Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E2BFB1C519D11F0A482EBACDAE4EC9C.roa
File: 0E2BFB1C519D11F0A482EBACDAE4EC9C.roa (raw, json)
Hash identifier: uE2rhTQf/nRGlZg7EtX6gZtRynx4lpgqz54LqbrpZCQ=
Subject key identifier: 59:2C:C6:64:2B:7E:F8:27:2A:DB:7E:B7:93:09:4D:C3:94:15:22:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015ECE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E2BFB1C519D11F0A482EBACDAE4EC9C.roa
Signing time: Wed 25 Jun 2025 08:19:04 +0000
ROA not before: Wed 25 Jun 2025 08:18:59 +0000
ROA not after: Wed 30 Jul 2025 08:18:59 +0000
asID: 202656
IP address blocks: 156.236.105.0/24 maxlen: 24
156.236.106.0/24 maxlen: 24
156.236.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89806 (0x15ece)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 25 08:18:59 2025 GMT
Not After : Jul 30 08:18:59 2025 GMT
Subject: CN=685bb0f8-05fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ac:98:2d:9f:d4:46:48:28:02:a6:1f:80:01:
57:bd:b0:86:bb:60:6f:3b:ae:79:e6:01:af:31:62:
e5:88:72:1f:63:9e:e3:a6:ec:b3:ef:9f:1e:8c:95:
b2:66:b8:0f:4e:91:76:fe:bf:8b:de:13:83:53:89:
c0:6d:07:17:5e:3c:3c:95:43:ae:fd:84:dc:f6:2a:
70:2c:1e:9c:0b:20:51:b2:35:31:5a:a2:ff:c8:f4:
38:43:d9:20:78:ed:79:2e:33:2e:7e:d2:30:07:c3:
fa:be:49:d4:5e:8b:12:4e:57:d9:1f:5c:02:ce:89:
89:7c:65:5f:16:03:8e:59:da:c9:9f:c5:b3:71:e1:
1c:0b:7b:d7:b7:cb:b1:5a:c9:ca:d4:05:b6:7a:13:
b0:98:e1:d2:8b:7c:05:f4:fc:b3:48:5f:01:b8:b3:
9b:ae:4e:73:bc:5f:b1:8b:a5:2f:68:cd:63:f1:d0:
fb:43:c1:5c:37:d8:6f:10:0f:53:a0:cb:b3:7f:fe:
60:dd:77:cd:c1:00:49:cd:08:eb:f4:39:03:1c:26:
b9:83:8f:81:f4:57:13:77:16:8f:d2:4e:42:52:a0:
f6:f5:7f:0b:b9:f3:8e:11:cf:71:5a:b3:19:5f:b4:
4b:1e:f7:22:47:f4:91:b7:bc:6e:78:7c:d6:d4:45:
b3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2C:C6:64:2B:7E:F8:27:2A:DB:7E:B7:93:09:4D:C3:94:15:22:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E2BFB1C519D11F0A482EBACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.105.0-156.236.107.255
Signature Algorithm: sha256WithRSAEncryption
73:39:c7:66:b5:9d:53:7a:b0:c0:1c:5e:a5:f5:d2:2d:5f:6a:
4c:07:e4:6f:2e:65:95:96:1f:ad:32:c4:17:22:b2:9c:d7:f7:
f3:45:c5:da:25:de:44:66:7f:bc:ac:2f:08:e6:3e:a8:2e:a8:
f0:94:5e:ea:72:51:38:4a:24:01:63:ae:4c:a7:ea:d8:a6:4a:
7e:0e:da:3b:04:9a:5b:cd:55:2f:de:b0:85:f5:a6:ba:69:48:
a5:0d:e0:95:96:d2:ac:a3:64:8f:2a:40:19:e6:22:96:45:33:
47:de:86:73:a5:2c:86:72:9f:6d:e0:d3:92:1e:2f:aa:34:3b:
dc:fb:52:0b:db:04:40:c6:d6:13:6b:2f:db:66:b4:85:e3:b7:
b3:b4:67:68:b9:4b:a9:6f:81:26:60:38:4f:6c:0a:67:fa:8b:
b6:42:db:e0:e8:7d:7f:fb:b3:6b:a6:d1:f7:33:74:1c:49:f1:
d1:aa:4b:ae:ad:1d:a4:fa:73:e1:98:52:8b:ce:f3:c4:34:55:
1f:d7:ec:8b:cb:39:ee:15:78:31:af:6d:af:a8:bb:3d:50:83:
dd:9f:de:e5:72:9c:85:8b:e3:36:4c:7f:02:06:35:0a:91:de:
c5:8b:45:58:13:c4:cb:0d:a3:5e:fb:cc:5e:19:d1:c1:a2:86:
a7:03:db:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:46:56 2025 by rpki-client