Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A9D92AA25D611F0B8D53A97DAE4EC9C.roa
File: 0A9D92AA25D611F0B8D53A97DAE4EC9C.roa (raw, json)
Hash identifier: EcNNSyn2WddmvpZvtiuUc1F489bXpaZb6BXInhAJs3A=
Subject key identifier: F6:A2:53:64:46:89:E7:3C:86:3C:EC:0C:3C:35:07:33:0A:17:2B:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015081
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A9D92AA25D611F0B8D53A97DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 15:16:08 +0000
ROA not before: Wed 30 Apr 2025 15:16:03 +0000
ROA not after: Sun 02 Apr 2028 15:16:03 +0000
asID: 17561
IP address blocks: 156.239.87.0/24 maxlen: 24
156.239.88.0/24 maxlen: 24
156.239.89.0/24 maxlen: 24
156.239.90.0/24 maxlen: 24
156.239.91.0/24 maxlen: 24
156.239.92.0/24 maxlen: 24
156.239.93.0/24 maxlen: 24
156.239.94.0/24 maxlen: 24
156.239.95.0/24 maxlen: 24
156.239.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 16 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86145 (0x15081)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 15:16:03 2025 GMT
Not After : Apr 2 15:16:03 2028 GMT
Subject: CN=68123eb8-b3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ba:9d:b5:d1:fb:6f:1d:a5:4e:96:db:85:ed:
01:23:4a:51:27:1c:35:a1:d3:7b:d6:9c:00:ae:b5:
af:60:e1:40:e0:ff:8e:16:b1:94:99:b3:ce:27:8b:
d3:1e:7c:51:b1:7c:ea:50:9a:5a:b0:1d:dd:67:58:
b7:23:38:af:b4:d2:87:74:82:a0:29:f1:1d:76:c7:
f9:18:25:ce:81:6a:b8:83:9f:6b:be:f2:b2:47:ed:
a4:ec:ba:06:b5:c2:a5:0c:08:bd:af:fc:de:a8:a1:
b1:f6:1e:4b:b6:2c:d1:c2:40:6b:7c:1f:55:da:55:
43:25:5a:0c:2a:6c:15:b7:1a:f9:43:ea:bf:34:91:
27:69:ac:78:97:e0:14:8b:9a:15:ed:48:d5:bf:02:
59:94:0b:be:28:97:41:ff:4f:b6:a5:9b:2d:96:20:
6f:f9:8a:dd:ff:d5:12:58:2d:50:56:12:b8:e9:7a:
01:07:0b:b5:0a:7f:cd:8b:39:e4:9f:83:61:07:76:
6c:75:3b:d1:3c:b2:57:4d:8d:a6:53:bc:61:89:c8:
3b:f0:0f:af:39:0f:8d:2e:d3:bc:86:ad:5a:52:22:
28:e4:9f:79:4e:63:31:35:c4:f2:63:4e:85:fc:db:
b0:f1:a6:2b:ab:be:d6:2e:cc:17:fa:ab:dd:7e:d8:
77:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A2:53:64:46:89:E7:3C:86:3C:EC:0C:3C:35:07:33:0A:17:2B:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A9D92AA25D611F0B8D53A97DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.87.0-156.239.96.255
Signature Algorithm: sha256WithRSAEncryption
8d:2a:f1:9f:b8:4e:5a:5b:f7:4b:b6:7f:b6:e3:9f:ed:6a:e5:
32:9b:bd:44:3a:43:57:8f:54:43:01:07:db:8e:aa:e5:df:0b:
5d:7a:a3:6a:7e:9d:b3:a0:5c:df:d8:71:f2:f3:b6:20:fa:89:
3a:90:df:42:ce:fa:bf:ec:b4:ea:2a:0e:63:03:2d:29:ba:59:
22:6b:3a:62:81:3b:8a:59:c8:e4:a9:f4:7a:6c:e8:44:4b:ae:
25:a4:3c:9b:3c:d6:78:b1:57:c6:46:e4:b3:48:30:ed:d4:2d:
a1:d5:a0:1c:d0:f0:d4:ef:b4:7f:d0:d2:6d:b3:53:fc:ad:3f:
94:d1:b9:5a:01:8b:cf:b6:86:3c:a1:84:d2:16:a9:84:d1:5a:
24:47:c9:6f:c1:80:92:89:79:b3:64:9c:b2:56:35:a9:cf:04:
e4:02:19:a4:7d:37:8b:52:c8:29:ca:38:c8:70:bd:66:e3:b3:
95:01:a9:24:6d:0a:d2:28:65:a2:43:97:01:d7:60:a5:39:14:
38:5c:3c:73:8d:2d:8f:32:d4:69:6d:68:66:31:28:fe:68:d5:
6c:4b:dc:73:06:8a:8a:7c:85:54:5f:0a:19:cf:00:af:48:29:
8e:9d:15:b2:79:fc:7c:b9:99:fe:c9:8b:82:08:b5:bc:9e:09:
7f:59:d9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:18:43 2025 by rpki-client