Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F723F2250F611F09F27EBE8DAE4EC9C.roa
File: 7F723F2250F611F09F27EBE8DAE4EC9C.roa (raw, json)
Hash identifier: y1R14Q1SZ7c/FoFiiGOZQDc4hADTjPaZaquS4fyeF+A=
Subject key identifier: FE:2A:97:C9:DB:6F:EC:63:2D:20:52:75:EE:90:53:C1:6B:C9:AA:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015E72
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F723F2250F611F09F27EBE8DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 12:26:48 +0000
ROA not before: Tue 24 Jun 2025 12:26:43 +0000
ROA not after: Sat 09 Aug 2025 12:26:43 +0000
asID: 138915
IP address blocks: 156.244.8.0/24 maxlen: 24
156.244.9.0/24 maxlen: 24
156.244.10.0/24 maxlen: 24
156.244.11.0/24 maxlen: 24
156.244.12.0/24 maxlen: 24
156.244.13.0/24 maxlen: 24
156.244.14.0/24 maxlen: 24
156.244.15.0/24 maxlen: 24
156.244.61.0/24 maxlen: 24
156.244.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89714 (0x15e72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 12:26:43 2025 GMT
Not After : Aug 9 12:26:43 2025 GMT
Subject: CN=685a9988-5d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:a5:5f:d2:e6:45:f7:8d:5c:af:08:92:fe:
37:0f:32:6b:ed:13:ae:e5:12:c8:fb:2e:c2:60:cd:
79:35:8a:94:81:7e:8e:19:cc:84:5e:cd:aa:6c:28:
d5:97:52:5f:f0:61:0c:28:be:14:6b:7f:dc:39:2d:
5f:9b:1e:a9:0d:bb:6e:f8:cd:3e:f8:b4:37:35:d3:
10:2e:52:cf:46:f8:21:19:b1:f1:07:d6:f6:23:e5:
e7:f9:c6:02:8c:85:d0:1a:9b:a3:7a:b4:c4:c6:66:
4c:3a:ee:3a:4c:45:a4:1d:28:63:71:c1:64:71:41:
39:79:1f:ea:d8:92:da:85:41:17:00:af:55:5c:1c:
d2:ff:e3:49:1a:fc:97:63:4f:d7:30:79:5b:26:99:
e0:d3:f1:a2:3a:e7:b3:bf:7a:62:ae:06:cc:3f:c1:
60:ad:75:3a:2c:6c:18:4e:fc:77:fc:7b:b1:6c:80:
4a:66:e8:81:c8:4d:78:d6:73:21:2c:49:b1:a2:6f:
1e:9d:4b:46:d0:6f:45:d2:8b:b2:d1:47:88:cf:42:
2c:02:b7:45:49:66:66:d8:3d:de:0c:6f:e8:57:6e:
f0:84:f5:95:17:95:aa:aa:e3:46:16:6b:32:68:cb:
65:f5:8c:06:f0:49:49:2e:c2:43:65:d9:84:5a:aa:
e9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2A:97:C9:DB:6F:EC:63:2D:20:52:75:EE:90:53:C1:6B:C9:AA:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F723F2250F611F09F27EBE8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.8.0/21
156.244.61.0-156.244.63.255
Signature Algorithm: sha256WithRSAEncryption
9c:28:ce:9a:3c:31:2a:81:8a:68:97:43:bc:60:5c:5f:bd:36:
14:58:92:42:76:79:2f:87:ff:07:bc:bb:ac:c7:f7:7e:0f:ad:
51:d0:f7:3b:4e:dd:c4:66:d4:ed:1d:9e:c8:0d:98:37:c6:3c:
d7:32:44:88:e1:03:9d:71:37:cd:3c:0f:16:d9:6d:b5:c2:c7:
2a:53:20:f9:ec:81:38:37:ff:92:5d:75:db:73:f2:e7:47:f0:
3b:33:8e:8a:4f:1a:ba:63:3c:c2:c4:12:f5:50:7e:dd:32:6e:
8d:b9:5a:d9:c2:53:a0:a4:cf:dd:b3:4f:dc:b4:25:5f:0a:1a:
cd:93:b6:73:6a:c9:38:87:69:b1:db:b1:08:da:48:4f:5d:58:
ad:03:32:bf:52:e8:a7:63:89:26:a8:79:aa:38:83:9d:7b:33:
72:07:63:ad:0e:b9:d7:89:06:73:83:ea:77:c6:bd:50:82:f4:
ab:2c:71:ce:e5:4e:95:f2:52:1c:9b:09:77:68:6f:58:c8:3f:
7b:7b:60:73:56:e1:95:52:e5:0f:ce:29:53:15:2c:7c:75:82:
97:27:69:02:17:7c:b8:99:63:57:41:e7:4b:92:8a:9b:5f:ba:
41:d2:97:ac:bb:6d:1b:70:ff:c5:02:b9:7c:5e:04:29:ff:d6:
56:62:c0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:55:17 2025 by rpki-client