Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33122E2E608E11F088586CBCDAE4EC9C.roa
File: 33122E2E608E11F088586CBCDAE4EC9C.roa (raw, json)
Hash identifier: Q9sX8qlc1qtbqb5ATQK5gA/P0sam1W7kUUZ/mjlwGpg=
Subject key identifier: 84:20:7D:BC:C9:46:E0:D2:56:8D:AA:10:BF:B7:C9:A2:87:10:AF:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016500
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33122E2E608E11F088586CBCDAE4EC9C.roa
Signing time: Mon 14 Jul 2025 08:40:31 +0000
ROA not before: Mon 14 Jul 2025 08:40:25 +0000
ROA not after: Sat 16 Aug 2025 08:40:25 +0000
asID: 22773
IP address blocks: 156.242.95.0/24 maxlen: 24
156.242.247.0/24 maxlen: 24
156.242.248.0/24 maxlen: 24
156.242.249.0/24 maxlen: 24
156.242.250.0/24 maxlen: 24
156.242.251.0/24 maxlen: 24
156.242.252.0/24 maxlen: 24
156.242.253.0/24 maxlen: 24
156.242.254.0/24 maxlen: 24
156.242.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91392 (0x16500)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 08:40:25 2025 GMT
Not After : Aug 16 08:40:25 2025 GMT
Subject: CN=6874c27f-cc29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:49:e6:eb:dc:eb:50:a5:db:c3:88:05:26:48:
da:01:11:b0:b1:7c:ff:21:eb:01:01:6c:2b:35:dd:
26:0f:37:63:f1:ed:71:02:8e:2d:88:15:06:57:66:
ac:9c:f3:d2:b6:79:f8:a2:72:fa:dc:c1:46:50:97:
a1:0d:8b:d6:d0:e8:2c:7e:f5:b1:86:fa:32:58:51:
fb:c1:99:60:aa:ed:ce:e3:3e:c7:53:2d:94:15:3f:
9a:2a:f4:5b:e2:d1:57:6b:aa:ea:e9:72:e0:de:e6:
fe:74:e9:59:c6:ee:77:32:7e:0c:34:c6:62:14:89:
93:84:70:67:05:e3:c4:f9:23:02:23:90:7f:f6:b3:
37:14:aa:0e:ec:6b:aa:30:b9:27:55:62:00:20:65:
5b:cd:47:e8:e3:73:ae:21:4b:bb:23:8a:a8:7c:9d:
9a:70:75:27:2c:56:b5:26:3e:30:ca:88:c2:14:84:
10:f5:7b:34:e7:fc:e0:0d:45:76:67:2d:c3:ad:af:
53:ff:20:c4:1a:3b:61:0d:e4:ff:6a:68:fa:c9:2b:
cf:00:9f:4c:2b:56:d0:bc:0b:e7:6a:6f:a7:3f:7f:
7c:4a:05:df:7d:12:4c:fb:63:86:17:bb:cc:81:c3:
92:de:21:4c:27:c5:8d:85:38:08:98:68:2e:06:9f:
a9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:20:7D:BC:C9:46:E0:D2:56:8D:AA:10:BF:B7:C9:A2:87:10:AF:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33122E2E608E11F088586CBCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.95.0/24
156.242.247.0-156.242.255.255
Signature Algorithm: sha256WithRSAEncryption
4c:c9:39:d7:de:91:c1:01:2b:29:94:3b:b9:b0:e3:84:de:02:
db:d3:32:b6:0f:4d:5c:5e:1a:2d:e2:c7:63:bc:94:01:82:ea:
8e:fa:b7:04:79:d6:48:f9:7e:f9:e3:bb:3f:5f:8c:6d:11:28:
bf:35:7d:7c:e5:47:17:8c:94:e2:ae:9f:f0:7d:fe:b8:3c:f0:
3b:c8:57:76:53:3a:e6:72:24:56:38:f1:e9:62:9f:05:2c:88:
f4:46:70:d7:dc:a9:f7:fb:7f:eb:cd:b2:4e:3c:e9:cf:ab:e9:
1c:a8:ae:f2:3c:bf:63:b8:e4:f9:1f:02:0c:ec:8b:68:74:a3:
16:56:64:b7:e0:13:6e:d8:26:42:ae:92:3d:64:0a:9f:ed:fb:
ef:8c:da:d3:45:d4:8b:be:b9:05:90:a1:92:51:32:f9:3b:f7:
f6:c5:64:fe:a8:61:67:c7:20:cb:0a:ae:0f:34:67:23:18:4d:
ee:b4:27:5e:22:e4:cb:fb:2c:df:d9:c0:87:fe:99:4d:2b:71:
18:d0:17:a5:eb:02:21:b7:59:cb:63:ab:a4:71:c3:41:5e:85:
13:d3:5b:66:36:c6:f6:a1:40:27:65:a5:8c:4d:9f:b0:77:e7:
52:4f:64:4c:40:a1:bd:aa:d3:da:bc:0d:92:2e:17:b5:33:30:
3a:ba:cf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:41:39 2025 by rpki-client