36:03:90:35:
01:0b:dc:98:28:18:54:1c:68:52:76:1c:33:d0:45:
d6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2D:EF:FA:E9:A0:69:FB:85:10:AA:65:A4:E4:1A:DE:A6:4A:CE:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B93A52AC486411F0BDE4059CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.96.0/19
Signature Algorithm: sha256WithRSAEncryption
5e:82:1a:89:17:f0:45:16:14:6f:af:01:29:8f:4e:a6:a8:54:
da:3e:04:10:31:ec:08:6e:a6:f8:8a:8c:9a:77:d2:3a:7b:e2:
1e:12:a7:98:ef:eb:dc:7c:37:06:21:43:e6:e4:ce:c0:b5:cb:
75:9e:1e:af:97:c2:a1:e8:01:e1:7c:9a:a8:a4:d3:4b:5f:89:
e8:cc:54:b6:8d:cf:ef:29:5f:b6:e3:3f:48:46:e9:68:09:93:
db:58:6a:48:26:69:0d:58:e6:1f:be:99:e1:0e:6b:7a:5a:7d:
54:a7:c0:bc:c3:e6:5a:01:85:a5:eb:a6:0d:79:49:38:9c:e8:
12:aa:74:87:54:b3:c1:b0:f9:3d:67:f9:bb:c1:6f:c2:70:a1:
35:d0:83:be:01:08:35:92:f4:ed:7b:e2:98:ad:c4:7e:1f:3c:
fd:37:06:40:c0:9e:23:6b:fe:04:2b:02:a4:22:4f:dc:74:d3:
e8:00:d4:76:1c:aa:d0:d1:18:43:12:fb:fc:e0:50:ae:2d:5f:
f9:17:c7:9b:14:24:0b:dd:6b:be:27:99:2b:eb:9f:ff:ac:fc:
0d:ea:32:ae:92:b4:ad:d1:8b:b6:86:b7:87:e6:e7:97:b3:73:
ad:bd:34:af:3a:ce:88:27:40:06:ef:d5:10:0f:06:9b:93:d3:
5b:ad:4e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:57:45 2025 by rpki-client