Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEB825DA486311F0AE96A397DAE4EC9C.roa
File: FEB825DA486311F0AE96A397DAE4EC9C.roa (raw, json)
Hash identifier: uRNrpnEKR4IK75u2nvW2+nH0xKKfhI6Fnakf/K3AwbU=
Subject key identifier: 14:6E:B8:26:73:BF:71:C3:63:97:E5:E2:BE:4B:0D:D8:C6:12:ED:67
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015BCE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEB825DA486311F0AE96A397DAE4EC9C.roa
Signing time: Fri 13 Jun 2025 14:37:56 +0000
ROA not before: Fri 13 Jun 2025 14:37:51 +0000
ROA not after: Fri 20 Jun 2025 14:37:51 +0000
asID: 54600
IP address blocks: 156.252.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89038 (0x15bce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 13 14:37:51 2025 GMT
Not After : Jun 20 14:37:51 2025 GMT
Subject: CN=684c37c4-4cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:45:e0:76:ed:65:ae:5f:a5:bf:57:94:6b:bd:
a9:04:57:11:bc:2c:94:83:7a:26:b5:1d:41:1b:fe:
52:5e:ec:67:6f:15:f5:a2:79:06:5f:30:34:ee:4d:
68:82:83:8c:fe:82:08:d4:d0:ab:f7:b8:75:87:fc:
38:51:9b:23:45:b3:ed:e8:ff:67:bf:53:d1:57:6b:
a3:b7:87:9f:1b:71:38:fb:1b:43:07:e3:51:2b:01:
56:5b:8e:12:a2:d9:42:04:e3:98:73:ba:94:f8:77:
5e:18:34:81:25:27:47:9d:9a:d6:e4:4e:bd:36:d6:
4c:24:0c:9a:e5:e4:06:a7:04:cf:dc:71:09:45:c4:
ea:20:64:3e:21:97:53:75:98:ec:34:1f:b0:50:12:
44:b3:45:71:46:dd:2b:3a:8a:c2:13:6e:ab:f9:44:
33:72:e9:06:e4:94:a5:50:eb:c0:f7:98:cd:85:22:
70:df:aa:40:9f:bc:65:c3:21:4c:46:1e:52:55:dd:
1d:81:27:0d:be:68:99:22:84:16:21:81:cb:61:06:
37:a2:5e:24:28:d8:45:48:42:5e:08:f3:9b:f0:d8:
43:44:30:12:37:a9:29:28:e8:9a:99:c8:68:20:ea:
68:2b:90:33:0e:01:a2:b0:20:60:6e:d5:7e:1e:bb:
21:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6E:B8:26:73:BF:71:C3:63:97:E5:E2:BE:4B:0D:D8:C6:12:ED:67
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEB825DA486311F0AE96A397DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.96.0/19
Signature Algorithm: sha256WithRSAEncryption
ae:ff:16:a7:88:6c:5a:e3:ca:77:0d:01:e1:e8:38:67:16:bf:
0c:dd:cd:a0:37:20:5b:19:dd:e1:1b:20:c0:c4:7c:d6:c4:de:
6f:7e:e3:4c:c7:47:d5:d7:a4:c5:db:f8:10:df:a4:e5:54:8e:
e8:0f:6b:a6:5d:02:40:95:f0:c9:d3:b1:a3:c5:12:bf:80:46:
63:47:31:f6:80:be:9b:71:f2:f8:24:8d:8d:e3:e9:07:d7:00:
54:db:12:26:ac:a8:e6:77:71:d7:87:4e:2a:61:47:97:6e:47:
fc:f0:38:b3:01:bf:16:4a:28:b3:09:5c:f7:ff:2f:09:4b:f7:
c9:c3:59:78:54:ed:6c:a0:e7:73:04:38:a7:6d:9c:f2:77:1c:
1b:2c:e4:39:50:69:8e:ca:ce:5c:f4:38:54:fb:02:0f:11:4a:
3b:71:04:b9:24:c9:d4:c5:1f:67:09:99:6e:75:fd:38:23:1a:
1e:15:50:8c:f5:8d:24:51:ca:1b:a0:2b:e0:18:c7:15:4b:da:
9a:85:a2:0d:5c:3c:8e:a1:50:d0:c4:02:94:bc:2b:83:5f:8f:
bf:89:84:ab:bd:c7:0b:ae:f1:0c:dd:fe:2e:c8:55:05:87:36:
bc:96:ed:f0:57:cb:0f:b0:2d:04:a9:6c:68:66:55:87:dd:97:
08:34:13:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:05:17 2025 by rpki-client