Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/341451AE4C4C11F0ACC5E393DAE4EC9C.roa
File: 341451AE4C4C11F0ACC5E393DAE4EC9C.roa (raw, json)
Hash identifier: EivRfNuZTVJbP2p6k55LSQ+udxoy7l7rMzDiHWytk/A=
Subject key identifier: 6E:B3:21:7D:A1:2F:DB:07:1A:DB:EA:6C:54:AC:B6:84:62:82:AB:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015CDC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/341451AE4C4C11F0ACC5E393DAE4EC9C.roa
Signing time: Wed 18 Jun 2025 13:57:43 +0000
ROA not before: Wed 18 Jun 2025 13:57:38 +0000
ROA not after: Thu 24 Jul 2025 13:57:38 +0000
asID: 8796
IP address blocks: 156.239.24.0/21 maxlen: 24
156.239.32.0/20 maxlen: 24
156.239.48.0/22 maxlen: 24
156.239.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89308 (0x15cdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 18 13:57:38 2025 GMT
Not After : Jul 24 13:57:38 2025 GMT
Subject: CN=6852c5d7-7a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ee:c7:63:0f:07:12:73:d9:ab:48:55:f6:0c:
96:18:63:37:f7:9f:95:6f:b6:45:b5:8e:59:fb:ae:
dd:5d:40:38:6b:91:5b:37:46:a0:59:df:d2:72:b9:
5b:f3:a1:ef:e1:8d:6b:28:9d:31:60:23:c5:93:a5:
9a:77:fc:36:0e:82:a2:a1:0d:70:6c:22:ec:92:92:
de:3f:93:5a:30:0c:2b:93:0f:09:4e:59:d5:2a:f8:
a5:2f:fa:49:3c:d4:58:d0:ba:28:bf:ea:ee:1e:38:
45:5c:48:44:4c:62:8e:c7:4e:88:e9:95:f8:32:4f:
2f:a7:09:ac:bd:f8:6a:6b:4b:10:34:00:4a:26:79:
b1:6b:a1:3b:84:1a:c0:43:a9:a6:28:e3:f7:c5:9a:
25:ab:2e:5b:8d:30:21:ba:8c:59:7a:fd:2f:b5:ce:
ec:44:77:fa:1c:d3:56:e1:1a:11:f4:09:19:c3:ae:
34:25:fa:72:83:cb:0a:85:01:3b:59:81:e6:23:1e:
ff:58:a1:85:7e:c8:3b:ec:a5:bf:ea:0f:94:b0:0f:
dc:9c:71:7a:04:a5:34:08:19:88:be:79:74:5a:bb:
06:3d:3b:de:39:b0:5a:ac:e3:da:6f:95:b5:f8:98:
14:8e:64:7e:2d:73:41:8a:7b:97:b8:5d:94:c7:be:
96:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B3:21:7D:A1:2F:DB:07:1A:DB:EA:6C:54:AC:B6:84:62:82:AB:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/341451AE4C4C11F0ACC5E393DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.24.0-156.239.53.255
Signature Algorithm: sha256WithRSAEncryption
18:c9:2e:67:29:2c:98:c0:57:ff:de:4f:ca:3b:64:2c:a5:03:
10:a3:db:72:36:3e:05:e6:78:6c:b2:b7:d5:0a:0a:17:fb:5f:
31:ae:2b:78:ca:f3:97:74:d3:90:22:5c:a0:f9:39:76:dc:52:
66:6f:46:af:e4:06:f1:0e:53:80:cf:3d:cd:d1:5d:18:2a:f1:
33:cb:63:c6:40:19:71:3b:18:08:5b:03:31:bb:d9:2c:c7:db:
bd:0b:0f:90:a0:89:3d:26:65:e9:75:2b:84:9d:68:a4:66:26:
93:42:9a:03:01:cb:2d:10:e6:80:2b:a8:60:0e:1f:9c:92:04:
b2:ab:3c:ca:fc:ef:e4:bd:ad:19:23:9b:78:2b:ee:cd:38:b9:
aa:55:bf:21:7a:85:da:e3:75:fa:70:b1:07:5d:54:b8:ea:62:
fa:13:57:57:3b:7a:fc:5c:0d:fc:78:13:4c:e5:81:a3:f1:bb:
87:2b:50:b0:3a:45:5f:49:dd:3c:ad:f8:49:09:c7:b6:29:81:
8b:8d:19:37:2f:ee:e8:fb:75:45:f3:cc:be:74:d8:b8:5e:f4:
ba:d0:3b:1f:30:a0:93:36:7e:29:16:00:60:de:4e:dd:ac:73:
f2:4d:e0:43:d6:ad:8a:00:bb:f0:d4:2d:ec:94:0f:3b:13:92:
a3:ba:69:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:48:25 2025 by rpki-client