Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDF3258668A511F0A733807CDAE4EC9C.roa
File: DDF3258668A511F0A733807CDAE4EC9C.roa (raw, json)
Hash identifier: DMsJpOVPV/cIMGQmfgr/rpyIoEtkbICzio7JPVgQbtY=
Subject key identifier: 42:10:AF:FD:BD:F7:BD:A2:66:D2:C3:A3:AD:ED:E6:9E:63:4C:C0:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016791
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDF3258668A511F0A733807CDAE4EC9C.roa
Signing time: Thu 24 Jul 2025 15:50:05 +0000
ROA not before: Thu 24 Jul 2025 15:50:00 +0000
ROA not after: Mon 08 Sep 2025 15:50:00 +0000
asID: 44559
IP address blocks: 156.238.33.0/24 maxlen: 24
156.246.21.0/24 maxlen: 24
156.246.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92049 (0x16791)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 15:50:00 2025 GMT
Not After : Sep 8 15:50:00 2025 GMT
Subject: CN=6882562d-6719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c6:0e:55:37:c4:1d:83:92:02:5f:3d:99:5d:
1c:d1:f2:b7:78:b3:0a:4a:65:ff:75:d6:69:5e:f6:
0b:a0:f4:8c:d0:5d:d1:cf:aa:e0:06:1b:36:d1:95:
fb:e5:61:c6:ad:8c:0b:19:07:fb:d8:c8:83:ba:81:
d2:74:02:5d:ff:18:48:ca:df:86:7a:dd:0d:16:7f:
8c:e7:a4:db:c6:7d:87:fc:1c:3f:e7:4f:6b:4c:74:
29:54:48:9a:1e:46:ea:f7:d2:c4:dd:34:33:68:a2:
c7:2e:59:1b:1c:c4:cc:47:79:39:dc:b7:3a:d5:cd:
05:0b:88:90:c7:5e:04:77:2b:ad:b3:f2:af:54:63:
ab:40:fa:79:2f:c4:09:b6:64:a3:0a:91:b6:56:cc:
d7:a4:2e:74:12:be:db:da:28:a6:d6:88:98:97:40:
06:27:46:5c:87:aa:83:30:8c:ea:e7:95:55:2e:77:
d3:4b:7c:de:e2:7f:93:53:e9:51:29:a2:af:3c:be:
4c:d8:04:ac:cc:d2:1c:dd:5f:7a:4e:d4:38:1f:51:
45:8f:fb:07:0f:a4:b1:62:bd:20:8a:57:1e:21:99:
ea:b4:d3:b0:80:5d:b1:e7:54:19:46:26:c2:c1:d3:
54:69:0f:0c:2f:67:a6:5a:5a:69:e5:86:6f:ef:b0:
60:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:10:AF:FD:BD:F7:BD:A2:66:D2:C3:A3:AD:ED:E6:9E:63:4C:C0:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDF3258668A511F0A733807CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.33.0/24
156.246.21.0/24
156.246.31.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:bd:5f:60:26:90:12:2f:10:1c:e1:d9:72:f8:3b:ac:b8:31:
1f:79:5d:9f:af:54:ae:80:7b:9c:6a:c3:d5:66:d1:d2:64:07:
c6:91:5d:09:1c:04:7e:15:5e:c4:f6:77:ff:9c:e6:fa:a9:22:
2a:d6:c9:84:bb:b0:63:19:fb:09:ed:4f:f0:18:a7:58:b9:ce:
b2:72:f8:22:76:66:76:90:20:32:9c:bb:cd:16:b7:c7:1d:3c:
aa:1d:ce:a0:b3:ba:5d:6c:73:97:28:37:63:3b:94:14:51:a7:
b9:82:d6:1d:1d:68:f1:93:21:80:77:9a:cd:a3:c0:85:fa:86:
91:20:92:77:ff:a0:57:0a:05:80:b5:8c:e1:63:51:aa:d8:5c:
ef:d5:e9:37:ac:87:dc:41:92:db:2f:13:7c:b4:f0:72:30:59:
bb:c3:0a:35:a0:9e:82:72:b4:22:af:0e:32:11:5f:2f:69:82:
84:b2:0a:76:f9:6b:22:c3:67:4b:d5:30:88:3f:9e:45:af:c0:
37:75:97:28:32:f6:5c:73:ab:52:59:3e:47:93:b0:f0:26:f1:
77:88:df:82:2b:84:47:51:6a:53:43:48:59:62:48:05:cb:06:
51:6f:74:d1:d1:02:27:fd:b2:32:b0:48:1c:b1:23:15:f2:b3:
8c:d5:42:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:16:01 2025 by rpki-client