Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFCB7F82485411F094A4BAB7DAE4EC9C.roa
File: DFCB7F82485411F094A4BAB7DAE4EC9C.roa (raw, json)
Hash identifier: zlJRMT1ACgRLh4s34zpbNT5XdvvdNDkrb99Tv8Yak5E=
Subject key identifier: 3B:30:1F:1D:CA:BE:EF:71:54:BF:A2:EB:42:E8:88:BF:08:29:0B:10
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015BCC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFCB7F82485411F094A4BAB7DAE4EC9C.roa
Signing time: Fri 13 Jun 2025 12:49:42 +0000
ROA not before: Fri 13 Jun 2025 12:49:37 +0000
ROA not after: Tue 05 Aug 2025 12:49:37 +0000
asID: 214590
IP address blocks: 156.225.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89036 (0x15bcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 13 12:49:37 2025 GMT
Not After : Aug 5 12:49:37 2025 GMT
Subject: CN=684c1e66-6f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b3:c5:8a:76:ea:f8:3f:ad:48:3b:c8:1d:11:
24:c2:54:29:8b:89:64:fd:1e:9c:41:9b:ae:e8:88:
45:9a:41:b2:9a:cc:e3:e3:1c:07:1a:c5:91:f1:72:
99:78:db:5d:4f:2d:49:12:41:fe:00:ab:7c:8e:32:
0c:2e:2a:14:34:15:aa:cd:41:4d:6e:e3:a3:f0:bf:
34:80:b7:5b:35:0c:f6:c1:b4:64:c9:55:2f:b8:9c:
02:26:bd:29:ef:dd:0a:51:6c:fc:7a:9e:b9:08:b3:
3f:4b:d4:6d:c9:53:1d:9c:a6:dd:e9:75:87:10:07:
91:d8:e8:60:dd:46:93:90:f3:b7:43:3c:c5:d5:7b:
25:3f:bb:ee:2f:58:78:11:dc:28:ed:fe:30:09:52:
44:16:2c:1b:cd:ad:92:87:55:ce:74:71:36:90:fe:
96:53:01:a5:2a:b9:f0:fb:27:5b:26:82:72:e3:b0:
d4:d6:21:8d:cf:67:e3:f7:ac:2b:2c:54:8a:fb:72:
52:95:7a:d8:11:e9:b0:ad:37:4d:cd:3e:10:b2:92:
d8:a9:3c:63:60:cc:3e:4b:0d:6f:ae:cc:3b:4a:1c:
80:29:94:6c:5b:c7:a4:67:5e:5e:60:a2:9d:2c:23:
70:c2:e3:f2:4a:d9:b9:42:29:ff:d4:b8:00:a0:33:
58:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:30:1F:1D:CA:BE:EF:71:54:BF:A2:EB:42:E8:88:BF:08:29:0B:10
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFCB7F82485411F094A4BAB7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.73.0/24
Signature Algorithm: sha256WithRSAEncryption
81:3f:51:d5:d7:1c:d7:ba:fc:1a:f8:a6:d8:c4:13:ae:1a:91:
2f:df:b5:09:59:85:b8:4f:cd:d0:1e:9e:75:ac:a9:47:65:24:
00:74:28:11:1a:7b:51:c3:9e:1c:69:0d:2c:03:d9:f6:0d:9a:
60:a7:34:3a:e0:06:6d:0f:9c:46:26:5f:98:51:e5:5d:d8:0a:
31:df:09:05:8c:e6:91:6f:d2:88:e0:1a:91:b0:0b:18:5a:f8:
37:0f:8d:60:2c:3b:b4:4d:4b:5d:57:a0:9a:e0:14:58:f7:cf:
fd:35:ab:6e:3b:d2:49:1f:cc:3d:f3:4d:28:7e:b0:36:f8:1d:
22:d3:b7:af:b3:4c:29:04:53:19:4e:bf:fc:8e:6c:ba:31:88:
00:43:26:95:ab:b4:e1:91:ac:20:26:9c:7d:dd:b2:35:dc:48:
90:1a:81:64:99:34:6f:6f:d2:41:d6:8c:89:4d:df:1b:57:11:
d9:5b:7e:32:32:5d:2c:41:0f:bc:fe:02:98:dc:b9:a2:9f:3d:
24:f0:f4:ab:7a:9c:1e:20:6a:ca:9c:fc:43:05:b6:2b:c2:36:
ba:cb:8a:3a:3a:8f:ea:88:c6:71:70:34:74:1e:1b:90:34:50:
11:68:b6:c0:27:77:c6:63:29:54:44:4e:29:c1:14:9b:37:80:
66:23:d4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:34:26 2025 by rpki-client