Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6340E29A542011F0B008FD7EDAE4EC9C.roa
File: 6340E29A542011F0B008FD7EDAE4EC9C.roa (raw, json)
Hash identifier: PBtBNyxw0f66VkXByeMzzLT17rNlz5/xccOO1A7x6UE=
Subject key identifier: 58:AC:F8:23:8F:B1:91:B1:F9:D3:BA:B3:A9:CA:AC:A2:50:4E:9E:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F1D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6340E29A542011F0B008FD7EDAE4EC9C.roa
Signing time: Sat 28 Jun 2025 13:04:13 +0000
ROA not before: Sat 28 Jun 2025 13:04:08 +0000
ROA not after: Fri 01 Aug 2025 13:04:08 +0000
asID: 32043
IP address blocks: 156.228.5.0/24 maxlen: 24
156.228.7.0/24 maxlen: 24
156.228.9.0/24 maxlen: 24
156.228.16.0/23 maxlen: 24
156.228.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89885 (0x15f1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 13:04:08 2025 GMT
Not After : Aug 1 13:04:08 2025 GMT
Subject: CN=685fe84d-5a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:be:5a:12:68:81:43:f2:b9:78:e8:a5:a9:ee:
fa:5a:c1:d8:75:61:e7:b7:db:3d:4f:0f:42:17:c6:
7e:b7:fd:ef:d0:d1:e2:33:43:b2:14:85:df:f3:72:
32:81:e8:2c:7f:95:95:25:0f:23:c2:d6:1a:6e:20:
96:82:14:14:a5:06:cf:fb:20:af:42:0c:09:95:bb:
7d:a0:7d:15:f2:fb:2f:e0:1d:a8:af:9a:92:4b:db:
2e:a8:db:8c:72:02:06:aa:87:d9:66:b4:57:64:8f:
30:05:6a:2e:32:5f:52:6a:9a:f5:ba:2a:a8:89:4a:
25:d7:75:43:64:f5:32:b4:e3:6c:5e:06:71:ec:88:
d3:42:97:1c:af:2e:13:48:5a:e2:11:44:75:f8:40:
52:f1:c1:50:8e:f9:81:21:67:53:7c:82:21:6d:89:
ed:bb:d3:68:8b:db:71:fa:69:56:9d:bc:ae:d4:ce:
c7:39:fd:48:ed:a7:33:dd:88:41:b9:d1:c7:97:6c:
cc:b5:a1:d8:16:1b:23:9e:4b:2f:6d:8a:1b:30:64:
20:51:31:e3:4c:ea:42:37:d0:3c:82:03:6d:16:fb:
79:89:5c:b6:b4:33:3f:d8:cd:d2:46:d0:f5:ab:35:
50:4f:2a:0e:ff:e7:4d:8a:24:55:45:6a:37:6b:3f:
bb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AC:F8:23:8F:B1:91:B1:F9:D3:BA:B3:A9:CA:AC:A2:50:4E:9E:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6340E29A542011F0B008FD7EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.5.0/24
156.228.7.0/24
156.228.9.0/24
156.228.16.0/23
156.228.48.0/21
Signature Algorithm: sha256WithRSAEncryption
59:87:de:cf:c8:7d:24:e5:a0:18:72:eb:a7:d7:ac:77:00:cf:
b8:60:95:25:62:67:36:ce:f3:0a:90:71:74:1e:14:7d:ae:1b:
25:f5:56:d4:e5:26:5e:3d:45:96:4b:d2:1b:d5:f0:5e:3c:e1:
cb:92:d1:f0:5f:37:07:48:28:c4:9c:81:f4:25:94:c9:8e:c7:
16:03:2d:68:61:6a:04:b6:7e:df:0a:3c:9e:f8:d0:46:a9:01:
5b:27:0e:6d:96:92:ce:76:47:e6:c9:a7:cb:27:a7:88:88:3a:
93:6f:41:3c:3f:7f:44:6f:2b:27:31:e9:82:dc:fa:5a:84:3d:
f2:2c:b2:33:a7:de:dd:d7:ad:94:8a:e1:59:7f:d6:a3:a4:0a:
bb:b1:ae:d3:5a:5b:b3:3f:22:fa:db:76:f7:c3:93:01:5e:1c:
39:40:13:84:cc:a9:97:c8:00:af:c2:38:f7:2b:ac:af:67:43:
b8:50:a8:8d:02:d0:31:36:91:09:ee:f5:a7:fc:39:c8:e1:5b:
1c:14:df:17:35:55:58:a0:4c:db:55:26:bb:d8:60:46:f7:da:
90:cd:72:87:09:76:94:49:b4:88:db:5d:8f:b0:1f:6c:8f:27:
64:c1:81:e0:42:a8:79:20:d4:cf:23:25:cc:fa:32:0c:97:0e:
6d:0f:4a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:20:43 2025 by rpki-client