Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB3A8F94525B11F0A4AABB87DAE4EC9C.roa
File: BB3A8F94525B11F0A4AABB87DAE4EC9C.roa (raw, json)
Hash identifier: vZEnr6KUdNTNvx93XtnGMRq9F13QIxw+bEmn5yMH5dU=
Subject key identifier: C2:3E:3E:66:23:DF:F1:BF:07:C0:72:DF:4F:63:38:AA:D0:3A:1D:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015ED9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB3A8F94525B11F0A4AABB87DAE4EC9C.roa
Signing time: Thu 26 Jun 2025 07:03:59 +0000
ROA not before: Thu 26 Jun 2025 07:03:54 +0000
ROA not after: Sat 02 Aug 2025 07:03:54 +0000
asID: 57043
IP address blocks: 156.253.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89817 (0x15ed9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 07:03:54 2025 GMT
Not After : Aug 2 07:03:54 2025 GMT
Subject: CN=685cf0df-80a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1c:b3:6a:9d:c8:b5:14:f4:f7:01:f1:2e:72:
1a:87:3a:99:07:8b:55:55:98:d2:76:02:5b:45:68:
a0:05:ea:8c:e5:b1:c7:31:22:f4:76:67:71:44:51:
61:61:2c:a3:f8:69:83:ef:ca:c9:fa:60:da:9a:52:
60:f5:f5:42:92:a6:8d:25:d2:83:20:36:27:9d:05:
01:14:c8:4a:a9:c2:fa:da:97:7f:44:12:1b:4f:21:
a9:5c:be:e2:d2:b6:52:60:d3:3d:7f:82:67:54:60:
47:ea:98:f0:d7:39:8d:88:bb:12:a4:4f:30:13:f1:
45:b5:82:a7:bd:a4:59:db:02:24:75:03:97:aa:f2:
e9:dd:9e:2d:8b:bf:1d:8c:c4:0e:c9:b5:f8:da:28:
a7:b9:2e:48:bf:cd:20:d8:73:aa:36:30:b1:00:27:
d5:c3:94:93:6c:d7:c8:d0:71:a7:50:07:ea:93:00:
b7:56:01:83:7e:84:73:7d:ba:48:72:7b:1a:73:7e:
c1:cf:1d:46:fc:c7:48:76:47:58:92:92:64:31:09:
3c:23:df:7f:46:dc:b7:72:25:ad:b2:0d:33:ff:98:
56:88:d7:bf:d0:23:b6:4c:da:f9:88:52:3f:3b:fb:
97:74:c4:6f:08:b4:47:5b:f4:08:78:bc:0f:5c:9d:
1c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3E:3E:66:23:DF:F1:BF:07:C0:72:DF:4F:63:38:AA:D0:3A:1D:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB3A8F94525B11F0A4AABB87DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.1.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:a3:d8:5d:f5:b3:95:cd:89:d0:68:7a:b9:30:97:62:ae:ff:
0f:88:48:8b:62:74:e2:d9:6e:54:aa:91:b2:36:17:7a:56:96:
25:d2:df:67:2a:f5:9f:11:af:e4:10:9d:c7:dd:32:ad:2d:90:
07:de:c7:5c:69:0b:94:f2:18:19:62:fb:ce:0c:99:3e:40:97:
74:27:88:fe:74:48:56:31:a3:bb:3b:3e:98:4e:3f:7b:25:36:
fb:f5:57:41:59:d4:5e:a2:d6:50:6a:27:80:0a:3f:9f:31:9d:
ee:07:8c:1d:7a:9e:47:31:b2:86:65:2d:ae:eb:98:69:f8:cc:
75:3e:17:da:fe:2d:55:ad:f6:01:17:3f:be:58:b7:ff:c9:51:
61:e4:ff:8d:a3:03:0c:79:ef:a5:f8:3a:80:df:30:95:4c:de:
37:c0:82:1f:00:7b:50:f4:48:0b:a0:ac:da:67:33:53:9d:d0:
7d:98:fb:f9:60:40:a3:47:14:b5:c9:c2:28:a3:2d:9f:4b:11:
0d:14:c3:a9:2b:98:ae:70:79:24:8b:2a:56:07:13:67:0f:13:
20:bb:c3:8b:12:bd:cb:f2:bc:27:cb:07:a4:87:fd:7d:0b:57:
b3:72:d9:91:e4:4f:ff:6c:aa:ae:d9:e9:5b:93:02:c0:f5:26:
e4:59:96:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:04:40 2025 by rpki-client