Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B91ED7AE4B3C11F0B92B47A1DAE4EC9C.roa
File: B91ED7AE4B3C11F0B92B47A1DAE4EC9C.roa (raw, json)
Hash identifier: CE9ifqK/dTywB93wBXqMhg9mffizKHdbKSVNOCgSnj0=
Subject key identifier: 2F:91:3D:CB:36:AA:E9:B6:86:5D:8B:B5:C6:94:D0:EA:ED:A4:63:18
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015C78
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B91ED7AE4B3C11F0B92B47A1DAE4EC9C.roa
Signing time: Tue 17 Jun 2025 05:34:23 +0000
ROA not before: Tue 17 Jun 2025 05:34:18 +0000
ROA not after: Mon 07 Jul 2025 05:34:18 +0000
asID: 202656
IP address blocks: 156.246.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89208 (0x15c78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 05:34:18 2025 GMT
Not After : Jul 7 05:34:18 2025 GMT
Subject: CN=6850fe5f-c239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:79:dd:ac:71:63:7e:87:b4:93:55:3a:66:a3:
16:a2:13:92:5c:46:ba:e4:b1:97:70:0f:2b:d3:34:
6d:71:66:2c:54:0e:c1:36:92:da:68:a5:22:13:82:
6d:c1:4f:6b:aa:a3:c0:76:19:60:f0:24:ae:1c:0d:
e5:18:0f:8d:a4:70:af:fd:92:b7:2e:9b:0c:57:99:
c4:ad:97:1c:6d:a3:b3:97:1d:63:25:6a:db:20:c7:
1f:9b:2d:ec:cb:8e:4e:b8:87:1d:48:9c:a7:76:9e:
26:62:9b:6a:ac:f9:a2:e2:41:4e:09:44:ee:bc:ab:
df:12:6b:09:37:24:04:7a:cf:14:38:17:25:5d:ef:
74:00:f7:99:82:51:25:3d:90:f3:2f:84:60:b3:23:
34:2d:85:7e:e7:d1:71:1c:b8:d5:a2:a5:10:47:66:
d4:2d:02:3b:d0:00:2d:53:de:70:aa:97:49:c1:41:
45:0c:31:8b:a5:27:48:8e:c0:ff:cc:f6:de:9c:00:
de:36:44:ed:ef:92:8f:88:db:2a:48:2a:05:f6:5d:
a0:37:f9:14:85:24:82:a5:71:75:5b:f3:ea:bb:38:
08:69:fa:53:74:4c:d5:ca:d3:0c:7f:25:f0:2b:72:
c5:ff:2d:80:1a:9c:21:22:68:d5:d5:40:ab:b9:76:
2f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:91:3D:CB:36:AA:E9:B6:86:5D:8B:B5:C6:94:D0:EA:ED:A4:63:18
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B91ED7AE4B3C11F0B92B47A1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.162.0/24
Signature Algorithm: sha256WithRSAEncryption
96:2e:c8:8f:cb:7a:15:2f:10:2a:6a:ce:83:e4:1b:5a:60:bf:
7f:8b:36:b6:3c:e0:a8:ca:e6:6f:ff:22:df:bc:79:f7:42:e0:
ba:f9:90:3a:a0:d0:3a:a4:61:55:48:10:1f:2a:80:96:d0:ae:
e2:56:34:f3:94:30:dc:e8:b0:a3:f1:3b:53:bd:d2:ed:aa:84:
a0:33:27:58:c8:e1:d0:45:e9:8d:c0:41:28:d4:49:d2:38:af:
aa:c2:01:97:9a:67:09:c6:3b:6d:82:c4:b0:0b:ed:30:40:54:
ae:4e:32:25:38:fa:ff:c6:78:14:a1:d5:e8:41:fd:6b:7b:7f:
35:3d:57:3d:00:a4:e1:ef:06:5e:5e:21:b2:28:54:b5:bc:46:
77:e5:6d:a3:b1:e0:96:84:2a:02:1a:3f:ec:e2:0c:c3:f5:f0:
6f:d7:6a:9c:8b:af:aa:41:fc:8e:ab:6e:e0:0a:44:78:46:a9:
5b:9e:c2:77:73:a1:62:0e:02:6a:c7:1b:82:45:cf:10:30:de:
71:c2:27:47:3c:fa:ea:e3:37:f7:fa:97:19:0a:21:91:a6:cd:
cd:5b:7e:9b:6d:93:2a:5e:c5:5d:da:66:53:40:9c:f9:b0:99:
4f:8a:8f:42:bc:7d:87:e6:c3:bc:4b:fa:ac:c6:fe:66:0c:9b:
50:76:0c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:51:05 2025 by rpki-client