Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6CD1B4C49D511F081A96E82DAE4EC9C.roa
File: E6CD1B4C49D511F081A96E82DAE4EC9C.roa (raw, json)
Hash identifier: SpEsMnpj654wz6Fz5eLtskhxGz9I3gPCmLQ1KNOmxwc=
Subject key identifier: 0B:1A:CC:34:C0:BD:06:6A:47:09:3C:ED:2F:BC:18:96:50:60:4C:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015C4E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6CD1B4C49D511F081A96E82DAE4EC9C.roa
Signing time: Sun 15 Jun 2025 10:45:50 +0000
ROA not before: Sun 15 Jun 2025 10:45:45 +0000
ROA not after: Wed 25 Jun 2025 10:45:45 +0000
asID: 141372
IP address blocks: 156.238.82.0/24 maxlen: 24
156.238.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Jun 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89166 (0x15c4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 15 10:45:45 2025 GMT
Not After : Jun 25 10:45:45 2025 GMT
Subject: CN=684ea45e-6f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dd:ad:59:32:65:ad:8a:59:5c:39:aa:ec:79:
91:a0:b7:e7:4c:39:20:e8:81:be:e8:84:ac:11:02:
c3:ac:3f:81:4a:fc:91:73:db:2e:b7:35:35:b7:ae:
27:b1:7b:c3:f4:80:8e:5a:97:0f:ab:16:03:da:7a:
f3:ae:29:5b:71:ca:5d:bf:6b:61:25:50:bf:e1:e9:
06:24:dc:fd:15:88:24:ac:31:d0:00:98:ee:f5:cd:
d1:0f:32:f8:89:29:dd:a7:c6:e5:86:56:88:b5:14:
a1:ec:cd:47:f5:1b:d9:c8:da:d0:9e:79:e3:d6:5a:
f9:37:e2:c0:9b:51:7c:4c:a4:b3:d6:0e:a0:f8:b4:
69:84:73:f9:31:a4:44:8e:be:85:53:f7:80:d7:02:
42:b7:b6:7d:ba:c9:0d:a9:8d:71:c8:b2:62:f1:af:
81:1e:ae:92:88:8a:92:39:ad:ca:6e:e1:8a:c6:60:
42:68:d8:00:0c:3b:d6:49:9c:b4:ff:44:31:ac:c9:
a3:f6:15:38:8e:e2:43:4a:0d:8e:99:05:d9:b4:b7:
f8:3e:0b:d6:e4:99:cb:5b:71:dd:3e:69:25:09:65:
df:18:9f:78:c4:c4:b6:e6:ac:e3:2b:73:11:e8:cd:
88:ef:b9:e9:7f:1c:8c:90:2d:1d:97:45:02:60:ee:
f8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1A:CC:34:C0:BD:06:6A:47:09:3C:ED:2F:BC:18:96:50:60:4C:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6CD1B4C49D511F081A96E82DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.82.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:67:a9:ba:a2:0d:c4:b3:1a:4c:4c:6d:fb:f2:9a:b5:1d:10:
bf:d4:85:c9:a1:ea:c2:cc:dd:c4:c9:e0:5c:e6:12:28:05:75:
ec:47:fa:e7:fc:3f:6c:cc:6e:19:48:6b:1d:40:5d:aa:7c:6a:
be:e5:a4:46:03:d0:06:99:d2:8a:98:4a:de:25:f0:98:9d:bc:
fc:61:22:29:9c:23:3f:c5:79:38:28:26:5d:0e:fa:49:76:d3:
90:c4:45:c2:bc:5e:3e:49:fb:69:50:63:c2:85:1e:a0:ea:14:
b4:2c:4a:05:48:e2:db:6c:b2:79:9a:55:e0:9d:42:47:7c:d1:
99:c7:c6:cf:c8:0f:33:f6:61:a5:ea:32:c5:17:71:d4:ff:84:
78:58:85:ac:bc:ef:a5:0e:71:33:90:f3:98:3f:b8:e5:cd:b6:
ce:97:6d:c7:f8:9f:c7:13:9b:d2:27:59:65:b6:5e:d5:18:90:
85:72:77:29:e3:53:c6:24:5f:a2:9c:68:04:32:20:91:70:a0:
f5:5f:df:9d:7c:b0:0c:17:d3:b1:e4:54:27:ca:f5:26:87:b1:
4f:28:94:19:c5:66:ec:9b:72:95:13:60:87:5d:60:29:bf:6f:
f4:fd:4c:bd:e0:84:96:b3:9e:42:16:e4:7c:b7:28:32:d6:83:
7e:df:6c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 17:18:11 2025 by rpki-client