Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD81AA1645D211F0AFCACDD8DAE4EC9C.roa
File: BD81AA1645D211F0AFCACDD8DAE4EC9C.roa (raw, json)
Hash identifier: S7Yb2Emp4VlVNxRKLeSmEjoKVVFejjRm90CYkH9FkrE=
Subject key identifier: EC:AC:77:31:CD:D6:AE:88:CF:1F:A9:63:1E:BE:38:6B:F0:3B:15:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015AA4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD81AA1645D211F0AFCACDD8DAE4EC9C.roa
Signing time: Tue 10 Jun 2025 08:13:08 +0000
ROA not before: Tue 10 Jun 2025 08:13:02 +0000
ROA not after: Tue 12 Aug 2025 08:13:02 +0000
asID: 214432
IP address blocks: 156.254.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88740 (0x15aa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 08:13:02 2025 GMT
Not After : Aug 12 08:13:02 2025 GMT
Subject: CN=6847e914-6b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:9f:52:1c:d6:dd:18:51:95:37:a2:a8:d5:
74:42:84:58:f2:57:77:d6:0e:8e:11:e7:53:d1:1c:
c9:b0:f1:5e:3f:34:cd:cd:4e:e1:d2:33:e6:56:29:
e7:4c:6e:da:84:d8:d4:df:35:ff:c5:3c:23:f1:c6:
35:d1:ff:09:18:a0:47:1a:ff:f0:4b:61:56:30:91:
52:fc:57:a2:a0:80:24:e8:d9:ba:56:aa:d8:67:8d:
1a:01:7c:68:9b:1b:0a:24:66:ea:da:b0:38:59:c9:
c2:a5:a8:82:8a:9f:ec:09:c2:7c:36:11:2d:cb:cf:
5b:4f:e2:75:1f:1c:ea:4a:48:30:d3:8d:e5:ff:a8:
36:5c:93:c6:ff:7b:ec:a9:db:ce:01:ff:fb:fe:f5:
cb:df:24:21:4a:b1:69:52:84:27:e4:b7:7d:e4:82:
36:f2:0c:4b:30:af:00:45:6a:46:8e:66:b3:03:7e:
be:82:c2:02:72:9d:36:f6:4c:c6:91:6a:05:24:f5:
c8:3a:30:e8:05:4c:04:f5:c9:61:5c:2f:de:31:ef:
9f:08:17:7e:4d:e4:7f:1d:43:1f:bb:8d:ed:96:b1:
75:ba:ff:cc:89:ab:01:79:59:19:42:d9:57:7f:c9:
88:a7:3a:50:01:b5:b4:d3:ef:eb:11:f3:bd:be:62:
95:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AC:77:31:CD:D6:AE:88:CF:1F:A9:63:1E:BE:38:6B:F0:3B:15:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD81AA1645D211F0AFCACDD8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.20.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:1f:f9:81:81:c9:53:a1:1a:5b:0b:66:b6:a0:7e:c3:68:35:
7e:52:13:a8:e5:9b:a2:1f:13:9d:33:48:01:5a:ab:80:3d:c7:
cf:0a:29:3f:fa:08:b1:f7:e9:a2:76:9b:3b:e1:3d:b3:35:9d:
ae:b6:2b:ee:fd:3d:0e:85:86:2d:72:03:fd:65:43:35:9e:e4:
9e:9b:6f:db:11:9d:61:c7:93:9d:dc:a5:8e:49:e4:72:39:dc:
96:ec:8a:b5:05:e3:b4:76:5e:ee:22:ff:fc:1a:44:ed:0e:70:
2c:d1:f4:4f:65:93:e4:13:bd:e5:77:d7:0e:f0:a0:51:44:e3:
9d:cb:09:a4:9e:25:dc:1b:b0:51:b1:ee:83:58:56:f5:37:b3:
15:76:f9:df:f4:d3:06:82:92:0b:26:ed:36:06:38:c4:61:b2:
4b:d3:43:5a:19:f9:50:4d:8d:0b:34:2d:cb:95:12:da:7a:54:
bc:74:57:38:b0:1f:cf:a5:b5:f5:6d:11:90:85:ad:26:47:f9:
88:2b:c7:f2:42:ac:92:04:9d:11:79:00:12:2c:34:6d:29:0b:
28:21:73:1e:1a:32:92:7d:90:16:52:19:d1:fd:f8:00:8e:fb:
fe:b6:2b:b5:af:d3:ca:9e:2e:88:72:7a:73:e9:b3:06:57:97:
0f:41:89:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:01:19 2025 by rpki-client