Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89193B3A513B11F0B2A532A3DAE4EC9C.roa
File: 89193B3A513B11F0B2A532A3DAE4EC9C.roa (raw, json)
Hash identifier: HwhXa9SQwwaFv/0zD+M9ArNU6BNpW0nE7I8N6uyDVHs=
Subject key identifier: CD:F6:61:AD:4E:0F:4A:4D:72:B6:24:79:5B:1C:2C:C9:84:A7:B7:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015E9E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89193B3A513B11F0B2A532A3DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 20:41:00 +0000
ROA not before: Tue 24 Jun 2025 20:40:55 +0000
ROA not after: Sat 09 Aug 2025 20:40:55 +0000
asID: 55320
IP address blocks: 156.244.23.0/24 maxlen: 24
156.244.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89758 (0x15e9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 20:40:55 2025 GMT
Not After : Aug 9 20:40:55 2025 GMT
Subject: CN=685b0d5c-32cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d7:aa:1a:e2:50:ba:80:d9:54:ca:29:82:07:
92:fc:8d:7c:5d:7e:28:87:ed:e1:d8:de:56:de:f7:
cb:40:99:81:81:0a:7a:9a:56:66:dc:38:66:24:5a:
66:d8:87:b3:d2:88:06:1e:1b:84:0b:a3:75:f9:7b:
59:77:86:91:23:7d:c5:25:aa:17:40:17:0d:80:57:
eb:d3:36:34:c6:f8:23:ef:73:d2:17:bd:25:18:4e:
18:33:2e:3f:42:81:e4:3f:5f:34:b1:a0:e3:a1:7f:
72:15:86:da:e8:01:59:b1:62:e2:8e:e7:9c:e3:bb:
11:6b:68:c2:b4:7a:df:6a:85:f0:7a:90:b8:05:81:
eb:f3:01:42:c8:68:c6:7a:14:7c:17:7a:20:cc:70:
dd:7f:1f:99:41:e5:f2:dc:a6:35:3e:6f:29:50:8a:
bc:28:51:ff:cc:25:a1:e4:52:e0:4f:96:11:dc:03:
8f:70:ea:7c:6c:35:83:b6:b4:69:b4:bb:ab:c9:75:
e2:37:5d:18:d3:22:fd:18:2c:47:19:7e:34:c3:f6:
27:9d:2b:ad:b5:a3:ac:d7:1e:83:85:60:04:16:d2:
9f:c7:3f:e8:e6:32:87:aa:a1:e4:63:84:81:5f:0c:
fe:f6:c0:55:79:a2:ae:f1:41:5d:0a:0b:95:1f:2d:
ee:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F6:61:AD:4E:0F:4A:4D:72:B6:24:79:5B:1C:2C:C9:84:A7:B7:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89193B3A513B11F0B2A532A3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.23.0-156.244.24.255
Signature Algorithm: sha256WithRSAEncryption
62:d2:9f:93:57:d3:40:58:e5:75:1f:5f:24:1a:35:1b:2e:cb:
e0:b1:5a:95:09:c6:98:a7:5e:85:66:ec:af:58:a5:e1:db:c9:
0d:06:73:8b:ed:27:dd:30:f4:d2:ea:55:f9:e7:c1:cd:08:4a:
77:88:a4:d9:b1:54:80:bd:1d:78:44:bb:e8:c8:da:33:9b:db:
d7:1e:fd:a0:19:bd:42:5b:e8:d9:23:cb:f7:3b:34:70:24:37:
c4:ad:e6:78:8c:62:64:9b:8e:c7:2e:0d:55:00:56:f7:52:fa:
34:9a:8a:a9:cc:23:0d:e9:1c:6c:81:71:66:d2:ad:db:d8:2d:
f3:cf:16:6e:d4:1f:28:c5:1b:18:32:2c:3f:69:67:0c:3c:4c:
a6:d3:0e:b1:fb:5c:4c:12:c1:03:09:bd:7c:3c:17:8c:13:83:
02:e8:bb:16:50:30:b4:57:34:79:c2:8e:1a:93:2e:e4:a7:24:
c6:ce:39:45:95:e4:91:ac:6f:3b:1e:df:38:32:b7:91:1f:a3:
3a:fc:dc:97:96:e1:b0:2f:2c:8d:4b:84:dd:d8:04:96:ed:11:
96:be:e5:17:0a:4b:3f:3a:97:b5:68:4a:a6:af:c3:7e:53:c4:
d1:50:ee:45:38:21:46:f9:4d:de:1a:b1:74:06:28:16:ab:7d:
88:2a:f0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 00:54:02 2025 by rpki-client