Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C69003858BF11F0A90B1592DAE4EC9C.roa
File: 7C69003858BF11F0A90B1592DAE4EC9C.roa (raw, json)
Hash identifier: EylTnf1yoKVwKSCNFTL/z84VNGdT8nxHnQ6x4H7/hKM=
Subject key identifier: 94:B5:30:AC:B2:14:EE:5F:63:45:BB:14:CC:27:AF:8B:E6:1C:9B:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0160CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C69003858BF11F0A90B1592DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 10:13:10 +0000
ROA not before: Fri 04 Jul 2025 10:13:05 +0000
ROA not after: Mon 14 Jul 2025 10:13:05 +0000
asID: 269984
IP address blocks: 156.255.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90317 (0x160cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 10:13:05 2025 GMT
Not After : Jul 14 10:13:05 2025 GMT
Subject: CN=6867a936-90ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e6:b4:be:c8:46:4c:18:b1:ab:2a:43:4c:56:
c8:41:42:98:41:c0:88:2b:61:36:82:54:b4:96:60:
dc:63:8f:a0:aa:be:1a:3e:15:33:4e:99:8e:6d:5f:
fb:21:2c:1e:ef:9e:a8:5b:02:64:9d:68:e5:dd:6c:
75:32:28:36:78:50:0e:8d:b3:96:dd:1b:c6:9a:24:
5e:3f:cd:a3:83:3c:78:1e:ed:c5:32:6e:51:04:06:
d3:a1:db:f6:01:ef:19:62:fe:bd:e7:64:86:b1:40:
db:c9:54:94:7a:07:34:3a:64:a0:b4:e1:b0:59:a9:
51:94:bc:e5:9b:fe:51:ca:da:7d:90:f7:95:7c:70:
3d:52:6e:c3:58:73:05:b8:1a:3a:f5:e0:29:24:cf:
94:e3:ca:df:0d:0d:86:db:c0:58:75:8b:4c:6d:2d:
a5:08:20:17:3c:a0:13:6f:07:56:3c:32:91:43:6c:
ba:11:47:b3:21:21:c9:c1:7d:62:6c:b1:23:1d:11:
a7:4c:78:62:df:d2:eb:56:23:13:8a:9b:ba:a0:0b:
00:8e:2c:17:d3:5f:0f:c0:63:9e:b3:23:b1:c8:58:
0f:ad:98:97:43:b9:45:10:b8:de:b0:66:72:f7:16:
9e:07:f3:51:44:f4:10:f1:89:91:26:ec:11:43:d4:
ae:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B5:30:AC:B2:14:EE:5F:63:45:BB:14:CC:27:AF:8B:E6:1C:9B:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C69003858BF11F0A90B1592DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.128.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:0d:24:87:ea:29:fa:9c:13:5d:82:68:1e:be:90:7b:0e:48:
3d:60:17:e6:52:e2:d8:e1:d0:0c:18:b5:28:b4:69:0f:f6:f3:
e4:ad:af:d2:8e:23:50:3b:19:d7:a0:b4:8b:27:f2:95:b4:e5:
e5:97:a1:06:e5:09:97:cf:41:81:74:17:58:63:d8:24:2b:7f:
cb:d1:37:cc:bb:46:39:89:5d:72:df:94:45:72:72:50:68:ae:
74:12:24:30:49:d3:02:7d:ec:9f:4b:11:c5:f1:41:60:2f:34:
b1:cc:ab:51:17:dd:af:e2:ce:54:08:a0:03:3c:ec:f8:07:6c:
67:02:6a:07:10:d6:0a:60:81:73:3a:6c:1b:97:28:27:f6:0d:
8c:0e:6d:45:2f:fd:95:28:3d:3e:9e:12:ba:9b:75:38:75:6b:
12:ad:16:c0:a7:35:31:89:c7:f4:b0:17:38:a9:72:9f:28:5b:
fa:a2:3e:15:60:10:5b:96:b7:ae:90:a3:dd:56:dc:2f:75:87:
1e:41:d8:bb:c5:72:ae:d8:30:af:5a:12:f8:b4:30:a1:62:65:
c1:e5:7f:ed:4f:21:46:11:e7:22:b3:a8:e9:fa:e9:06:2b:84:
52:7c:3a:02:83:d9:25:39:9f:ce:1e:b7:74:f6:c9:dc:26:97:
5f:08:7d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 17:13:50 2025 by rpki-client