Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01F475F051A111F0A12678C3DAE4EC9C.roa
File: 01F475F051A111F0A12678C3DAE4EC9C.roa (raw, json)
Hash identifier: iPeozEZTkMj3gvbMcsgIViAujX8Xra1xSeWpvenwv+A=
Subject key identifier: 0E:1A:DF:5A:56:FE:F5:E0:AC:20:F5:1C:66:67:95:2C:25:04:E6:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015ED0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01F475F051A111F0A12678C3DAE4EC9C.roa
Signing time: Wed 25 Jun 2025 08:47:22 +0000
ROA not before: Wed 25 Jun 2025 08:47:16 +0000
ROA not after: Thu 25 Sep 2025 08:47:16 +0000
asID: 142286
IP address blocks: 156.225.132.0/22 maxlen: 24
156.225.136.0/21 maxlen: 24
156.225.144.0/20 maxlen: 24
156.226.24.0/21 maxlen: 24
156.244.64.0/18 maxlen: 24
156.250.4.0/22 maxlen: 24
156.250.8.0/21 maxlen: 24
156.250.16.0/20 maxlen: 24
156.250.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Jul 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89808 (0x15ed0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 25 08:47:16 2025 GMT
Not After : Sep 25 08:47:16 2025 GMT
Subject: CN=685bb799-686c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:91:ad:a9:aa:0b:a4:28:f8:65:77:29:b7:09:
4d:85:76:d5:90:fc:78:4c:14:b8:98:c0:f7:34:02:
6a:d1:a2:a5:17:0e:19:e1:eb:66:29:89:3a:91:65:
14:68:26:23:2f:35:b7:60:e4:e3:9b:e7:ae:fe:df:
19:a4:da:d3:a0:ec:fd:fa:5a:be:10:63:b3:01:ed:
6f:01:e6:df:90:f1:3b:8c:83:3a:95:35:8e:2a:c8:
23:7e:aa:45:6f:29:32:ba:09:e5:d7:6f:4d:46:57:
9d:48:a1:f6:63:08:0b:e2:96:41:40:8e:21:8a:2a:
9a:63:80:ab:ed:00:67:55:48:29:df:07:0c:d3:45:
6d:e7:49:91:45:df:40:71:b9:b6:5f:43:7d:af:c1:
09:41:81:d8:59:f2:a0:87:a7:6c:96:02:f4:bd:1f:
74:1c:7a:bb:2c:2f:2a:89:0b:78:4a:5c:9b:f9:f3:
f7:37:74:65:e2:a3:50:8a:11:3b:f3:10:25:d7:4c:
18:66:e3:2f:71:45:ab:db:4e:53:3b:15:03:47:c4:
f5:c9:37:e6:33:69:34:73:f3:85:41:17:da:0c:df:
5c:fe:01:d9:3f:55:a7:b9:4f:c0:6d:36:9d:c7:08:
b9:f7:33:6c:d6:3a:17:1b:19:a0:b0:08:a9:a2:80:
3e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1A:DF:5A:56:FE:F5:E0:AC:20:F5:1C:66:67:95:2C:25:04:E6:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01F475F051A111F0A12678C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.132.0-156.225.159.255
156.226.24.0/21
156.244.64.0/18
156.250.4.0-156.250.31.255
156.250.64.0/18
Signature Algorithm: sha256WithRSAEncryption
63:85:24:f2:47:52:a6:a7:c1:f1:32:e4:19:1d:58:10:16:44:
35:b9:5b:b6:9d:ff:62:21:3e:62:55:e7:7c:24:66:64:42:ba:
ba:be:7a:71:6d:b3:32:82:11:7b:4c:22:27:2c:76:d1:fe:17:
c1:01:99:a9:98:2c:a5:ee:69:1a:58:76:ac:9f:37:a6:bc:2c:
46:4a:5d:8b:d7:62:ea:f2:0d:76:ba:f7:0f:af:28:0a:2e:d8:
6c:6b:c4:ac:26:27:3c:84:28:74:12:c6:44:9b:30:26:73:fc:
b5:12:36:f6:53:23:41:fa:b6:86:31:c2:78:8f:bb:03:c7:ea:
fe:c9:95:46:a8:97:c8:e8:0e:28:a3:0b:83:ae:a2:95:23:67:
2a:f2:d7:6d:1c:2a:cd:7d:30:02:1c:eb:e6:73:5b:93:ba:a2:
9b:9d:89:57:a6:13:08:d8:4c:a6:8a:d1:fc:48:cc:0e:20:a8:
f6:77:29:3a:d4:d3:12:85:17:20:f4:01:60:92:0f:08:d2:d0:
92:6f:b3:54:01:e3:8b:53:d2:79:11:2b:34:33:c0:de:fc:06:
3a:fe:78:6f:12:ce:3d:79:ae:c0:53:f9:8e:09:96:c1:e2:e0:
11:32:75:40:2f:e9:31:22:54:7d:0d:1b:e3:e4:e2:1e:be:25:
07:a2:b1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 21:03:15 2025 by rpki-client