Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECBBCF3C273211F0B804F4BBDAE4EC9C.roa
File: ECBBCF3C273211F0B804F4BBDAE4EC9C.roa (raw, json)
Hash identifier: kCQ30kMvi+BA60tKfKBX+dG+KQVb5IRQoTVfLfIY6Es=
Subject key identifier: C6:42:1A:2C:FB:AC:83:F6:41:02:FF:40:58:10:53:84:92:C5:C2:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015160
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECBBCF3C273211F0B804F4BBDAE4EC9C.roa
Signing time: Fri 02 May 2025 08:53:33 +0000
ROA not before: Fri 02 May 2025 08:53:28 +0000
ROA not after: Sun 11 May 2025 08:53:28 +0000
asID: 198247
IP address blocks: 156.238.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 08:53:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86368 (0x15160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 2 08:53:28 2025 GMT
Not After : May 11 08:53:28 2025 GMT
Subject: CN=6814880c-c4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:b9:8a:fb:4d:f8:98:83:86:65:9e:d5:ef:
fd:67:96:36:3c:65:e2:aa:ce:1c:24:4a:48:6e:8c:
c8:fe:cd:54:bc:b9:33:cf:9a:db:86:4d:42:1d:0b:
a9:f4:e2:52:48:00:69:1f:9a:08:9d:da:3a:15:1b:
e7:86:6b:5c:dc:55:17:bc:ad:64:6b:ea:f4:98:11:
b1:2b:bb:2b:10:d0:5c:0e:b8:1f:18:9a:57:08:86:
4d:1e:d0:3d:ea:b9:d6:dd:72:c1:cd:54:7d:fb:d7:
e1:b7:16:58:f0:47:34:00:f1:59:5d:eb:5a:74:59:
29:65:48:d6:d8:63:7b:06:f2:96:a1:d5:d0:29:60:
dc:e1:56:df:ca:54:73:61:0d:c7:2d:c1:0f:ec:0a:
41:60:f0:2e:9e:6c:b4:39:f8:96:cb:5f:24:a2:09:
6d:8e:1a:a1:01:ba:14:2e:3a:a8:b7:37:b8:87:5c:
6c:75:c2:04:bd:49:64:19:e1:6d:a0:7a:17:72:9f:
6d:6f:15:e0:38:f2:21:24:53:05:67:a8:12:af:7f:
ff:0f:79:9a:36:f0:80:8b:51:eb:c1:db:72:6b:b1:
61:a7:2b:e5:32:ff:7e:7b:fc:d5:d6:bb:89:53:10:
16:dd:4e:14:01:3b:fa:4f:94:8f:e2:f7:fd:49:cc:
75:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:42:1A:2C:FB:AC:83:F6:41:02:FF:40:58:10:53:84:92:C5:C2:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECBBCF3C273211F0B804F4BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.84.0/24
Signature Algorithm: sha256WithRSAEncryption
99:14:a5:5f:b4:3c:e1:f5:eb:c2:76:64:43:fe:7c:22:c7:35:
9c:6f:1e:b5:05:83:aa:90:d3:87:8e:99:eb:2c:70:71:53:2a:
ee:8c:fd:28:88:e6:26:b2:dc:69:51:1e:0a:7d:be:7f:ed:21:
71:44:c2:72:59:ab:67:ea:fa:59:37:b5:eb:bf:c5:66:6f:d3:
a2:73:02:e3:f7:5d:1d:d1:08:fb:6c:73:7d:bf:b8:54:fe:2f:
cb:2a:4b:51:08:79:06:32:02:b5:9b:ce:c1:81:9e:ff:b6:5b:
78:2d:9e:ab:27:20:c1:d4:1c:5d:2c:39:81:8b:a7:89:95:84:
ae:0e:86:1e:37:88:8d:09:18:11:76:1c:44:2c:a8:49:c0:13:
64:84:aa:c5:e0:b3:96:70:e9:c4:a7:62:5b:9a:19:81:ce:a2:
85:3c:0a:b2:6f:e6:a7:76:fa:46:af:4c:ae:51:b6:9e:39:a5:
00:54:12:80:e3:93:7f:7f:4e:5e:83:a6:1a:db:64:b1:0b:d6:
b2:86:30:6c:7e:f9:2a:e8:1b:33:9b:4b:34:ab:36:ac:22:12:
34:2d:a5:09:58:ca:09:d5:55:c5:92:4e:6d:f6:67:da:93:7f:
6d:26:d2:c7:b3:20:ba:ec:ae:39:49:9d:2f:a3:48:dd:ed:e3:
ca:fb:91:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:30:41 2025 by rpki-client