Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/D405190E46B211F087457489DAE4EC9C.roa
File: D405190E46B211F087457489DAE4EC9C.roa (raw, json)
Hash identifier: T/BvfrnIQtg9KePDSWp8IvCpZ1lehpTwk5onJUMSx/U=
Subject key identifier: 50:3B:70:D6:AE:0D:4C:28:5B:4F:1F:BF:66:06:C2:5A:48:1B:B2:29
Certificate issuer: /CN=F36FC6C8AR/serialNumber=1A8185FCF63D079B206A34A8B99487A59D818E5D
Certificate serial: 0130
Authority key identifier: 1A:81:85:FC:F6:3D:07:9B:20:6A:34:A8:B9:94:87:A5:9D:81:8E:5D
Authority info access: rsync://rpki.afrinic.net/repository/arin/GoGF_PY9B5sgajSouZSHpZ2Bjl0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/D405190E46B211F087457489DAE4EC9C.roa
Signing time: Wed 11 Jun 2025 10:57:13 +0000
ROA not before: Wed 11 Jun 2025 10:57:06 +0000
ROA not after: Thu 11 Jun 2026 10:57:06 +0000
asID: 37680
IP address blocks: 155.93.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/GoGF_PY9B5sgajSouZSHpZ2Bjl0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/GoGF_PY9B5sgajSouZSHpZ2Bjl0.mft
rsync://rpki.afrinic.net/repository/arin/GoGF_PY9B5sgajSouZSHpZ2Bjl0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 304 (0x130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FC6C8AR, serialNumber=1A8185FCF63D079B206A34A8B99487A59D818E5D
Validity
Not Before: Jun 11 10:57:06 2025 GMT
Not After : Jun 11 10:57:06 2026 GMT
Subject: CN=68496109-4b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:25:b6:9e:bf:13:fd:f8:56:4b:09:4c:38:62:
a8:2a:b1:7b:02:a6:67:63:f3:da:9c:af:8c:29:1d:
e0:67:17:b9:5d:14:ad:7d:37:c5:76:bd:6e:45:2a:
77:65:a5:30:d9:84:2b:20:4f:75:c4:8f:05:0c:59:
12:56:16:01:69:89:13:25:eb:1d:46:ca:b0:0e:e9:
a0:03:69:66:09:3b:00:e9:f5:24:30:81:86:2d:b1:
58:63:42:b6:8b:d4:fa:5f:e9:ae:28:90:8f:4d:85:
03:6a:ac:c1:2c:d3:66:28:c5:f9:56:cf:36:f7:52:
27:7b:d1:4f:dd:ef:a6:e4:7e:de:ca:2b:bd:8e:ca:
24:bc:0b:f1:d9:7c:31:d8:cd:4c:9d:dd:93:7d:28:
f3:98:1c:b3:fd:2c:55:a5:d2:c9:95:e1:c9:45:eb:
fb:d4:3d:84:fe:a9:a6:c4:8d:4d:fb:ac:28:31:ec:
26:c6:14:22:db:62:30:69:2f:30:d6:75:35:75:18:
f5:44:f4:02:af:d7:98:d9:09:f4:8c:a3:aa:dd:9f:
76:e0:41:b4:81:1e:fd:a7:cf:73:e1:a4:57:a4:b5:
ed:09:7a:74:ca:a3:92:fe:32:fe:4a:01:8f:a6:34:
1c:12:c7:94:b7:cb:cc:21:bd:dc:b7:4d:fd:24:d0:
27:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3B:70:D6:AE:0D:4C:28:5B:4F:1F:BF:66:06:C2:5A:48:1B:B2:29
X509v3 Authority Key Identifier:
keyid:1A:81:85:FC:F6:3D:07:9B:20:6A:34:A8:B9:94:87:A5:9D:81:8E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/GoGF_PY9B5sgajSouZSHpZ2Bjl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/GoGF_PY9B5sgajSouZSHpZ2Bjl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/D405190E46B211F087457489DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
155.93.201.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:84:78:d4:96:5f:c6:e5:c3:cd:85:24:7e:c1:fe:87:ca:50:
93:46:1a:90:d9:52:b7:61:2f:c4:8c:76:ef:69:0b:6d:28:89:
ed:76:cd:8f:77:b2:b2:de:e4:62:2d:36:3b:0c:2f:3f:9c:d7:
15:80:fb:95:82:4c:a6:b7:98:93:25:58:d6:97:3e:6b:9f:f5:
6b:27:8e:d9:24:5e:17:ad:df:b4:9f:68:59:73:6e:b8:84:ef:
4b:ca:4d:c2:1e:94:24:f5:10:7b:dc:f2:81:87:5d:f0:67:e0:
e8:67:1e:98:80:ff:54:ca:fb:c5:df:ac:29:bd:c7:71:1f:03:
25:17:0a:99:39:0e:5f:81:76:2a:15:91:a7:37:61:3e:9b:10:
93:7f:b3:6e:27:f8:fc:09:90:c3:d6:7e:fb:93:60:ad:07:93:
e1:da:b4:d1:72:47:60:3a:b8:da:9a:01:df:0d:08:01:41:5c:
a2:06:c0:65:1b:4a:1c:fc:89:fd:d9:32:91:ba:3c:c0:e3:c8:
9b:bd:a2:cb:12:99:c5:75:aa:3d:6f:32:5b:92:f0:f0:9b:f2:
4d:b5:13:72:fc:cb:f8:04:0a:16:65:fe:90:83:8a:3f:45:b8:
6c:41:1b:b7:50:7f:f9:f8:fb:b1:bc:ab:5d:83:6d:5a:8c:aa:
8b:cc:30:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:54:29 2025 by rpki-client