Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CCAC17845FF11F0A844C2F5DAE4EC9C.roa
File: 8CCAC17845FF11F0A844C2F5DAE4EC9C.roa (raw, json)
Hash identifier: zWhGdlQBbl/zqCJiMjsUywP0+hC+QCAVFhzgXN+n6p8=
Subject key identifier: A1:CB:2F:D7:03:6E:4F:4F:E8:79:8C:FC:6A:F4:C3:5F:44:1A:E3:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015AEE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CCAC17845FF11F0A844C2F5DAE4EC9C.roa
Signing time: Tue 10 Jun 2025 13:33:53 +0000
ROA not before: Tue 10 Jun 2025 13:33:45 +0000
ROA not after: Sat 05 Jul 2025 13:33:45 +0000
asID: 214590
IP address blocks: 156.225.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88814 (0x15aee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 13:33:45 2025 GMT
Not After : Jul 5 13:33:45 2025 GMT
Subject: CN=68483441-f9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0f:4d:7c:ab:e4:d4:48:41:19:0e:34:0f:09:
ab:6e:0d:79:b3:85:bd:ea:ca:93:e8:9b:93:da:ef:
62:4f:3a:2a:42:d9:01:4b:82:c8:8f:48:a6:2e:95:
b4:b9:a7:46:b7:48:f1:89:25:6b:29:2c:c9:c4:2c:
49:80:ab:c4:e4:fd:49:94:93:76:9d:ea:f5:b4:19:
d5:7d:40:f2:e1:c6:d5:96:4b:09:9b:03:e5:c8:02:
0a:ca:da:65:58:2a:9c:45:69:8b:32:f7:04:cc:db:
ec:49:25:1a:3b:37:9e:6f:95:c5:95:3f:cd:e7:7e:
1e:6b:a4:aa:58:b1:d4:2a:d7:1e:7e:56:5f:67:34:
3f:ec:5c:ec:c9:f3:24:50:82:9a:91:3c:a8:97:3a:
d1:fa:c2:8b:17:00:1b:6c:40:d2:e9:cb:ba:4e:42:
0c:e0:3a:34:66:db:4f:61:95:f0:08:d5:d5:f6:d4:
d7:73:06:9f:3e:52:6b:9b:37:c7:88:b7:f5:72:c0:
cd:40:07:99:39:fa:8b:67:55:c1:e4:d5:c5:05:ad:
95:ca:18:91:9a:4d:c0:2e:73:1e:c4:51:79:eb:ca:
ab:e9:cd:79:e4:9a:4f:05:57:eb:bf:cb:1c:8e:47:
16:dd:c0:33:ff:a0:b8:06:26:64:55:ea:17:fe:1b:
ee:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CB:2F:D7:03:6E:4F:4F:E8:79:8C:FC:6A:F4:C3:5F:44:1A:E3:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CCAC17845FF11F0A844C2F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.73.0/24
Signature Algorithm: sha256WithRSAEncryption
41:0b:03:eb:4f:7d:0a:21:f2:3b:71:6f:84:3e:8d:06:65:74:
52:10:6b:96:6e:53:79:5a:3a:4d:d6:92:47:2c:23:85:ba:ea:
20:74:da:7f:d5:b7:35:66:18:3b:44:da:2a:75:65:9b:7e:71:
cc:6d:6b:51:24:ad:25:48:c3:f3:30:c3:b8:45:86:aa:1a:04:
0b:c3:36:67:1f:08:05:f0:90:7e:f4:59:62:3e:ae:10:5e:dd:
9b:b4:ef:36:41:e7:82:46:95:4f:02:25:ad:12:00:e2:d9:0f:
d6:e1:8d:49:95:46:f4:4d:63:28:cb:59:ad:ca:65:dd:9b:e3:
64:af:21:ce:de:c3:1d:8c:7c:ab:09:40:a2:03:4a:5b:9a:39:
f7:24:53:5d:05:b2:c8:6d:a1:ed:21:c4:e3:d0:cc:f5:b6:db:
a0:03:4e:2c:8a:c1:a3:19:07:9b:49:25:a7:f6:84:bd:6f:50:
71:f2:63:d7:63:19:66:db:24:9f:25:fc:89:ca:2e:68:11:92:
ba:87:ee:65:64:4e:5b:ed:db:09:39:a7:a2:2f:4c:1e:41:8b:
36:14:b8:c5:37:88:97:88:6d:b3:7a:f5:9c:ec:c2:1a:29:66:
e7:13:05:78:6e:9d:8c:92:79:a1:38:82:66:ec:1d:72:0e:80:
1e:c3:62:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:08:16 2025 by rpki-client