Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5640A68A299F11F0AA8BA1F0DAE4EC9C.roa
File: 5640A68A299F11F0AA8BA1F0DAE4EC9C.roa (raw, json)
Hash identifier: YE8GJNf/RfwaJ9Yu/iQhpnfl6eTHgegR8ul0jW7UOt4=
Subject key identifier: 8C:5C:60:24:EE:50:6A:83:C4:DE:92:88:15:22:5B:35:7F:E5:47:EF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015215
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5640A68A299F11F0AA8BA1F0DAE4EC9C.roa
Signing time: Mon 05 May 2025 10:54:38 +0000
ROA not before: Mon 05 May 2025 10:54:33 +0000
ROA not after: Tue 05 May 2026 10:54:33 +0000
asID: 984
IP address blocks: 156.242.170.0/24 maxlen: 24
156.242.171.0/24 maxlen: 24
156.242.172.0/24 maxlen: 24
156.242.173.0/24 maxlen: 24
156.242.174.0/24 maxlen: 24
156.242.175.0/24 maxlen: 24
156.242.176.0/24 maxlen: 24
156.242.177.0/24 maxlen: 24
156.242.178.0/24 maxlen: 24
156.242.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86549 (0x15215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 5 10:54:33 2025 GMT
Not After : May 5 10:54:33 2026 GMT
Subject: CN=681898ed-72ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a5:b9:e3:50:b0:1d:0f:43:98:bc:07:56:bc:
f6:60:3d:d8:fc:08:c3:22:37:ab:65:bb:f0:c7:2f:
96:83:c4:eb:5d:00:2f:f8:5e:b8:97:d0:ef:c3:7a:
3d:ca:c8:5a:3b:2c:55:53:58:8e:be:33:c6:91:e3:
55:eb:5f:c7:0c:b5:49:a4:00:8f:65:30:05:0f:b2:
3e:c9:75:88:6c:7c:04:9a:46:6e:a6:9f:9f:33:a0:
40:cb:62:7a:64:5f:1c:c2:2d:ff:74:b2:76:d9:9a:
87:f2:3f:60:10:22:0b:43:1c:61:8e:dc:57:cb:93:
d2:a2:6d:1c:53:b3:0d:bb:48:32:50:bf:a6:72:a3:
7d:c2:87:8e:7f:b2:a2:7c:6d:05:cb:6a:15:46:64:
98:19:ae:58:da:ce:65:35:a0:88:83:1f:5f:83:74:
d2:1c:aa:46:80:b8:a3:b6:26:ee:5e:2a:bd:ad:d8:
4e:00:68:f4:e2:1c:6d:6c:71:57:c7:55:b7:c1:1d:
5c:81:cc:6c:54:5b:48:67:89:a3:79:83:45:05:6e:
e6:28:e5:57:b0:49:6d:3e:0d:37:24:b9:c8:0f:9a:
93:c9:8e:b0:de:04:fd:d0:3d:76:db:f9:65:8d:25:
8b:d3:a4:b7:8d:14:fc:83:b5:9f:e7:b4:35:3e:a0:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5C:60:24:EE:50:6A:83:C4:DE:92:88:15:22:5B:35:7F:E5:47:EF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5640A68A299F11F0AA8BA1F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.170.0-156.242.179.255
Signature Algorithm: sha256WithRSAEncryption
0d:4b:c8:b8:6a:8c:d0:fc:79:8d:ec:15:78:3b:17:36:e6:00:
a4:ce:3d:1a:93:ed:52:5b:70:ba:9c:0d:09:43:a3:af:cc:1c:
bf:42:43:69:d4:1e:48:92:75:33:2e:02:b1:cf:8c:bd:d4:18:
d6:ba:d1:e2:5d:89:28:af:af:8d:ed:80:9f:4e:47:b6:df:0f:
a0:fc:a6:da:b8:09:f3:3d:b6:6b:9f:32:51:0e:77:b4:aa:a1:
ca:13:bb:da:80:17:38:d0:75:86:e9:d4:45:4f:27:8f:10:25:
00:8f:4b:89:e1:34:b1:3d:95:9f:98:db:8e:86:30:11:aa:dc:
66:fb:17:5a:3d:b8:2e:dc:31:f4:fe:0e:f4:6d:67:dd:c8:cc:
62:99:29:1d:68:1a:11:f6:d1:b7:ac:6e:0e:2a:92:4d:5c:ee:
e5:1b:9a:65:73:09:ca:ec:13:8a:e4:29:d9:02:27:7e:ff:6a:
ec:90:dd:b2:b9:09:59:c2:7b:39:cf:bb:d8:38:cb:53:48:b8:
2a:f7:90:8e:a9:8e:c4:86:a4:f5:22:7a:ce:cb:56:93:eb:a9:
0a:3f:a0:36:be:d4:b2:7e:ec:fd:c8:3d:42:16:f9:79:2f:6b:
c7:09:a3:72:f3:c7:13:c4:28:06:94:69:2c:0c:28:c3:5d:0f:
67:28:70:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:46:09 2025 by rpki-client