Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6EEB6ADE7C2011F0924C15EEDAE4EC9C.roa
File: 6EEB6ADE7C2011F0924C15EEDAE4EC9C.roa (raw, json)
Hash identifier: vPY7e88ssraQr0jz3m/7pBbAXaYZJA/Yr/gJ5CM9vkY=
Subject key identifier: 5A:D9:21:2D:D6:A9:CD:8A:7F:CB:EF:92:46:78:26:3B:BC:EE:33:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016BE1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6EEB6ADE7C2011F0924C15EEDAE4EC9C.roa
Signing time: Mon 18 Aug 2025 10:45:19 +0000
ROA not before: Mon 18 Aug 2025 10:45:14 +0000
ROA not after: Fri 03 Oct 2025 10:45:14 +0000
asID: 18013
IP address blocks: 156.234.7.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93153 (0x16be1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 18 10:45:14 2025 GMT
Not After : Oct 3 10:45:14 2025 GMT
Subject: CN=68a3043f-da1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:81:54:49:07:03:ca:2e:6d:78:fa:ee:26:
6c:26:dd:16:b6:90:c7:95:c3:11:f1:09:e4:01:c4:
eb:92:d6:78:9d:25:77:a7:2d:ce:c4:2d:77:e3:fd:
e9:ae:9b:8d:55:aa:11:4b:62:f5:7e:43:27:65:a6:
b1:d7:e4:bf:4a:29:fa:11:9e:ca:9e:d7:c8:cc:6c:
a0:c9:4c:a6:04:6b:a7:dd:28:42:aa:2d:45:81:9b:
8e:54:06:21:a3:5b:39:4a:85:61:eb:05:57:61:f4:
29:d9:8a:7e:24:35:7a:40:e1:e9:d1:f1:20:af:f5:
9b:d4:87:49:81:e1:90:fd:21:50:8b:b3:d4:64:21:
c5:c0:63:d4:21:f2:28:ee:9d:f1:c4:fc:f6:bb:38:
cf:a7:54:74:fe:76:35:eb:32:db:bc:fc:e6:7a:39:
95:23:c4:67:4e:a3:d7:42:7e:b0:5d:69:af:fa:51:
e9:92:e5:13:88:e3:d4:77:a8:20:e8:3c:e7:47:71:
90:a7:ec:b5:24:0b:94:ac:7f:d4:95:7f:dd:2e:36:
70:c7:b2:72:3b:68:a6:0a:85:c8:de:ae:a6:ea:67:
a1:ff:37:bb:78:46:b5:25:d2:4b:63:01:5a:1b:0d:
8e:bf:33:61:53:df:3a:74:13:44:09:c1:43:34:0a:
43:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D9:21:2D:D6:A9:CD:8A:7F:CB:EF:92:46:78:26:3B:BC:EE:33:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6EEB6ADE7C2011F0924C15EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.7.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:62:f2:05:bb:ba:d0:51:a2:f3:10:13:34:84:80:2b:b5:b4:
b1:78:cc:82:f9:9f:c4:7e:f7:6c:33:f4:4f:7f:58:90:82:8f:
48:a2:94:36:df:0d:f3:d2:c3:be:27:a3:8b:62:5f:27:ca:7b:
60:90:8c:70:e5:23:22:45:fa:b2:44:b3:8d:1d:a7:ff:76:64:
24:48:ea:18:1b:4d:6b:03:95:4e:bb:cc:f3:82:41:2b:57:71:
0d:81:2f:0b:76:f1:2d:a4:d7:41:65:9e:44:d6:44:f0:01:7e:
25:f1:e8:58:94:2f:93:68:3d:af:d5:9e:6c:a3:92:98:bd:b2:
4b:9d:a9:2c:cf:a1:d5:83:22:ec:93:30:2d:07:4c:6f:c8:30:
3f:59:27:82:95:28:c8:4b:ff:b4:77:8f:f5:ea:4f:ea:ba:eb:
c0:9d:9d:04:cc:b3:0f:2b:2a:24:20:d0:32:5a:e5:d7:c3:72:
d2:f9:94:0c:9b:4c:9b:1c:fb:7d:df:5f:ed:cd:a9:d4:02:6d:
44:f4:ef:65:ea:45:ce:da:c7:53:05:e1:bb:24:c8:9c:fa:4c:
0f:65:51:ea:f4:93:bc:b9:bb:8c:5e:96:02:a2:15:58:22:44:
a4:e1:58:8e:78:a1:77:cd:96:c2:90:20:04:65:14:fc:48:df:
e6:1b:c2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:00:19 2025 by rpki-client