Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85DA793E511311F0905D67A4DAE4EC9C.roa
File: 85DA793E511311F0905D67A4DAE4EC9C.roa (raw, json)
Hash identifier: Uxp6MrwHNDBXfC5Hbj2B1wjMp/Zvo+ABDGSrqrDu8aw=
Subject key identifier: A3:04:8C:4F:87:67:E0:5E:85:F3:CC:AD:B5:76:FF:38:36:AE:64:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015E7E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85DA793E511311F0905D67A4DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 15:54:34 +0000
ROA not before: Tue 24 Jun 2025 15:54:25 +0000
ROA not after: Fri 08 Aug 2025 15:54:25 +0000
asID: 62084
IP address blocks: 156.254.102.0/24 maxlen: 24
156.254.103.0/24 maxlen: 24
156.254.104.0/24 maxlen: 24
156.254.105.0/24 maxlen: 24
156.254.106.0/24 maxlen: 24
156.254.107.0/24 maxlen: 24
156.254.108.0/24 maxlen: 24
156.254.109.0/24 maxlen: 24
156.254.110.0/24 maxlen: 24
156.254.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89726 (0x15e7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 15:54:25 2025 GMT
Not After : Aug 8 15:54:25 2025 GMT
Subject: CN=685aca3a-3826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:dc:8d:5b:21:11:29:85:f0:56:6f:3f:1b:05:
e3:54:fb:b0:0f:ac:74:3e:33:b8:4d:eb:68:9f:e6:
18:7f:a0:25:4b:54:88:f7:cc:cf:05:83:8a:3c:c0:
79:db:e5:5b:58:f2:de:86:00:59:b4:b4:97:a4:c9:
4a:e1:99:19:d0:71:d5:7f:93:32:ee:2c:ce:17:a6:
df:a9:d6:d1:7c:9e:f5:a6:b8:cd:60:c9:b4:fa:9f:
24:fe:e3:6b:b8:55:cb:c5:d6:46:84:f3:cd:63:5a:
e3:a3:57:fe:84:7f:8f:33:a2:02:09:b3:4a:1c:5b:
96:41:18:cc:63:7a:72:de:12:8a:17:8c:df:3b:49:
73:5a:49:bd:f0:b8:18:0c:88:f8:b3:27:b6:f2:88:
2e:74:1f:10:05:a6:6c:66:ab:9b:90:7a:4e:68:96:
42:27:7a:a8:45:b1:60:17:5d:57:f3:d2:22:f1:3a:
36:c4:a4:b3:c3:5f:8c:3e:7c:ac:74:a6:70:6f:2b:
ad:60:4b:27:99:13:5f:82:69:3b:5e:2f:24:4b:ed:
41:af:cc:c6:d3:10:6e:cb:ae:93:b6:ec:74:a9:32:
9a:05:a7:86:23:e3:78:3a:5e:78:cb:a7:30:da:24:
3d:d8:9f:b2:b0:38:58:9c:5a:93:bb:dd:11:c2:eb:
67:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:04:8C:4F:87:67:E0:5E:85:F3:CC:AD:B5:76:FF:38:36:AE:64:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85DA793E511311F0905D67A4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.102.0-156.254.111.255
Signature Algorithm: sha256WithRSAEncryption
86:6b:4f:24:92:5c:8e:5c:5c:0d:5e:6f:88:d4:d8:be:1e:15:
37:ea:39:0c:c5:f2:f0:19:d3:88:ec:94:92:0b:6b:b5:b8:38:
64:83:1f:66:c0:b4:fd:bd:91:73:23:71:80:45:bb:dd:96:4c:
5f:ba:84:0e:da:e3:5a:60:2e:c6:4d:4b:9b:9c:4c:10:66:f4:
cb:8b:c1:02:28:34:c1:de:59:88:ec:e9:e8:e2:68:02:9b:10:
c0:5a:7a:d4:2a:11:d4:1d:12:42:2b:ca:42:ea:82:85:f1:1f:
4c:58:77:08:11:65:03:ba:66:75:36:27:51:f7:b8:a6:be:63:
ca:97:56:95:d0:fa:fc:6c:06:b9:75:cb:71:25:5c:2e:79:78:
f5:4e:3b:43:cb:85:a6:3d:6c:5c:2d:62:9d:fc:dd:41:23:2d:
38:b1:bc:39:79:05:52:a6:6b:77:cb:36:c8:6d:50:97:36:d4:
60:86:1a:1b:f7:03:8d:74:99:11:9b:99:67:01:5c:24:9a:4f:
b6:c6:44:14:63:1f:64:c9:3c:75:23:1c:24:e7:36:78:c7:a9:
af:2d:ee:0d:4d:20:30:21:e2:3a:17:90:c6:1b:c7:27:45:19:
45:31:ed:98:b1:90:b8:4c:9a:ae:4a:87:40:79:32:20:a8:22:
d5:9f:05:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:57:12 2025 by rpki-client