Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/233B238C45D311F0891E1BDBDAE4EC9C.roa
File: 233B238C45D311F0891E1BDBDAE4EC9C.roa (raw, json)
Hash identifier: YHieq6FIY7W4OT79z4vTzFxWlq84n80r8bpAN59YQmE=
Subject key identifier: 14:FB:70:93:B3:95:50:B8:FF:CC:B3:5D:F1:6D:90:6C:11:A0:E8:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015AA6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/233B238C45D311F0891E1BDBDAE4EC9C.roa
Signing time: Tue 10 Jun 2025 08:15:58 +0000
ROA not before: Tue 10 Jun 2025 08:15:54 +0000
ROA not after: Tue 12 Aug 2025 08:15:54 +0000
asID: 153706
IP address blocks: 156.254.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88742 (0x15aa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 08:15:54 2025 GMT
Not After : Aug 12 08:15:54 2025 GMT
Subject: CN=6847e9be-c042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:58:df:61:0c:18:b5:02:02:06:eb:7f:2c:75:
4c:a1:41:13:17:3a:a5:16:da:3c:9f:0a:2b:f9:db:
bf:68:a3:3e:5d:00:7a:39:2a:b6:01:fd:48:30:7b:
26:83:92:e5:2a:b5:f5:62:04:09:18:83:9c:00:ce:
d6:08:ee:39:cc:40:2c:17:a9:d0:89:17:80:97:2b:
6e:db:7d:d6:7c:4f:da:a4:00:3a:8a:88:9e:a1:9e:
bc:23:8f:bb:6f:25:0e:42:86:20:2f:3f:52:c1:5a:
85:41:d2:b6:3b:78:54:b9:a0:f6:a0:68:c1:b3:0a:
14:87:9f:be:78:a9:08:25:bc:b9:a4:9f:cd:50:38:
12:1b:49:b0:ea:af:ea:1c:aa:a5:a5:2d:83:b8:bf:
d3:20:f8:10:82:da:44:bb:fe:f8:17:1a:6f:54:1f:
7e:da:da:21:9d:76:e9:37:22:e1:bd:01:76:b2:62:
23:a9:54:56:de:d3:6d:c6:6a:61:96:25:39:42:13:
15:72:9b:f8:24:3f:6a:fd:cd:20:2e:43:71:b0:2b:
ae:bd:0f:f0:50:1d:46:f5:e5:25:2e:80:22:76:3e:
fd:a9:56:a1:c7:1d:a1:2f:22:7c:a6:e1:33:5f:09:
df:22:b3:2c:d8:3b:d0:c3:18:ac:6f:95:a1:b1:85:
89:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FB:70:93:B3:95:50:B8:FF:CC:B3:5D:F1:6D:90:6C:11:A0:E8:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/233B238C45D311F0891E1BDBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.20.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:05:28:11:cd:94:e5:45:db:fb:1d:1a:84:41:9b:8f:ec:1b:
7f:83:b7:6b:7c:62:b7:90:eb:8d:00:53:b9:f4:01:88:af:f3:
2d:db:ae:37:67:61:1c:0e:30:e4:09:56:5a:04:01:ee:bd:cf:
ec:f1:c0:42:a2:0e:d8:d4:00:bd:08:88:57:02:5e:b7:14:92:
51:1c:cd:8e:4d:87:92:f8:7b:9b:8c:3e:7b:6b:52:6c:32:f6:
17:fe:f2:4a:48:a3:d9:a5:7c:3a:16:e7:a0:dc:9f:0b:64:ae:
c2:9d:40:c7:58:e5:9f:f3:47:a5:ba:3b:67:92:c9:cf:4f:98:
a6:a3:2e:b1:15:89:c2:dc:ce:32:90:be:30:0a:6b:cc:d8:60:
56:6f:1c:c7:7f:69:c6:28:5e:66:10:d3:f2:0d:c2:3d:17:f4:
c4:18:b9:30:4a:64:9a:e8:39:c3:75:c8:31:9c:c3:4b:72:42:
bf:da:c7:ac:e5:6d:49:56:37:ac:39:b8:95:00:3d:69:eb:bd:
91:29:14:9c:21:d0:0e:f3:40:26:27:88:c2:87:66:87:57:05:
74:b3:40:88:ca:68:be:3b:ff:8f:6c:45:cd:4e:fd:e3:c8:8d:
d7:df:0e:87:5f:94:8c:ed:1b:02:4d:26:26:8e:10:52:7a:1d:
69:ed:f4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:40:16 2025 by rpki-client