Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B04D4BE59B211F0ABE433B9DAE4EC9C.roa
File: 0B04D4BE59B211F0ABE433B9DAE4EC9C.roa (raw, json)
Hash identifier: Wh6FLGP7B5Do+owtXfv/Qdpin/9ttBVqiSJXMG/cI0g=
Subject key identifier: B4:6F:76:D3:FD:EA:BA:89:F2:A4:E2:81:1C:4D:B9:A9:A4:E1:59:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0161BD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B04D4BE59B211F0ABE433B9DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 15:09:28 +0000
ROA not before: Sat 05 Jul 2025 15:09:23 +0000
ROA not after: Sun 24 Aug 2025 15:09:23 +0000
asID: 8796
IP address blocks: 156.239.24.0/21 maxlen: 24
156.239.32.0/20 maxlen: 24
156.239.48.0/22 maxlen: 24
156.239.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90557 (0x161bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 15:09:23 2025 GMT
Not After : Aug 24 15:09:23 2025 GMT
Subject: CN=68694027-6d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:84:aa:a0:18:15:51:55:d2:0f:6b:d8:4b:f2:
2d:83:38:d8:66:cf:cb:5d:8f:7a:94:73:c3:bb:08:
91:0b:d7:c4:4a:ad:41:dd:c1:62:de:23:61:10:f1:
0f:3e:95:86:ff:83:99:fa:c4:ed:7f:66:69:11:29:
77:76:b6:42:3c:bd:8f:a4:f5:32:d2:8d:0e:07:6f:
0d:a6:89:df:b6:99:e6:cb:05:32:92:6f:0e:b5:fb:
e4:7e:9c:c5:63:a8:c2:be:86:47:ed:64:fc:a5:ac:
8f:c1:82:00:87:41:fb:0f:09:b5:49:ff:c4:9a:5b:
9d:ba:46:07:c6:e6:6e:50:f2:4c:4c:fa:e2:87:15:
02:4e:55:29:fb:9f:70:2b:2b:cf:4c:2f:01:2b:a3:
87:9c:f2:19:67:1a:49:1a:89:ec:fa:26:77:2e:4a:
69:f2:2f:d8:82:02:94:72:96:ef:ed:d6:0a:16:78:
d7:56:cd:c5:c5:0d:01:ce:16:e3:bb:89:5e:32:fd:
35:3c:2f:2c:f2:39:68:2c:0d:64:5f:8d:60:b9:02:
9c:05:3f:94:5e:50:85:98:2d:7f:40:61:b5:c0:49:
1f:62:54:f7:b8:d6:1c:ed:ba:49:20:58:49:31:17:
51:2a:4a:65:12:0e:4b:46:a2:7f:55:de:06:24:28:
d3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6F:76:D3:FD:EA:BA:89:F2:A4:E2:81:1C:4D:B9:A9:A4:E1:59:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B04D4BE59B211F0ABE433B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.24.0-156.239.53.255
Signature Algorithm: sha256WithRSAEncryption
79:23:2e:9d:7b:e6:62:71:1f:d0:59:f8:79:52:24:d0:31:28:
f9:b9:e0:6b:94:74:f5:31:f6:9b:a4:8e:f2:81:96:51:e5:74:
b8:70:cf:aa:ab:3a:d6:d5:f5:e5:13:14:b8:d5:39:18:4d:38:
ea:66:39:5b:9c:91:ce:5b:94:3d:38:9b:6a:50:5f:b9:07:62:
93:32:b7:32:b1:b0:81:f2:b3:e5:97:48:c4:62:f7:31:0a:50:
db:07:1d:00:a7:b7:59:ca:d6:fc:26:74:d0:dc:48:0e:8b:ef:
c4:25:89:a0:0a:42:be:ec:eb:2d:0a:10:7b:e0:e3:ff:c2:45:
17:38:8c:24:ee:b9:24:af:6a:7d:5a:b7:d7:17:4f:19:7f:5e:
4b:ba:f5:ec:2c:43:5f:12:9a:4f:4c:da:a8:06:cc:8e:cd:67:
a5:e3:1b:9c:8a:3e:a5:61:48:b8:b6:a9:e0:c4:4c:5a:d2:5d:
41:f2:3a:5b:ad:7b:5f:08:24:b7:33:87:16:d2:18:8f:2d:0b:
a6:3f:e4:18:4e:cd:a8:4b:0e:d9:f3:76:be:a7:f4:3a:a1:26:
b6:98:9f:c2:71:75:5e:5f:1a:b2:61:75:b9:3a:be:2a:60:6e:
f1:47:78:3a:c4:5f:c1:0e:31:3b:13:56:71:ba:ac:32:0d:1f:
4e:0e:ca:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:36:18 2025 by rpki-client