Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7092FD4662FA11F0A9647992DAE4EC9C.roa
File: 7092FD4662FA11F0A9647992DAE4EC9C.roa (raw, json)
Hash identifier: h6HIewo6XdV6Ec08OMeyRoCEGzATF99jdJtsY5VR8ls=
Subject key identifier: 97:29:D0:71:13:BD:B3:60:EC:C3:02:F1:F7:3A:80:0D:AB:A5:55:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0165E2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7092FD4662FA11F0A9647992DAE4EC9C.roa
Signing time: Thu 17 Jul 2025 10:40:22 +0000
ROA not before: Thu 17 Jul 2025 10:40:17 +0000
ROA not after: Sun 31 Aug 2025 10:40:17 +0000
asID: 214238
IP address blocks: 156.239.21.0/24 maxlen: 24
156.239.22.0/24 maxlen: 24
156.241.40.0/24 maxlen: 24
156.241.42.0/24 maxlen: 24
156.241.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91618 (0x165e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 10:40:17 2025 GMT
Not After : Aug 31 10:40:17 2025 GMT
Subject: CN=6878d316-75b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ae:70:7f:e4:7a:cd:78:73:d2:eb:63:91:6c:
54:db:b9:69:c6:65:34:dc:4b:e0:ad:fc:2f:41:8c:
7f:85:6e:e5:f3:a3:72:de:fd:db:56:bf:ff:ae:f3:
94:b6:45:2c:95:a5:cb:5f:78:8b:a8:02:12:3b:46:
12:79:17:ad:b9:cb:bb:69:aa:44:86:a0:c9:e3:ed:
ff:ba:16:a3:ed:4a:c4:3d:db:cb:53:90:60:d9:81:
39:4e:79:0b:2c:09:fc:10:78:9f:70:2d:9b:84:a4:
e5:60:34:8c:33:f2:3f:e7:7c:2e:24:fc:1b:14:e6:
d5:4c:7e:f9:df:f6:da:1a:13:e2:a9:0b:ea:c2:96:
26:76:8c:50:84:86:93:2a:17:b1:6e:fd:ad:35:6f:
9d:c7:80:87:1f:f1:31:3c:69:78:56:12:70:11:a5:
fd:54:69:13:35:01:d9:7a:9d:58:32:1b:e2:c8:2d:
10:83:0a:3e:00:90:cb:b1:95:d7:18:a2:38:64:be:
b1:cc:c3:99:3a:23:12:eb:5d:b7:c1:53:89:e1:4f:
b7:94:3e:0d:23:fd:d9:27:53:28:76:b9:e9:9b:cc:
58:92:08:54:68:ff:5c:e0:42:7e:1c:16:8e:a5:d8:
dd:b9:84:95:ca:fe:47:f7:d3:aa:fd:5b:a4:45:d1:
e3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:29:D0:71:13:BD:B3:60:EC:C3:02:F1:F7:3A:80:0D:AB:A5:55:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7092FD4662FA11F0A9647992DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.21.0-156.239.22.255
156.241.40.0/24
156.241.42.0/23
Signature Algorithm: sha256WithRSAEncryption
02:5b:ed:e5:d9:8d:19:37:08:42:48:64:93:36:c4:47:fc:35:
ea:11:11:7c:c3:76:40:9b:44:0d:c7:90:46:fb:5e:8e:98:16:
09:01:bb:fe:32:6f:8a:0a:c4:c9:89:ba:b0:74:85:ca:e5:b0:
0a:b6:9a:d6:5e:15:d9:3c:d9:41:60:4d:e1:7c:67:db:ee:c7:
eb:4e:7b:db:f1:46:67:2e:72:96:a1:ba:7c:e3:93:4e:e1:ee:
8d:83:50:3f:47:c6:6f:97:a5:71:93:50:8b:dc:54:b0:94:73:
fa:11:6a:48:0f:80:70:a6:28:6c:ce:9e:9d:81:21:bf:2d:d0:
21:ca:f6:5d:7c:e6:77:2a:4b:36:0c:0e:12:fc:f1:91:ae:d3:
2a:f0:c7:8d:a0:24:92:fa:8a:72:d7:86:e0:8a:48:f3:6e:0e:
d5:8c:83:3d:5e:65:c7:8f:e3:ed:2c:0d:d1:88:18:87:1f:76:
89:e9:8a:d5:c2:cd:e1:5d:67:3b:59:1f:9e:1b:b8:02:f0:9c:
19:d5:f8:a1:a5:e8:05:db:26:b0:fa:a3:de:f5:1d:b5:a9:16:
d4:f2:31:68:b2:9c:96:38:fc:2e:b8:3a:25:87:aa:20:00:a9:
43:e9:b4:34:a5:dd:e6:36:cf:bb:0a:10:46:d3:5e:93:6e:b8:
22:99:17:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:44:24 2025 by rpki-client