Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/695A330A243411F093F2C3A8DAE4EC9C.roa
File: 695A330A243411F093F2C3A8DAE4EC9C.roa (raw, json)
Hash identifier: Z3KLCNpStVebMxKx9B3EWUo6Be2vuQJyT/lsWj3mD5c=
Subject key identifier: A1:85:69:63:AD:E2:11:13:5F:5A:59:2A:67:89:80:DE:56:B3:E7:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014F34
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/695A330A243411F093F2C3A8DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 13:26:38 +0000
ROA not before: Mon 28 Apr 2025 13:26:33 +0000
ROA not after: Sun 01 Jun 2025 13:26:33 +0000
asID: 214016
IP address blocks: 156.225.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85812 (0x14f34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 13:26:33 2025 GMT
Not After : Jun 1 13:26:33 2025 GMT
Subject: CN=680f820e-74bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:66:01:47:8a:cd:93:bf:ca:f1:48:9b:ef:17:
df:13:26:47:86:3c:3f:6a:c8:aa:e5:83:06:1e:9c:
cc:88:4f:32:fe:c1:35:d1:b9:16:f2:ad:c2:c5:cc:
ca:4e:cc:90:40:7c:99:aa:e5:d7:2f:74:4b:71:6c:
9f:7f:4a:82:66:95:43:d1:24:a6:3e:95:94:9e:eb:
a6:2f:7c:7f:f1:7a:d1:8a:1b:44:e9:aa:dd:97:62:
6a:cb:b1:85:2f:19:1f:40:fb:5e:dd:71:cb:18:9a:
10:a7:3b:d0:93:dc:83:84:02:3c:22:18:a2:d0:43:
8e:ca:f8:b7:bb:2c:d7:40:38:6b:37:90:85:cb:eb:
71:a5:87:fa:69:d9:78:21:66:30:6f:17:01:5f:3a:
70:96:ec:9d:8b:b1:bb:98:fc:58:9e:9d:8f:7b:f7:
26:56:c6:25:52:a9:a9:48:9f:d8:30:3a:9a:1c:26:
5d:6d:72:80:8a:24:41:57:f9:bc:6c:4a:c7:84:a2:
b0:b2:85:f2:cf:ed:a9:89:e9:57:a5:ca:6b:98:b2:
7a:94:44:e1:cf:1e:fa:6a:64:4a:c3:62:ca:3b:c9:
ce:4d:a7:38:7e:05:d5:f6:aa:2b:19:63:fb:07:e3:
33:21:e0:be:ed:f9:46:53:f1:47:07:75:47:8c:02:
46:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:85:69:63:AD:E2:11:13:5F:5A:59:2A:67:89:80:DE:56:B3:E7:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/695A330A243411F093F2C3A8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.42.0/24
Signature Algorithm: sha256WithRSAEncryption
54:1f:46:11:7c:7f:87:d8:ba:3e:46:02:a4:65:82:31:e6:90:
84:e4:cf:bf:ce:48:7a:51:38:67:04:89:a6:e0:78:7b:3b:ae:
90:41:4b:fc:99:9b:9c:0d:81:9b:ef:1a:76:4b:ec:c8:72:4f:
42:c3:09:17:58:86:d8:b3:f8:41:7d:40:6d:77:78:04:21:a7:
1c:fd:9e:43:cc:c9:0e:a9:7b:0c:ea:c2:0f:da:b1:c6:4c:0c:
12:1b:f3:43:03:2e:0e:9b:6a:0e:f3:73:65:e9:fc:68:da:d2:
ad:6d:31:7a:14:10:25:c7:14:e0:ba:d3:6e:4b:52:cf:f9:b5:
fd:7a:5a:19:cb:05:e5:24:b7:f8:f6:37:27:e4:63:ce:7f:54:
6f:56:07:21:e9:cf:6e:ad:ea:6c:93:99:26:ce:8b:4e:4e:a5:
ec:55:a3:6e:5f:a8:06:3e:55:fd:7b:29:2f:71:b2:99:4c:fb:
7c:c8:1b:80:49:ad:af:e0:0c:ed:be:fc:b5:2d:5d:f8:37:df:
a0:18:c1:66:1f:66:38:09:0d:1f:66:12:b0:b2:c4:98:70:80:
43:00:89:ee:69:2f:e3:b4:a6:6c:55:6c:e5:09:4c:fa:d0:58:
7f:e5:1d:45:a4:db:90:1f:8f:ea:37:f5:c4:84:ce:18:67:06:
57:95:1b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:48:26 2025 by rpki-client