Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FB42F705B5011F0BD71BCC1DAE4EC9C.roa
File: 4FB42F705B5011F0BD71BCC1DAE4EC9C.roa (raw, json)
Hash identifier: Y6g/EAQtSJ0LOUfTtoed3A0CCmRwFEihpqkorka89LY=
Subject key identifier: 65:C1:C8:90:ED:99:7D:70:22:BB:3A:DA:8A:CE:7F:2F:61:A3:88:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01632C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FB42F705B5011F0BD71BCC1DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 16:34:55 +0000
ROA not before: Mon 07 Jul 2025 16:34:50 +0000
ROA not after: Thu 21 Aug 2025 16:34:50 +0000
asID: 51809
IP address blocks: 156.233.128.0/20 maxlen: 24
156.233.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90924 (0x1632c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 16:34:50 2025 GMT
Not After : Aug 21 16:34:50 2025 GMT
Subject: CN=686bf72e-350b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:15:7a:f8:98:10:0d:2c:7d:2c:8e:72:77:bd:
89:42:cf:54:25:8b:cf:2b:1d:12:cf:3d:09:f3:ab:
49:6f:64:da:23:4f:70:ff:01:22:de:47:bf:a2:d4:
60:2b:d8:36:16:af:fa:db:d2:fb:de:7a:7c:70:72:
f0:7e:ee:c1:a1:55:dd:31:ff:5c:0d:ef:d6:7e:14:
b4:35:95:71:c9:da:2c:b8:97:db:7a:2d:05:29:35:
56:8e:a5:15:31:f6:f6:43:55:d9:3e:78:cd:02:a2:
de:93:00:bb:e3:87:b1:df:5d:03:66:77:c9:5d:64:
53:5b:f0:d0:03:f6:39:48:dd:f7:e5:2b:70:3f:28:
40:6e:b1:a5:d1:bb:75:49:09:7a:f7:d5:5b:e1:4e:
9b:b2:6f:d8:58:88:97:62:ea:4f:83:f5:da:b7:96:
34:23:59:a8:d6:f8:dc:f7:69:b2:42:ad:39:c3:45:
3b:9b:f2:83:46:85:da:62:24:7f:f6:59:45:70:c6:
3c:7f:9b:ad:11:c8:a7:e6:53:8f:69:45:24:ba:ac:
5c:f0:7f:96:b9:3c:0d:25:34:16:82:ec:4c:b1:24:
16:3d:98:5a:02:ab:92:33:ea:53:4e:06:f2:ce:42:
01:54:8d:2f:5a:c7:a9:79:61:d9:ec:61:3d:58:03:
bf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C1:C8:90:ED:99:7D:70:22:BB:3A:DA:8A:CE:7F:2F:61:A3:88:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FB42F705B5011F0BD71BCC1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.128.0-156.233.151.255
Signature Algorithm: sha256WithRSAEncryption
50:1f:7d:8f:b1:06:d7:4b:31:b8:da:90:3b:e4:2a:fc:46:31:
8f:60:e7:b7:39:76:d0:08:d9:6d:4f:e5:15:6a:07:5c:3e:0e:
b5:b1:e9:0b:75:dd:8c:ec:9a:e5:1e:11:21:ef:4f:4f:00:34:
16:1d:d3:45:07:c3:d4:37:6d:9e:12:3e:c7:b5:83:d9:c4:71:
e4:d5:03:54:4e:e9:68:ae:e4:ba:53:a6:d9:20:94:2d:fa:d5:
f8:18:be:d7:97:d4:74:6b:80:45:d9:c9:37:39:19:8c:d2:bf:
63:2c:b9:26:e5:b1:10:da:4b:06:88:73:f4:8b:70:be:30:6a:
01:32:00:1f:e9:49:23:02:d5:54:5b:e8:43:96:a7:dc:f3:d4:
6a:cc:0b:64:ce:bc:0f:8c:26:1d:d1:89:8f:a6:cb:0e:aa:0f:
97:93:a0:54:d6:e0:eb:a3:60:b7:50:ea:52:9c:5f:71:60:54:
ae:5a:a0:80:07:77:87:d3:e8:16:b8:1e:95:43:28:dc:c4:42:
ce:ce:36:5e:f0:76:6b:19:dc:7d:2b:99:1a:09:bd:4e:e8:a8:
32:c8:b4:e4:a6:5b:46:70:7f:a4:4c:31:17:c5:6c:98:54:81:
a8:9c:a8:3a:c9:cf:6b:fc:da:83:14:41:9f:3f:93:0e:0f:f2:
f8:18:62:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:35:52 2025 by rpki-client