Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E31DEC08511711F0BD76FFBEDAE4EC9C.roa
File: E31DEC08511711F0BD76FFBEDAE4EC9C.roa (raw, json)
Hash identifier: oNbmvzyO5m8pkoqQylmjmWELnJuWMIgUwzbqWcr686g=
Subject key identifier: 8A:D9:94:84:70:77:AF:1A:2C:98:EA:E2:66:9A:9E:74:3B:21:49:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015E86
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E31DEC08511711F0BD76FFBEDAE4EC9C.roa
Signing time: Tue 24 Jun 2025 16:25:49 +0000
ROA not before: Tue 24 Jun 2025 16:25:44 +0000
ROA not after: Fri 08 Aug 2025 16:25:44 +0000
asID: 44559
IP address blocks: 156.238.33.0/24 maxlen: 24
156.246.21.0/24 maxlen: 24
156.246.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89734 (0x15e86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 16:25:44 2025 GMT
Not After : Aug 8 16:25:44 2025 GMT
Subject: CN=685ad18d-4d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:25:05:86:ff:a6:67:4f:22:88:43:b2:08:06:
97:42:37:9d:96:00:cb:e7:84:91:5d:6a:f9:5c:b6:
7d:a1:fb:a8:69:08:76:5a:85:94:57:9a:f9:40:a8:
d1:f9:99:6c:bb:d5:4a:72:35:31:ea:e1:0a:e8:b0:
35:30:30:6e:7f:d6:86:92:d2:0d:36:b4:dd:71:23:
e3:d5:1e:0a:14:2f:22:72:91:87:8e:5d:fd:52:5e:
f8:95:04:5e:9f:dc:eb:a9:16:5b:f5:cb:36:5d:ae:
dd:8d:f6:18:d2:84:d9:5b:63:0c:9e:fb:61:9c:75:
18:f2:d0:ca:b0:7c:00:eb:b4:f6:55:4b:db:61:cd:
8a:a1:1c:5d:bf:46:8e:9e:4f:73:eb:5b:ae:ed:7a:
1d:1c:d8:37:76:55:c2:22:c1:75:8d:34:60:21:9e:
74:9f:f6:c3:85:65:2b:80:a9:89:37:90:3c:9d:e0:
a6:01:52:32:59:13:0e:ca:94:42:fe:79:17:e1:91:
f0:9a:fb:fb:5d:93:21:e0:cf:a8:1e:ce:8a:ad:f2:
95:4a:6f:da:d8:65:b7:9a:27:8b:fa:f1:d5:0c:b1:
07:78:63:e7:74:08:ef:04:89:67:5d:80:12:1c:44:
29:1d:8f:33:da:06:3d:ea:89:20:c8:2e:05:57:62:
bb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D9:94:84:70:77:AF:1A:2C:98:EA:E2:66:9A:9E:74:3B:21:49:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E31DEC08511711F0BD76FFBEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.33.0/24
156.246.21.0/24
156.246.31.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:fe:6f:a5:ec:8e:16:7e:03:38:86:6c:2f:ce:ec:c8:17:a6:
73:e3:89:be:b8:78:fd:24:e0:ec:f8:d2:5d:50:e0:a0:b3:f4:
46:d2:67:b1:b7:88:80:ea:38:c0:14:93:b7:54:67:0d:b9:52:
fa:5c:96:6e:dd:f2:64:7e:40:30:e6:b6:0c:8c:b4:ed:1a:8d:
f1:28:d8:3c:86:fd:6f:ca:fa:14:71:a6:10:9b:72:4c:c4:cf:
de:c5:a1:44:5b:a9:72:f3:ab:49:05:ee:77:e0:27:da:93:fa:
34:26:be:6c:92:62:4f:04:a7:2b:c3:97:cd:c6:0d:fb:cb:99:
0a:c4:43:f9:2b:41:7d:db:b9:95:80:ff:e3:8a:de:4f:49:53:
8c:ba:72:27:ba:c8:2e:c0:6a:f2:f7:8a:b6:97:20:41:a2:2b:
70:40:2a:e3:e9:97:55:46:68:47:60:57:d8:55:92:5e:0d:32:
74:df:d5:1b:44:25:5b:6c:76:d9:c8:fc:23:b7:22:c0:a6:79:
86:75:fa:a2:dd:08:83:b5:6e:aa:2d:79:25:4e:ed:2a:c4:e3:
13:fe:0b:89:22:53:fb:98:ef:b0:d6:5d:ad:3c:8e:09:27:ff:
1c:dd:a8:34:89:27:06:cb:8b:28:9e:5c:6d:10:5a:c0:13:db:
87:8c:66:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:55:37 2025 by rpki-client