Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D446040E242111F0B85117ADDAE4EC9C.roa
File: D446040E242111F0B85117ADDAE4EC9C.roa (raw, json)
Hash identifier: Vkmv1HgFcrm1OGIQTXzTPMI9mbhdhrXY5PN3SUSr5tY=
Subject key identifier: 76:2D:2E:2D:F8:C7:50:02:32:6F:51:19:3B:EA:AE:28:D2:52:90:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014EF8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D446040E242111F0B85117ADDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 11:13:37 +0000
ROA not before: Mon 28 Apr 2025 11:13:32 +0000
ROA not after: Fri 13 Mar 2026 11:13:32 +0000
asID: 984
IP address blocks: 156.231.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85752 (0x14ef8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 11:13:32 2025 GMT
Not After : Mar 13 11:13:32 2026 GMT
Subject: CN=680f62e0-4ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a4:de:e1:0a:9d:c6:f0:c1:11:b2:71:8e:b8:
6d:cc:64:16:c2:3b:5b:86:58:1b:1b:00:c6:4f:3d:
34:52:a1:a6:60:fd:ef:2a:88:94:00:2d:a4:dd:9d:
2c:ea:b3:88:52:51:81:48:d7:9d:b9:7b:7b:83:04:
4e:86:78:e0:95:e5:ad:eb:2c:a2:4f:b6:cb:25:e7:
34:e5:eb:44:a7:51:ef:28:62:73:98:66:da:5e:dc:
12:95:d0:df:85:e0:8e:bb:7b:aa:67:12:f8:e3:d5:
a5:8a:fb:c9:cf:3c:78:95:ed:23:56:3a:a6:9d:28:
d5:1b:33:4d:d3:ff:02:56:0c:d7:e6:62:68:27:83:
2f:a5:3c:bd:47:e4:49:91:fb:a9:7c:e5:24:bb:2a:
74:dc:9f:30:af:5e:e3:45:fb:04:9a:eb:fa:35:d2:
91:05:1e:b6:4f:e1:65:c4:e0:6a:c5:40:3b:f7:81:
c2:f7:02:f7:f0:ba:b6:33:68:40:e5:f5:54:77:d0:
e5:f0:26:db:64:6f:68:c5:a6:e1:7f:96:f5:bc:29:
54:9c:33:c0:28:b9:5f:cd:9a:08:66:11:f4:0c:13:
c4:63:d3:c2:82:01:9f:13:76:37:2f:d5:af:60:f5:
bd:04:1e:e8:bf:ba:ff:68:38:f5:02:58:5d:0b:98:
e6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2D:2E:2D:F8:C7:50:02:32:6F:51:19:3B:EA:AE:28:D2:52:90:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D446040E242111F0B85117ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.182.0/24
Signature Algorithm: sha256WithRSAEncryption
44:87:49:6a:c2:d4:e6:1b:06:60:76:91:ca:f5:bf:0d:a0:03:
c8:85:f0:21:d4:f8:a7:ac:64:a4:e7:0d:6d:76:17:b4:17:67:
5a:9b:1f:34:c8:34:f3:57:8e:9f:8a:3c:51:4c:3a:ba:ae:92:
db:eb:23:57:7e:6e:25:e6:98:c7:6b:3e:0d:90:0b:11:01:42:
2d:42:a4:78:17:4c:62:22:c9:b3:65:45:37:d6:f5:da:84:33:
d0:e6:eb:d2:1f:05:17:6f:f9:8e:71:96:01:6f:b9:8c:9c:41:
ad:3e:fd:83:99:a8:f4:60:24:bc:c6:a2:38:fa:f0:fd:7e:2a:
de:23:90:1f:ab:32:7d:c2:32:0f:1f:64:52:34:80:d5:7c:75:
32:ac:cf:b3:0b:0e:40:4c:e9:6b:14:6f:1a:8b:09:50:83:83:
95:bd:c2:e3:da:33:ba:30:db:8b:48:bc:67:dc:a1:35:9e:44:
2b:35:3b:13:64:ad:3b:7d:12:72:20:1f:c0:bc:c8:63:72:61:
3b:c4:fe:ef:be:2a:5a:b7:4f:0d:1f:0a:40:87:87:8d:68:42:
43:5e:a2:e7:93:90:ad:28:0d:e3:5b:7e:bb:a7:23:06:11:52:
80:14:c3:f5:60:dd:26:f4:d5:95:a6:0b:dd:66:0d:2c:6e:15:
f6:b7:55:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:25:50 2025 by rpki-client