Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E88BE0886D2C11F09E69BC7CDAE4EC9C.roa
File: E88BE0886D2C11F09E69BC7CDAE4EC9C.roa (raw, json)
Hash identifier: iiu9t8BppV4eDp5FsdJpx3pck2QIF9GuKS3/d/0qsCA=
Subject key identifier: 67:8A:2B:45:3F:BE:24:5C:87:C3:17:35:A2:ED:36:DF:9B:4A:2E:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01684C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E88BE0886D2C11F09E69BC7CDAE4EC9C.roa
Signing time: Wed 30 Jul 2025 10:06:50 +0000
ROA not before: Wed 30 Jul 2025 10:06:45 +0000
ROA not after: Thu 04 Sep 2025 10:06:45 +0000
asID: 211961
IP address blocks: 156.233.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92236 (0x1684c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 30 10:06:45 2025 GMT
Not After : Sep 4 10:06:45 2025 GMT
Subject: CN=6889eeba-c1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fc:15:40:24:45:ed:12:32:8b:5a:c0:b0:52:
33:00:af:d4:8d:2f:bc:be:a7:10:23:44:99:d7:c7:
3d:99:1a:ad:d0:d5:8f:db:cb:41:69:b1:d0:e6:ab:
f5:9e:bc:76:73:57:8a:f6:c8:11:7e:af:9a:0c:15:
27:9a:09:17:53:97:c4:2c:29:57:e0:29:66:95:dc:
c6:b5:33:b9:1a:32:88:51:01:05:96:a7:b9:eb:44:
f3:cf:d9:f8:ab:fe:a5:c6:00:e9:27:4d:85:cb:2c:
b3:3b:cf:b3:18:8a:47:34:35:90:88:e3:d9:1b:d2:
d5:c2:86:c4:2c:bb:7a:ba:85:0c:7d:6d:ba:cd:54:
9a:a7:33:bf:8a:79:59:14:45:00:45:42:cd:db:ac:
60:e2:7c:c7:f4:f8:eb:14:7d:e5:2e:94:a9:17:64:
fa:0d:87:39:b7:f2:6f:7f:27:b7:ee:b0:37:6b:89:
33:40:d7:3a:a3:cb:be:82:b7:90:7c:c7:70:57:38:
73:85:7d:77:99:d4:7d:6a:7a:41:43:ab:2b:38:55:
a4:48:23:b9:0b:c5:06:05:9b:a6:45:56:09:16:c1:
7f:37:e9:22:74:1d:aa:e2:5e:f0:18:ad:b3:25:f1:
fc:37:53:f9:63:c1:e3:4e:d0:1e:9d:4d:3f:72:eb:
5e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8A:2B:45:3F:BE:24:5C:87:C3:17:35:A2:ED:36:DF:9B:4A:2E:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E88BE0886D2C11F09E69BC7CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.34.0/24
Signature Algorithm: sha256WithRSAEncryption
32:79:86:42:a8:95:53:36:23:f8:0c:4a:4c:37:0c:e2:63:7b:
2b:4c:e1:fb:60:bc:da:e8:68:c7:3d:50:c9:79:b9:9c:ec:1d:
0d:bf:a0:04:f7:75:3c:ce:ab:a6:0a:dd:8e:a3:14:cb:a5:74:
cc:d3:68:39:d4:a6:3a:13:61:26:da:6a:50:e9:77:a0:8e:c8:
2d:de:27:4e:e3:e2:54:df:b7:50:14:75:f4:f7:ab:ee:89:f9:
b6:37:6b:4b:20:f0:b2:51:2a:00:b1:b6:c8:11:8a:44:77:34:
1c:86:9d:bb:48:47:30:a8:2d:df:5b:be:84:d5:82:b2:4e:1a:
f6:f8:a2:58:dd:f2:01:a4:ff:1c:3f:0b:09:83:2c:81:f9:68:
41:d9:4e:fb:65:f6:a4:42:dd:0b:bc:4e:71:fa:40:c8:f7:47:
e9:4b:dc:17:4f:28:b9:a6:5c:ef:46:2f:2e:d5:6e:13:39:17:
50:22:69:79:d5:8d:94:1e:55:53:b6:fb:eb:3f:d7:3c:b8:f3:
b1:fe:9d:90:d8:25:75:55:96:b4:72:54:2d:96:d0:f5:cf:79:
ef:70:37:35:16:81:b9:87:84:b3:8f:6c:6d:43:e3:70:5c:83:
27:aa:7f:30:da:62:08:8c:e8:76:84:d6:cc:4a:1c:af:81:f4:
ea:e8:0f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:17:33 2025 by rpki-client