Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B32366650F411F0AB3FFCDBDAE4EC9C.roa
File: 8B32366650F411F0AB3FFCDBDAE4EC9C.roa (raw, json)
Hash identifier: rfxqBB+hJvCRdP4Cu2ZVXbm/MQLsNN8WlHugA8QbNm4=
Subject key identifier: 53:08:D6:89:DD:C5:61:DA:BB:CB:81:EC:F4:30:DA:A0:B1:12:37:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015E6E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B32366650F411F0AB3FFCDBDAE4EC9C.roa
Signing time: Tue 24 Jun 2025 12:12:49 +0000
ROA not before: Tue 24 Jun 2025 12:12:44 +0000
ROA not after: Sat 09 Aug 2025 12:12:44 +0000
asID: 138915
IP address blocks: 156.244.26.0/24 maxlen: 24
156.244.27.0/24 maxlen: 24
156.244.28.0/24 maxlen: 24
156.244.29.0/24 maxlen: 24
156.244.30.0/24 maxlen: 24
156.244.31.0/24 maxlen: 24
156.244.32.0/24 maxlen: 24
156.244.33.0/24 maxlen: 24
156.244.34.0/24 maxlen: 24
156.244.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89710 (0x15e6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 12:12:44 2025 GMT
Not After : Aug 9 12:12:44 2025 GMT
Subject: CN=685a9641-9b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9e:75:19:31:02:a4:fc:f2:8f:82:82:f4:e0:
7e:16:1d:27:c3:d1:48:6a:89:8d:82:26:ec:52:e0:
11:f0:c4:e5:ca:95:e0:3c:ab:24:d6:52:11:cc:68:
11:c6:5d:e6:e3:4c:70:5b:2a:97:7b:a5:20:18:a3:
64:4b:62:2a:49:e1:06:b1:97:1e:ca:b5:8e:b5:a2:
1c:6c:10:ca:c1:45:72:f3:1b:d8:7a:ea:c4:8e:0e:
2a:10:cd:cd:e6:06:0c:dc:f6:92:ae:48:3a:a5:ee:
bd:af:92:b9:f1:1b:86:56:e8:09:ec:6b:0c:22:59:
a5:28:c4:6d:61:00:ed:53:32:01:e1:20:51:8e:9e:
57:bb:3c:3d:ec:6e:8f:69:1a:21:6b:a9:e8:d2:d7:
3c:55:f3:b5:82:f5:80:52:60:6d:49:5f:cf:43:be:
1d:c5:57:1d:6a:5f:3d:0b:00:6f:73:a8:b6:b8:ff:
f1:50:8f:42:4c:c7:b0:c8:68:2c:50:bf:ae:1a:2e:
16:e6:88:6f:46:da:ed:c0:0d:07:4d:f9:bd:bd:ad:
2c:b3:57:5a:f1:60:ca:2b:42:61:fe:37:ef:f2:61:
e4:b6:da:20:ce:d4:66:48:27:0a:8b:ae:58:05:ee:
d0:0c:07:1a:6d:b4:0b:04:bc:8e:54:87:46:cc:44:
bd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:08:D6:89:DD:C5:61:DA:BB:CB:81:EC:F4:30:DA:A0:B1:12:37:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B32366650F411F0AB3FFCDBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.26.0-156.244.35.255
Signature Algorithm: sha256WithRSAEncryption
43:37:a0:e9:6a:be:47:7d:de:e9:19:2a:40:5e:56:26:d8:ff:
7c:55:ce:c0:4b:9a:7f:51:07:2e:d5:c1:80:40:d4:bd:8a:9d:
a0:75:28:3d:4f:00:32:93:85:c4:36:9d:4e:4b:02:16:90:13:
b6:21:ea:45:ed:86:10:86:65:a7:fe:e5:c5:b6:a2:e8:80:89:
38:a6:0d:0d:70:6a:5a:6b:ea:35:a4:1e:17:eb:19:70:54:c5:
3d:23:f2:f1:4f:db:e6:31:d2:d2:ff:b8:9a:86:39:dd:74:3d:
7b:48:88:b5:9b:4d:0c:84:14:14:1b:14:80:f5:7c:cf:1b:cf:
35:fd:c6:fe:26:35:49:8e:c2:8c:44:5a:4d:9d:66:68:2c:de:
4e:fb:11:3e:da:90:f2:c0:3e:1d:96:40:98:ae:26:08:9f:11:
66:04:41:11:6e:10:f7:fa:3c:c4:73:d3:22:22:b6:5c:ae:f6:
db:4a:b6:00:43:c9:57:74:d3:cb:d9:3d:fc:f3:85:9b:c4:90:
4d:b5:ba:79:ec:84:9f:18:da:d5:22:e0:6f:2f:e1:e5:83:97:
be:4e:fd:6a:dc:a2:16:39:dc:a4:8a:91:56:11:09:ac:37:bc:
3a:d8:8d:89:f1:b3:41:9a:df:07:1a:6d:21:70:35:b7:9f:7c:
23:ed:82:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:06:49 2025 by rpki-client