Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F2D01244B8711F0BD724B7EDAE4EC9C.roa
File: 2F2D01244B8711F0BD724B7EDAE4EC9C.roa (raw, json)
Hash identifier: FUNNRRgQFxHpf3gqkN3BVg4dG+Y59apqZJsX27r+Uns=
Subject key identifier: 2A:B1:AB:32:97:59:AB:56:D5:8F:87:32:92:85:AE:BC:F7:17:81:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015CB6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F2D01244B8711F0BD724B7EDAE4EC9C.roa
Signing time: Tue 17 Jun 2025 14:27:25 +0000
ROA not before: Tue 17 Jun 2025 14:27:18 +0000
ROA not after: Mon 04 Aug 2025 14:27:18 +0000
asID: 398823
IP address blocks: 156.227.160.0/20 maxlen: 24
156.227.176.0/20 maxlen: 24
156.229.176.0/20 maxlen: 24
156.229.192.0/19 maxlen: 24
156.236.192.0/18 maxlen: 24
156.252.96.0/19 maxlen: 24
156.252.144.0/20 maxlen: 24
156.252.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 00:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89270 (0x15cb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 14:27:18 2025 GMT
Not After : Aug 4 14:27:18 2025 GMT
Subject: CN=68517b4d-593f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:e4:42:c5:5c:e2:62:5f:ad:a2:14:fa:36:
2d:d3:10:66:df:3e:b3:7c:ba:ba:9e:c2:84:2b:2a:
20:0f:b3:00:a0:b4:de:0b:15:1d:6a:20:d6:bb:95:
8f:18:6f:84:65:1c:64:c6:e5:fa:d6:d4:ec:10:bd:
70:f0:a1:ea:dd:68:5d:e8:7f:b4:27:35:51:0a:5a:
4e:4d:c2:de:d5:6d:4d:01:35:42:73:12:94:0e:2e:
88:b7:8f:2b:86:cc:90:b2:cf:3a:eb:26:cc:ff:54:
75:68:41:82:a2:8a:40:a6:fc:6e:42:1c:cc:0b:46:
31:68:90:68:ae:24:1b:18:b1:0e:97:e9:0e:6f:4a:
ec:56:ab:5a:1f:d1:f6:a0:35:4b:1d:c4:ee:3e:1e:
76:9d:e1:86:e4:43:50:d9:85:28:72:c7:99:90:7f:
24:5b:5c:a5:07:35:40:f0:cd:62:d9:34:06:18:3e:
72:1f:0b:0e:f6:89:66:b5:3a:3a:93:59:e2:3b:08:
5e:f9:e8:9e:29:04:1f:8a:b7:43:91:18:0a:a0:60:
47:50:a8:46:f6:81:22:9a:2b:da:4d:57:d7:35:91:
82:32:ee:86:a0:2c:ff:f6:22:dd:85:1b:fb:4b:24:
68:09:3e:98:c6:65:7f:90:cb:c3:4e:86:5c:23:61:
a5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B1:AB:32:97:59:AB:56:D5:8F:87:32:92:85:AE:BC:F7:17:81:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F2D01244B8711F0BD724B7EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.160.0/19
156.229.176.0-156.229.223.255
156.236.192.0/18
156.252.96.0/19
156.252.144.0-156.252.175.255
Signature Algorithm: sha256WithRSAEncryption
1d:ca:b3:b0:d1:87:22:9b:fc:ed:58:4f:c9:75:c6:55:ad:b1:
a0:1c:37:e8:87:a8:30:d7:38:57:6e:7d:05:7d:64:0e:5b:ac:
c9:a3:0d:43:db:50:57:c2:d7:ea:72:f8:c5:0d:c7:f2:00:93:
f4:39:4a:19:e1:de:ce:4b:3c:74:48:02:83:5a:42:6c:57:b1:
38:da:c6:dc:39:40:b2:4b:28:43:34:87:97:74:6b:82:e4:cd:
1e:f0:f9:c0:3c:d1:63:af:5e:00:1d:9f:d3:34:d0:24:20:db:
b8:e6:b0:1e:18:2e:f7:64:b8:7a:20:97:04:f6:83:3f:f9:3c:
1f:b1:f4:e2:01:dc:7a:53:9c:61:72:80:a9:60:ce:af:af:11:
05:3d:54:47:06:86:55:b0:a0:94:2e:d6:43:cf:39:25:dc:c8:
13:82:a2:23:d2:3b:80:40:5b:bf:e3:fc:c1:5d:cc:c6:98:a7:
8f:77:70:08:4a:ef:3e:72:23:27:73:fb:ce:be:2c:ac:4b:b7:
02:b8:5a:5e:9e:cf:62:99:c0:f3:49:a0:e8:0c:4b:68:e1:a7:
43:91:5c:cf:70:3c:fd:06:96:fb:eb:88:5e:fe:75:3b:68:a1:
90:b2:c2:dd:73:db:9d:de:1c:4c:03:c3:42:fe:64:e8:1e:ec:
64:29:02:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:03:50 2025 by rpki-client