Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C326D8C24C5511F09BF93ECFDAE4EC9C.roa
File: C326D8C24C5511F09BF93ECFDAE4EC9C.roa (raw, json)
Hash identifier: nuU5lZzXGun/88t71L7ZWF5TqVhK3qOYHXDvWXKr+rA=
Subject key identifier: 67:7B:83:52:35:04:1D:60:6B:DB:52:41:E7:19:E8:8A:E8:97:28:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015CFD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C326D8C24C5511F09BF93ECFDAE4EC9C.roa
Signing time: Wed 18 Jun 2025 15:06:08 +0000
ROA not before: Wed 18 Jun 2025 15:06:02 +0000
ROA not after: Tue 08 Jul 2025 15:06:02 +0000
asID: 134489
IP address blocks: 156.238.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89341 (0x15cfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 18 15:06:02 2025 GMT
Not After : Jul 8 15:06:02 2025 GMT
Subject: CN=6852d5e0-15cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:83:38:86:99:c4:e6:3f:24:14:38:be:cd:
46:4f:e9:a9:a6:2b:af:da:4c:4c:54:d3:85:43:00:
c7:27:77:03:ad:1e:d8:bf:81:62:55:3b:0d:2f:fa:
bb:65:dd:fe:ec:62:6d:35:0e:07:b0:e5:b5:f2:7c:
b0:ed:56:3d:87:f0:48:a8:bd:be:1a:e0:f8:5d:ed:
30:39:19:9c:1c:c8:c7:6e:33:84:cd:40:4a:02:66:
65:32:f8:7a:71:96:81:1c:5f:4b:65:2b:be:e1:9c:
10:1e:3e:e6:cd:32:54:be:8a:70:42:7b:47:f3:9b:
e6:fe:5e:f6:39:05:58:d3:78:d6:d9:11:bf:fa:c9:
05:fb:ae:c2:e3:8a:e1:44:94:b2:32:4a:70:70:c9:
b2:68:9a:99:43:01:c8:91:f3:63:c1:b3:d9:e5:25:
13:1e:d8:84:30:38:72:38:f9:1f:11:39:0d:fc:33:
00:eb:e3:ad:a5:e1:bd:5f:c2:34:5b:e2:ba:ad:e2:
62:8b:39:4b:df:c7:33:8a:d8:b9:2f:95:bb:21:e5:
6a:ac:f8:13:cd:c9:ba:0d:4f:b7:26:a7:93:3b:14:
0e:f7:25:82:67:6e:bd:2a:b7:e8:aa:33:2e:73:97:
7f:6e:92:8b:dd:d7:f3:a2:38:5f:c7:b5:c6:90:7a:
92:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7B:83:52:35:04:1D:60:6B:DB:52:41:E7:19:E8:8A:E8:97:28:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C326D8C24C5511F09BF93ECFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.86.0/24
Signature Algorithm: sha256WithRSAEncryption
51:0e:4f:d0:ed:2d:4b:58:8b:e7:2d:a9:e9:1d:5d:72:2a:09:
44:00:d6:2c:73:fe:3a:e4:07:5a:90:61:6a:fb:48:d9:75:72:
40:e0:13:47:75:8a:44:9b:a0:c3:28:1d:3b:e7:6c:ec:e5:4a:
b1:b5:4c:55:b9:8f:57:9d:44:2e:84:48:3a:f0:9f:c5:16:eb:
f6:8a:ed:7a:f1:c1:d2:65:25:87:0a:6d:61:4c:1b:60:d4:8c:
62:d1:e2:04:3a:d2:d6:63:11:da:74:69:95:7f:c3:5f:a1:d8:
0a:02:29:8c:a6:2e:b2:0c:5a:97:9a:d0:b1:91:e6:bb:e7:79:
7f:8f:00:2a:b1:c4:7e:8d:e4:2e:e3:3e:f9:03:40:f2:b8:ce:
b5:8c:6a:fe:a5:47:2c:2b:62:29:2b:69:2e:7a:a7:3d:02:5b:
36:b7:b4:88:27:5c:92:ee:b8:6a:14:06:7c:73:ff:28:72:69:
4e:25:9d:83:af:fa:b6:84:34:96:81:67:12:c3:7c:c1:6b:95:
1f:cb:5b:52:3e:30:a9:e3:56:c7:85:df:76:6c:b5:0b:d7:e4:
66:b4:72:b3:5f:9f:fa:d4:33:cd:7c:8b:8d:28:96:ff:bd:80:
61:d2:c7:07:64:0d:d5:b3:9b:99:f5:70:a8:18:a8:77:8e:03:
26:76:3e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:54:10 2025 by rpki-client