Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B1A53B6533111F0BFD678EEDAE4EC9C.roa
File: 0B1A53B6533111F0BFD678EEDAE4EC9C.roa (raw, json)
Hash identifier: 1ZsdOvhu3v0SexV+fqkdzgsqtnSDHKL1FpCbkZQ4y7Y=
Subject key identifier: BD:75:66:29:42:07:DF:22:EA:29:E6:40:26:6C:C3:F7:A7:D3:79:1F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F0B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B1A53B6533111F0BFD678EEDAE4EC9C.roa
Signing time: Fri 27 Jun 2025 08:30:56 +0000
ROA not before: Fri 27 Jun 2025 08:30:50 +0000
ROA not after: Mon 04 Aug 2025 08:30:50 +0000
asID: 20326
IP address blocks: 156.246.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89867 (0x15f0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 27 08:30:50 2025 GMT
Not After : Aug 4 08:30:50 2025 GMT
Subject: CN=685e56c0-2c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:00:81:23:96:cd:52:b6:58:28:f1:8c:98:d6:
9b:9d:6a:b5:21:dc:9e:10:a4:f3:15:72:7f:3f:a2:
35:a5:bd:e2:96:ff:bc:65:59:a3:fb:bc:1a:22:7c:
5c:fa:25:0d:23:5a:4e:22:ac:69:d1:9b:cb:47:a5:
e8:dc:b4:3f:52:14:f2:c2:98:a2:98:ef:36:f2:ed:
72:f7:90:d3:74:00:dd:10:87:34:b0:83:de:8d:20:
74:b8:92:9c:31:f5:7c:24:da:23:d4:5a:fe:0b:9f:
b9:0b:b0:a5:ce:7e:c9:ad:ef:a8:0b:dd:e4:df:fc:
75:41:f3:2a:9a:72:a0:23:70:62:6e:d7:c0:18:6b:
13:5e:d5:ac:fd:2a:ab:f1:5d:4b:fb:37:af:98:c0:
a6:f7:1a:6f:f8:89:8c:15:37:d5:6e:d7:1a:5e:ef:
c0:18:73:dd:78:f2:59:73:98:ee:4b:c6:d1:72:b5:
89:91:89:32:2e:49:74:6c:e1:4c:06:79:77:19:66:
1c:00:2f:af:4b:44:27:68:87:e4:06:7e:bf:9b:12:
3a:6b:7f:16:37:cf:63:61:c4:43:c3:02:69:0f:a4:
73:84:7e:5e:1a:c2:22:c4:c6:41:25:2c:d2:9e:06:
3d:a0:ac:94:b1:ab:99:f7:b2:dc:6c:d3:a3:ef:57:
cc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:75:66:29:42:07:DF:22:EA:29:E6:40:26:6C:C3:F7:A7:D3:79:1F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B1A53B6533111F0BFD678EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.30.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:92:6c:fd:5b:dd:ad:f1:b6:fa:80:b1:bb:49:3b:44:a1:55:
d2:88:84:47:52:d1:85:ae:a3:c4:06:a8:42:38:85:bc:f6:f6:
b5:40:03:4d:f5:03:f2:f2:79:cf:ff:1b:c7:49:57:8a:6f:8b:
df:ca:77:b6:f3:ba:54:8c:2a:9d:a6:33:22:c7:31:e0:7c:1c:
85:37:96:df:99:32:0b:31:c6:b4:ff:64:db:7b:e7:45:b1:bd:
00:d2:24:e0:81:74:62:c5:ca:2d:db:c3:2a:be:fd:54:32:9c:
95:2e:ec:b5:70:ed:a1:72:1b:17:21:b9:8e:ec:a0:fe:ac:89:
46:c5:4d:e8:2b:13:da:54:2b:a1:13:05:a3:d7:22:b1:e5:27:
11:b9:7c:bf:bf:e6:d9:12:60:ed:73:3b:80:cf:35:0a:b1:6f:
cd:8a:74:d7:fa:25:27:15:bb:42:79:c9:8d:e0:08:66:b2:3f:
3e:58:af:72:bc:ad:44:be:28:76:59:e1:28:e7:d1:66:5a:94:
a2:a0:d2:4a:45:2b:7b:bf:07:a3:20:e4:95:5e:9a:29:1b:08:
a6:f6:70:25:90:1c:c5:a2:3b:f5:58:69:85:55:9a:83:e6:35:
b5:53:cd:1c:c9:da:37:69:68:b0:a9:4a:99:18:49:69:4c:f9:
ad:64:04:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:51:40 2025 by rpki-client