Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB2368F23F9511F081DDBBCADAE4EC9C.roa
File: AB2368F23F9511F081DDBBCADAE4EC9C.roa (raw, json)
Hash identifier: I7tz2L701v1ff+BBCvaxhSWLecsp91QvgAB3D4nVXek=
Subject key identifier: F2:35:BA:83:8E:72:BC:DC:3D:47:69:82:E5:64:7D:51:F4:A1:8E:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01596D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB2368F23F9511F081DDBBCADAE4EC9C.roa
Signing time: Mon 02 Jun 2025 09:40:51 +0000
ROA not before: Mon 02 Jun 2025 09:40:46 +0000
ROA not after: Fri 11 Jul 2025 09:40:46 +0000
asID: 29802
IP address blocks: 156.238.117.0/24 maxlen: 24
156.239.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88429 (0x1596d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 2 09:40:46 2025 GMT
Not After : Jul 11 09:40:46 2025 GMT
Subject: CN=683d71a2-aee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:69:42:74:2e:b5:ec:03:c2:92:47:8a:a0:
4d:38:7d:62:de:ed:90:46:28:93:49:68:76:72:fe:
6a:f5:a3:ee:e5:2e:7d:20:90:94:c6:90:a2:1d:91:
9b:0e:fc:8f:90:47:3b:6c:0c:99:20:ba:79:34:7f:
71:34:4b:3a:33:37:1e:8f:83:89:5f:94:45:24:e8:
f6:6d:16:37:31:b0:b8:5a:a1:a7:71:10:61:40:db:
f7:b4:df:11:6f:b9:65:1b:13:a8:d0:90:77:9a:89:
a4:f9:a4:19:f4:1b:84:ce:ed:e5:c9:58:92:49:72:
fc:c6:a4:45:7b:7d:8b:fc:0e:cd:ff:13:9e:17:ac:
e6:fa:4b:10:cf:f8:07:ac:f3:9f:0a:a1:c1:40:63:
18:12:91:11:af:d2:23:b2:ec:9a:b3:9d:72:d1:99:
c9:43:a8:d5:46:04:f9:21:73:e2:3c:67:b3:12:14:
a8:da:5f:2c:4b:f7:21:9f:e9:e8:98:73:4d:bc:06:
fa:bc:5b:8b:c9:a9:42:3e:21:f2:b8:c6:7a:52:8a:
97:64:32:23:4d:ae:43:40:41:0f:5f:f4:f2:2d:18:
b2:18:01:f6:01:d4:ee:1a:29:fc:44:37:01:39:d6:
c6:8b:51:2c:43:96:48:00:fa:8f:ce:cd:d5:08:7a:
1f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:35:BA:83:8E:72:BC:DC:3D:47:69:82:E5:64:7D:51:F4:A1:8E:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB2368F23F9511F081DDBBCADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.117.0/24
156.239.54.0/24
Signature Algorithm: sha256WithRSAEncryption
97:25:19:d4:fc:4f:aa:d3:eb:3d:4b:13:24:37:71:01:65:04:
4b:90:08:c2:a8:8b:69:c8:b0:cf:c7:6d:08:14:5a:27:bc:1b:
54:56:ed:6d:c2:cc:6b:b5:ff:cf:51:2f:53:23:44:6b:7d:4a:
dd:13:a7:3e:42:93:fd:50:c8:76:f1:3e:17:27:56:b5:a3:69:
74:14:28:fb:6e:ac:0c:33:36:0f:95:91:95:e7:37:a4:0e:6e:
42:ec:37:e4:8e:50:58:ef:cc:1a:d5:80:ff:82:5f:3c:40:0e:
79:99:11:71:4f:23:ab:d6:29:90:22:ad:80:32:68:e7:a0:f4:
a3:4c:18:d9:ed:a8:53:f7:97:e6:84:6e:01:11:27:d8:d8:51:
09:27:07:7f:db:b4:5f:f3:12:f8:54:37:ba:02:b2:d8:71:b9:
62:ff:2c:0b:03:47:81:bd:50:64:a5:1e:d5:72:2d:27:7b:ca:
51:54:23:13:7b:16:16:50:60:09:43:5e:ee:0f:cd:bd:8b:34:
7c:a0:0c:f7:15:6f:59:22:16:66:b7:b1:d9:6a:b7:5e:d8:df:
66:b2:42:35:ec:c1:53:6e:37:99:d8:e1:dd:b6:3b:32:46:c1:
8b:75:41:41:38:f3:92:27:39:5d:9d:0f:da:9d:3d:fe:7f:82:
09:90:32:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:54:21 2025 by rpki-client