Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CA38DD0608D11F0B86DD7B5DAE4EC9C.roa
File: 3CA38DD0608D11F0B86DD7B5DAE4EC9C.roa (raw, json)
Hash identifier: BaS8bZlaASLLkYMZ0cAd3mv921OSXqKueiq3Bjh8/ao=
Subject key identifier: 87:CF:66:64:90:0E:2F:02:9F:CD:AB:3C:3A:E1:2F:43:03:85:D9:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0164FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CA38DD0608D11F0B86DD7B5DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 08:33:38 +0000
ROA not before: Mon 14 Jul 2025 08:33:33 +0000
ROA not after: Sat 16 Aug 2025 08:33:33 +0000
asID: 22773
IP address blocks: 156.242.120.0/24 maxlen: 24
156.242.121.0/24 maxlen: 24
156.242.122.0/24 maxlen: 24
156.242.224.0/24 maxlen: 24
156.242.225.0/24 maxlen: 24
156.242.226.0/24 maxlen: 24
156.242.227.0/24 maxlen: 24
156.242.228.0/24 maxlen: 24
156.242.229.0/24 maxlen: 24
156.242.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91388 (0x164fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 08:33:33 2025 GMT
Not After : Aug 16 08:33:33 2025 GMT
Subject: CN=6874c0e1-edba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b0:c3:aa:87:9e:87:27:44:9e:d7:75:44:d9:
a5:2b:22:5e:44:56:1e:5a:76:b6:af:60:bc:e4:3a:
53:f8:b9:14:f5:ce:d2:f7:49:07:9c:3d:c7:20:d2:
4e:ff:d6:bd:94:57:3f:43:1c:67:97:47:5d:c3:9d:
78:e4:71:e5:f9:a7:d4:0f:14:32:44:85:ac:0e:e4:
68:07:36:d5:7e:86:b9:87:1f:23:2b:77:d1:7e:99:
38:98:a9:a6:70:b5:97:ec:09:1a:4e:8f:0c:c9:ee:
75:f8:d9:bd:95:58:e4:e0:69:95:db:1d:79:90:04:
21:7c:7a:a1:f1:e9:a4:25:b4:b2:ff:61:32:9a:ea:
53:96:39:e7:5f:31:eb:b3:f4:b5:bb:c3:23:ea:79:
ea:3d:e5:33:c1:fb:56:57:e3:67:df:20:82:70:5f:
a8:d0:a2:71:b0:0c:18:a2:61:a7:75:ab:d9:66:05:
20:0d:ca:6d:0d:22:0c:25:a4:b1:a1:9e:69:d9:fd:
58:f9:5d:18:c5:fe:e7:fa:3a:c5:8e:ca:83:b2:04:
b7:97:1f:b5:ab:2c:70:a5:0c:97:fd:0b:75:87:f9:
d7:4a:f4:4d:b8:d0:bf:0c:6d:7b:3c:e2:60:61:10:
ab:de:ee:4a:7b:32:ae:d3:04:fc:08:85:d6:d2:48:
b7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CF:66:64:90:0E:2F:02:9F:CD:AB:3C:3A:E1:2F:43:03:85:D9:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CA38DD0608D11F0B86DD7B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.120.0-156.242.122.255
156.242.224.0-156.242.230.255
Signature Algorithm: sha256WithRSAEncryption
4f:b7:79:4b:20:29:b3:59:cb:ea:5e:c3:53:43:40:0e:4a:34:
1a:c8:43:58:81:f4:aa:a1:b9:2b:6d:1a:76:f0:2a:b6:be:9c:
c6:49:02:31:66:89:f4:4f:0a:15:6a:16:a5:a6:57:7d:67:75:
cf:e3:f1:e7:a3:0a:d9:9e:6b:89:d3:29:8b:56:c0:1b:2f:e1:
df:72:42:6a:a7:0a:20:f5:79:b5:6c:55:00:95:f6:47:0c:33:
7e:cd:d3:e1:cd:79:25:03:31:49:ee:35:40:70:df:d2:5f:fd:
1a:1c:c3:f9:e5:05:9d:01:bd:84:d4:d3:ef:28:3c:cd:bb:99:
dd:52:87:e5:a9:c9:a3:a5:29:56:49:60:8d:9a:6a:07:65:05:
27:5b:81:c0:3c:bb:9b:aa:e2:14:62:d2:dd:a1:ea:df:96:35:
c0:89:7b:9e:45:da:e5:f5:d0:fe:d1:8d:7b:d1:5d:f4:69:89:
83:60:d7:de:cd:53:06:cf:df:49:e7:d5:5d:5e:0e:2c:d5:a7:
42:2f:b3:27:ea:32:2e:1d:ba:9b:5a:fd:51:a9:a0:a7:55:53:
d6:97:0f:82:30:fd:53:41:9c:39:80:58:6f:37:ad:1a:19:a3:
cd:f6:38:67:0e:ea:37:41:74:c8:03:2c:49:67:60:9f:74:54:
1e:fe:81:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:37:28 2025 by rpki-client