Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04DD2742490111F0BDA2689ADAE4EC9C.roa
File: 04DD2742490111F0BDA2689ADAE4EC9C.roa (raw, json)
Hash identifier: b7T3zK1QRZVjEvlxbsFZMLlUqt7JFWpxuvzFm8vIJIk=
Subject key identifier: CA:FB:4F:D7:3A:BB:DA:5A:FE:D8:83:90:9D:1B:4B:B1:4A:66:2B:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015BDD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04DD2742490111F0BDA2689ADAE4EC9C.roa
Signing time: Sat 14 Jun 2025 09:21:58 +0000
ROA not before: Sat 14 Jun 2025 09:21:52 +0000
ROA not after: Sat 06 Sep 2025 09:21:52 +0000
asID: 135377
IP address blocks: 156.229.18.0/24 maxlen: 24
156.229.19.0/24 maxlen: 24
156.229.20.0/24 maxlen: 24
156.229.21.0/24 maxlen: 24
156.229.22.0/24 maxlen: 24
156.229.23.0/24 maxlen: 24
156.229.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89053 (0x15bdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 14 09:21:52 2025 GMT
Not After : Sep 6 09:21:52 2025 GMT
Subject: CN=684d3f36-1842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:29:78:12:64:0d:31:2e:cc:f0:05:fb:6d:
ab:3e:3e:69:46:f6:3e:28:63:d8:7b:ca:d7:bc:19:
ef:9a:91:48:b5:64:2c:8e:9d:33:4e:d2:04:79:0e:
e1:b0:33:87:7b:e6:f1:a2:d7:86:fd:1d:9d:27:ff:
ae:4b:14:6c:65:71:bf:37:91:29:d1:a2:8b:9c:0c:
1a:5a:12:17:a2:14:e9:3f:80:56:14:89:57:b8:7f:
a4:e4:4c:ef:da:39:15:23:bb:67:15:52:e3:24:61:
cd:9d:4b:ba:08:33:8e:42:2c:2a:01:36:c4:2c:f3:
ae:22:a1:3f:36:a4:b0:80:57:b2:6f:97:d7:ca:11:
13:a9:5f:b6:b3:65:08:3b:5e:20:88:89:38:f0:d3:
d3:6f:68:08:1c:e5:4d:19:5d:ea:7b:6d:b6:8d:19:
67:8d:3c:cc:a0:b3:18:e8:7e:e3:5d:a3:09:66:70:
9f:ef:cb:81:3c:34:a0:ae:64:ef:9e:4c:61:d0:ff:
18:9c:0a:4f:1c:07:73:63:d2:55:b0:03:fe:07:76:
c7:7f:fd:eb:4a:86:6c:00:f2:e4:00:59:ad:29:d8:
b6:5f:13:fe:2f:c1:9b:35:9c:2e:5e:0f:ac:c7:cf:
1b:ee:d7:06:aa:64:cd:eb:4c:4f:93:f8:94:5d:54:
9a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FB:4F:D7:3A:BB:DA:5A:FE:D8:83:90:9D:1B:4B:B1:4A:66:2B:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04DD2742490111F0BDA2689ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.18.0-156.229.25.255
Signature Algorithm: sha256WithRSAEncryption
1e:fc:b0:a6:06:dd:45:93:21:06:6c:d7:9a:92:98:be:11:e4:
64:2c:52:ec:01:79:6c:19:34:c6:b3:77:74:d9:00:7f:97:89:
ca:b5:67:88:59:17:1a:15:4b:dd:40:9d:29:d0:59:64:7b:15:
af:20:6b:b8:c0:54:7a:63:89:c0:4d:02:a8:ab:f7:ee:bd:2b:
03:ca:58:10:96:99:47:1b:ff:54:d4:30:2d:23:e3:16:96:33:
72:ab:33:61:97:b6:f1:f0:34:c6:a3:00:46:a5:56:43:d0:20:
ed:27:85:13:3c:46:6b:3b:c6:77:96:b0:ac:77:c9:dd:47:3a:
d7:1c:3f:06:3c:5d:7f:bc:e5:d3:85:a9:8e:28:04:5a:46:ed:
7d:5d:c9:63:a1:d2:66:2f:96:4a:b8:1d:a6:b0:c3:f4:14:eb:
97:a7:8f:6f:2d:e8:a0:97:88:30:df:aa:a7:ae:ba:64:16:5b:
c9:1c:62:ac:d9:88:fa:27:33:c0:47:03:7f:f9:ed:5f:53:5a:
37:03:1b:b0:ba:30:c3:7c:ad:65:43:06:8a:58:68:63:5d:d4:
9b:50:38:ce:d5:e7:f2:e2:81:11:55:00:07:62:9c:fe:66:dd:
cc:a0:de:2f:f8:12:2d:b4:b6:9a:30:5d:6a:1a:ac:55:a2:7d:
87:20:ac:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 07:29:29 2025 by rpki-client