Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6078F48C5A9011F0AC1D8EDBDAE4EC9C.roa
File: 6078F48C5A9011F0AC1D8EDBDAE4EC9C.roa (raw, json)
Hash identifier: 47v3kocS07r00kU8oVJOz4kMk/KVBxWhAVz7aZIvhOM=
Subject key identifier: 4A:9C:BB:56:46:A9:47:7C:5C:DB:00:DC:16:29:A6:1B:B7:5F:8A:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016269
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6078F48C5A9011F0AC1D8EDBDAE4EC9C.roa
Signing time: Sun 06 Jul 2025 17:40:59 +0000
ROA not before: Sun 06 Jul 2025 17:40:54 +0000
ROA not after: Wed 13 Aug 2025 17:40:54 +0000
asID: 18046
IP address blocks: 156.236.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90729 (0x16269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 17:40:54 2025 GMT
Not After : Aug 13 17:40:54 2025 GMT
Subject: CN=686ab52b-7838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:cb:57:81:11:78:4b:14:ee:17:63:62:e0:
e0:d6:5d:4e:ff:f0:11:bc:ec:97:a4:91:f8:e6:68:
0d:85:ef:3d:d1:fd:53:0f:5a:31:e6:39:28:3e:56:
54:f4:60:62:6c:26:94:44:6d:d0:4a:93:b8:91:80:
e7:b8:09:86:04:54:a0:d7:15:4b:7d:18:32:89:85:
ab:a3:65:bd:45:a2:8a:3b:68:db:95:ec:10:5b:0b:
ce:80:fb:db:76:d9:8b:79:32:7b:35:b6:4c:bc:d3:
b9:76:aa:cd:5e:fc:11:65:f9:ed:eb:75:aa:b1:fa:
b5:52:61:07:cf:63:c8:15:0e:7e:0c:2f:e4:54:bc:
13:e0:30:5c:62:fd:4a:85:08:02:e8:70:ac:3c:3b:
63:2e:a5:b3:43:38:2f:c3:4d:30:62:5e:55:5a:08:
6d:1b:17:e6:9b:d4:e0:5a:90:e1:3b:e9:66:38:da:
d6:01:ba:bf:15:98:1d:6d:58:a9:84:71:7d:7a:c8:
4b:28:da:13:d6:4f:bf:58:2b:aa:ac:68:6d:96:36:
3d:cd:f5:d6:1b:98:94:a2:47:99:3b:e8:d0:a7:cc:
91:e2:00:0c:46:43:cb:c6:f0:fe:c4:45:df:e3:c4:
44:c8:bf:47:3d:4d:3b:11:e1:dd:8e:58:7a:5d:b7:
56:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9C:BB:56:46:A9:47:7C:5C:DB:00:DC:16:29:A6:1B:B7:5F:8A:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6078F48C5A9011F0AC1D8EDBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.13.0/24
Signature Algorithm: sha256WithRSAEncryption
51:1e:c1:44:6c:f5:70:0f:46:7e:2e:ca:85:22:20:3b:20:e5:
08:01:38:e6:bd:89:4f:49:ee:c4:41:a4:a8:94:bc:be:c7:16:
83:41:1a:e9:40:ac:4f:67:0a:f1:2c:08:49:e9:1d:fa:27:32:
7e:e0:6d:24:26:df:e7:43:54:2a:8a:e4:e4:3c:f4:8a:96:59:
df:a1:2b:75:de:0f:6b:c6:a5:9b:36:c8:20:a2:c1:98:03:90:
f7:16:22:bd:ca:5e:77:07:a4:a8:0b:46:51:7d:0f:b2:be:72:
be:a8:24:ca:1b:62:52:2c:ab:b7:90:c2:3e:40:e0:87:01:b0:
91:1f:2e:84:ed:e8:74:2f:3f:e2:24:0c:6d:0f:3c:44:85:4b:
84:a1:b1:79:96:61:3c:fa:c1:49:19:2c:8e:03:b8:30:8a:0e:
8c:50:34:64:2a:dc:97:c4:f4:01:a6:26:1e:20:b1:5d:0f:2d:
1a:64:ce:8b:99:e1:90:63:8c:69:3e:10:0a:4e:2c:f9:2d:ad:
f4:22:5a:b8:1e:cb:cb:52:87:c2:0b:a8:6e:79:79:a2:89:f0:
4f:1c:54:bf:c6:c9:02:18:98:b9:53:a1:34:cd:7c:da:cf:8b:
42:87:59:f5:d2:67:93:25:9f:d9:cf:4e:17:3f:cc:59:31:fd:
66:cc:55:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:36:01 2025 by rpki-client