Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB69D7524C5711F09E9771DDDAE4EC9C.roa
File: DB69D7524C5711F09E9771DDDAE4EC9C.roa (raw, json)
Hash identifier: SJpFl//VILukYn3f/8LbsQBNtQyzxoBpG9wyRz0T1D0=
Subject key identifier: F5:8E:70:35:B9:03:EE:A6:24:16:43:C8:7D:10:89:69:9F:E8:A9:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015D05
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB69D7524C5711F09E9771DDDAE4EC9C.roa
Signing time: Wed 18 Jun 2025 15:21:08 +0000
ROA not before: Wed 18 Jun 2025 15:21:03 +0000
ROA not after: Wed 23 Jul 2025 15:21:03 +0000
asID: 21859
IP address blocks: 156.229.0.0/24 maxlen: 24
156.233.48.0/24 maxlen: 24
156.238.162.0/24 maxlen: 24
156.239.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 00:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89349 (0x15d05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 18 15:21:03 2025 GMT
Not After : Jul 23 15:21:03 2025 GMT
Subject: CN=6852d964-648e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:21:0b:62:10:53:6f:4a:d7:a9:0e:cc:1e:80:
e6:30:8f:b0:10:e1:20:fc:ec:87:8e:52:f4:86:b7:
db:8c:63:16:ad:fb:28:5d:b8:c1:b2:52:dd:92:39:
8a:fb:85:27:fb:84:4d:93:57:02:57:13:5d:5c:ad:
ee:d0:aa:ff:ea:71:ac:72:3d:88:a2:03:15:71:12:
f2:f1:29:30:bd:5f:b3:8d:28:6e:3e:fd:ca:f1:67:
4f:df:77:05:dc:17:31:ed:4c:ef:11:4e:40:50:da:
de:db:90:5d:0b:ed:b8:2f:b0:a1:f3:b0:6a:f8:d0:
4e:b3:4f:14:06:1c:58:2e:e5:58:1e:4f:42:12:82:
30:d5:87:a2:31:09:16:16:1d:d2:2d:24:f3:a6:e5:
56:69:e0:1f:37:8e:0c:d5:4a:92:83:5f:39:26:86:
b7:86:5e:15:6c:87:13:94:10:23:0d:14:a9:0c:20:
70:bc:b4:23:af:59:81:f6:f6:12:4b:12:a1:7a:6e:
4b:d2:f1:35:b6:eb:5e:8a:7c:1e:dd:80:1c:d1:33:
f8:ad:d7:29:d6:3a:9f:31:60:8b:63:39:c1:6f:cc:
5b:d1:61:9b:62:ae:23:b8:50:fa:85:bd:9e:99:3c:
1a:7b:60:96:ec:de:fe:b0:3b:f0:e1:f2:fd:20:96:
cc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8E:70:35:B9:03:EE:A6:24:16:43:C8:7D:10:89:69:9F:E8:A9:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB69D7524C5711F09E9771DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.0.0/24
156.233.48.0/24
156.238.162.0/24
156.239.134.0/24
Signature Algorithm: sha256WithRSAEncryption
64:f9:14:b2:59:e8:96:6c:1d:2c:0c:e0:31:af:ea:45:8d:cc:
ce:8d:ff:64:34:1f:53:32:84:68:06:22:23:7e:d6:3c:55:9e:
13:e3:fc:62:fa:92:22:9d:07:24:62:e7:2f:05:64:7f:1e:73:
a0:37:94:03:d9:2a:fe:f8:2e:06:50:53:2f:9d:6a:c4:a3:04:
ad:74:29:ae:45:e7:25:1a:7f:e5:c0:1f:b6:c6:bc:60:f1:34:
ea:15:2e:36:83:f4:38:f2:6f:64:da:5d:98:72:4b:bc:ac:bd:
d4:49:96:a7:e8:fa:19:24:a1:85:7f:89:db:6a:c1:df:25:82:
4b:52:36:62:71:ae:5f:6f:6a:87:67:78:33:e8:c3:8b:83:78:
8e:e6:29:e1:fb:5b:91:03:72:7a:01:15:bd:58:63:18:86:1c:
b5:66:9b:0d:60:c6:21:3c:75:ac:51:9a:cb:3b:96:66:53:46:
18:dd:f7:8e:b9:bd:f8:15:e7:c8:59:b7:cb:db:86:d5:79:b8:
9b:cf:70:37:c6:7b:22:50:a1:87:18:7e:96:b3:e4:1f:53:b5:
ca:99:d3:38:6d:04:57:9d:0a:f0:3d:f0:5f:43:b8:a4:c0:7d:
42:e8:77:9e:e0:d6:3c:d6:4c:cf:52:f2:81:c1:e4:a8:f1:55:
1f:39:1c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:10:21 2025 by rpki-client