Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F1EC8A8501E11F0887A64F1DAE4EC9C.roa
File: 6F1EC8A8501E11F0887A64F1DAE4EC9C.roa (raw, json)
Hash identifier: o+iukMwM0tkmSpvgbLNYWCSV7I9YiJmrJL2k8Tfy9A4=
Subject key identifier: 43:69:D1:E6:40:36:18:7E:9C:C6:12:F9:4A:FE:51:1A:98:F0:EE:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015DE8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F1EC8A8501E11F0887A64F1DAE4EC9C.roa
Signing time: Mon 23 Jun 2025 10:40:09 +0000
ROA not before: Mon 23 Jun 2025 10:40:05 +0000
ROA not after: Tue 29 Jul 2025 10:40:05 +0000
asID: 23470
IP address blocks: 156.252.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89576 (0x15de8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 23 10:40:05 2025 GMT
Not After : Jul 29 10:40:05 2025 GMT
Subject: CN=68592f09-b325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:5e:3b:7a:ba:f4:12:e7:29:33:b4:aa:fa:
f9:4a:ee:34:84:c1:56:fc:d4:f4:6e:55:12:19:ee:
bf:3e:47:d0:0d:82:af:1b:78:24:10:7c:76:cb:f0:
77:2d:fb:e1:11:00:3a:99:f3:b1:c3:6e:25:ce:04:
15:6f:13:4e:cd:84:75:88:0a:8a:03:34:0d:3b:41:
88:e3:30:a0:aa:73:fe:05:da:ad:f6:b0:8b:0b:34:
d6:2c:d1:a7:2a:89:3a:03:42:8b:b2:e4:95:75:c3:
89:79:28:90:43:74:2c:65:be:0f:12:39:9f:85:8f:
e1:66:eb:1b:a3:b3:2a:0a:89:68:56:7f:b1:9d:27:
db:23:57:7a:0a:cc:fe:2f:45:d8:31:ca:48:88:2d:
b9:0c:c8:d3:fd:52:65:c2:d9:53:f8:fa:f1:c5:2e:
86:db:4c:62:91:55:9a:14:bd:06:77:34:18:09:05:
37:25:58:46:0e:cd:69:95:d9:85:c7:cb:0c:93:a7:
44:c7:6e:75:a9:1a:bf:c2:0e:94:92:04:bc:51:0d:
45:b3:5c:16:15:5a:8b:f0:fa:06:9a:1d:43:b9:72:
47:a2:80:ac:f2:d6:72:2b:9a:30:7e:5f:7b:ba:b6:
c0:3e:30:73:f8:34:66:f1:ac:81:be:b1:4d:3a:a9:
ee:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:69:D1:E6:40:36:18:7E:9C:C6:12:F9:4A:FE:51:1A:98:F0:EE:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F1EC8A8501E11F0887A64F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.0.0/24
Signature Algorithm: sha256WithRSAEncryption
52:57:29:d9:59:ee:d9:41:53:e3:16:ec:5b:8a:3c:a4:ad:27:
57:2b:fb:7b:ba:9e:78:1e:d5:e5:e7:1a:e9:74:0d:51:46:2b:
cd:f8:32:b9:c9:51:4d:b4:66:c3:2a:46:f5:1a:50:4f:25:c7:
b0:63:65:96:98:a5:4b:55:6b:50:7f:09:97:15:c3:be:a6:0d:
3f:d2:00:96:d0:46:0c:16:47:b4:08:5c:f9:85:5c:b8:f6:66:
6d:15:af:6d:0c:e1:75:89:e0:62:67:c3:28:83:2a:97:f5:13:
44:65:bf:47:21:17:3c:9e:61:4f:65:35:54:45:e7:92:8e:c3:
89:9a:bc:c5:4d:91:1b:54:78:10:93:75:e2:c3:bf:0c:e0:c2:
c5:fc:9c:56:03:60:2d:3c:ef:1f:c6:06:17:91:7c:52:b6:10:
68:82:f5:77:5b:0b:c1:ff:39:c3:df:5f:62:57:39:27:b8:2d:
5c:7e:eb:e8:87:61:41:37:72:28:c5:05:d4:e2:b8:9f:86:f8:
33:30:db:73:b1:44:0e:8a:ed:ff:d1:be:c4:d3:bf:87:f1:5c:
c0:6a:db:99:fb:de:a5:6c:84:83:9a:4c:d9:d9:41:ec:c4:a8:
66:cb:57:4a:ff:8e:92:a2:55:27:c8:57:ed:69:87:eb:1c:52:
cc:2b:fb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:01:47 2025 by rpki-client