Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5CFD66642D411F0AF5C12E1DAE4EC9C.roa
File: D5CFD66642D411F0AF5C12E1DAE4EC9C.roa (raw, json)
Hash identifier: B4o8NBWa9IVmGq7Hd2VCNKJn6T+U/odKFhnPk6zPKlY=
Subject key identifier: 95:A8:1F:E5:12:90:DE:2C:BD:FC:2D:EB:61:B2:19:C7:0D:11:3F:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015A04
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5CFD66642D411F0AF5C12E1DAE4EC9C.roa
Signing time: Fri 06 Jun 2025 12:50:34 +0000
ROA not before: Fri 06 Jun 2025 12:50:29 +0000
ROA not after: Sun 31 Aug 2025 12:50:29 +0000
asID: 134548
IP address blocks: 156.240.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88580 (0x15a04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 6 12:50:29 2025 GMT
Not After : Aug 31 12:50:29 2025 GMT
Subject: CN=6842e41a-f9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:98:7a:ae:7c:d7:6b:33:5f:6d:e0:3c:ae:
8a:e4:78:58:d5:44:35:5c:d5:8e:5f:9a:ac:eb:cb:
f2:7d:97:e3:f7:fa:74:97:2d:26:b4:1d:03:2e:94:
af:e5:08:93:e6:16:62:11:d3:07:3c:9a:76:bb:2e:
32:62:f4:c1:35:65:c8:d0:ee:da:f6:bd:8c:ba:8a:
89:c2:87:fa:c5:58:2f:f5:71:ea:b9:a4:2b:3b:4e:
0f:94:c9:3c:d1:1c:cc:a1:cd:73:bb:29:4c:78:25:
b9:6b:31:2e:43:85:aa:c2:89:d7:04:5c:c0:2e:e4:
e7:a0:7f:14:31:ba:26:f1:2d:ec:a7:a4:65:ee:ed:
49:0d:73:7c:51:af:89:b6:62:b2:d2:5f:32:a7:b2:
1b:1a:8d:5c:a0:1d:51:93:f3:e9:91:60:89:d1:f6:
8a:e7:ca:68:7f:a0:e7:a8:81:df:c6:7c:b9:e8:52:
46:21:6d:41:51:b4:02:1b:da:8e:6e:fa:45:8b:f0:
94:6a:f3:b5:11:dd:6a:21:d6:bb:fc:90:4a:f4:fc:
70:98:5c:46:d7:c0:02:db:91:31:d6:92:cb:60:d3:
d3:f0:8a:94:49:cf:75:0b:b3:c9:f3:c5:db:da:8f:
a8:38:c7:eb:06:cd:ec:70:3b:59:51:42:17:44:60:
d5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A8:1F:E5:12:90:DE:2C:BD:FC:2D:EB:61:B2:19:C7:0D:11:3F:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5CFD66642D411F0AF5C12E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.255.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:e2:8d:2a:20:b7:b9:43:00:16:ca:24:c7:1a:f1:77:a7:81:
cb:5b:af:7c:d2:e8:e3:cb:cf:2d:f7:83:91:17:ec:82:78:15:
76:97:0f:90:b7:f2:e0:ed:3f:1e:1d:19:e1:88:44:34:2f:91:
87:23:ec:0f:c5:7a:4e:b7:76:2d:56:e7:25:6c:b0:7c:23:9b:
26:dd:d8:4e:fc:17:af:c1:df:f2:84:01:57:76:c2:00:74:22:
cf:63:6c:c8:6e:20:ce:0a:7f:be:0b:55:50:2d:ae:b7:db:14:
2a:cf:90:03:6c:b6:c1:41:b3:bd:6d:2e:a3:69:af:f4:ab:d2:
51:09:28:b1:ef:40:cc:61:8c:cc:1f:de:67:50:fa:83:f6:40:
44:1a:0b:13:ad:40:c5:65:84:9b:14:d8:50:a7:45:86:1b:2a:
06:91:dd:43:06:6c:6d:e9:cc:49:46:9e:18:08:0a:1d:4f:74:
ac:ab:71:b0:9b:31:08:bc:83:24:cc:8c:e4:5e:ba:75:df:10:
a5:0d:0e:08:db:a7:bb:65:8b:92:70:0c:48:2b:56:5a:3b:e2:
ff:c5:c2:dd:ba:d4:31:33:3a:b4:3c:e3:c6:74:29:59:ad:29:
f9:f1:36:25:04:3e:d0:6d:10:d0:a1:3b:07:43:14:7a:ed:77:
9d:73:cd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:57:37 2025 by rpki-client