Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEB72454624511F0BAFDE4E5DAE4EC9C.roa
File: AEB72454624511F0BAFDE4E5DAE4EC9C.roa (raw, json)
Hash identifier: 5rhrLSeQ24BP2JgIvtNXdkYaq1D7MizRz3gTmb3+Tos=
Subject key identifier: E0:3E:74:9B:5B:7F:35:A9:26:50:22:87:6F:3D:90:A5:1A:85:BA:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01658F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEB72454624511F0BAFDE4E5DAE4EC9C.roa
Signing time: Wed 16 Jul 2025 13:06:28 +0000
ROA not before: Wed 16 Jul 2025 13:06:22 +0000
ROA not after: Fri 25 Jul 2025 13:06:22 +0000
asID: 398465
IP address blocks: 156.255.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91535 (0x1658f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 13:06:22 2025 GMT
Not After : Jul 25 13:06:22 2025 GMT
Subject: CN=6877a3d3-e683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:07:64:21:10:b7:c5:a0:56:f3:50:12:2b:dc:
8b:c6:eb:db:4b:9c:69:4a:8b:2c:f6:b5:b4:7d:ef:
f6:0e:76:e9:be:3b:40:82:73:4a:aa:2a:44:e7:64:
1f:ea:a7:20:0e:de:84:7d:90:d5:7b:a0:a5:c3:05:
77:6d:9c:e2:c0:f0:76:de:7b:8e:0e:78:1e:d2:33:
70:60:aa:33:9b:7a:53:fa:ef:9b:c5:36:ed:73:22:
63:14:12:b7:1f:70:05:a7:50:ef:20:b4:4f:05:a9:
65:26:24:24:16:52:fa:ae:ef:b9:91:55:63:bd:40:
9f:a0:cf:2e:80:3f:b5:08:67:0a:a4:9e:78:36:7a:
db:09:fb:e6:dd:b6:71:a8:01:03:9b:57:1d:c4:0b:
6a:64:f0:cc:d4:38:c3:2e:a2:54:3d:ee:cc:1a:04:
0c:f0:ca:b9:87:7c:7e:87:70:8a:c7:e9:dd:50:67:
7a:cc:b6:62:70:8d:a7:b1:41:ef:56:1b:b5:3a:40:
9b:23:1b:15:de:99:ca:d8:e1:06:19:ca:94:f2:09:
ec:0f:c5:d7:2b:6f:9a:ed:0d:d4:8c:45:b6:4c:ed:
26:c5:db:ae:36:83:5b:ce:fc:42:35:9b:a1:1f:5a:
d1:65:7e:ef:ca:23:3e:59:5c:2c:44:c7:5d:31:10:
3e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3E:74:9B:5B:7F:35:A9:26:50:22:87:6F:3D:90:A5:1A:85:BA:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEB72454624511F0BAFDE4E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.24.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:e3:e3:63:0b:83:8e:e1:a5:ab:ad:a3:2d:21:9f:5c:71:d3:
b4:7f:4d:c4:9d:62:ea:a0:81:6f:81:27:6e:c5:ca:7e:c4:b3:
b3:22:f0:9a:bf:3d:99:51:18:f6:ff:f7:b1:9c:4c:eb:e4:4d:
5c:66:ba:88:95:ef:4c:97:18:93:6f:4d:99:89:e1:5e:03:c9:
1a:7b:fb:d1:7a:91:e6:ea:e5:27:5e:63:0b:7c:4e:01:2c:1e:
90:1c:7b:b6:3a:e6:a3:56:ef:46:9c:58:ef:df:60:a7:c1:d3:
27:5e:96:42:14:62:c6:2b:33:24:31:5a:5a:1b:fe:5a:92:cf:
54:99:99:12:e5:d1:91:45:b4:0a:2e:2f:34:25:97:59:45:04:
c5:03:8c:86:48:28:6a:c9:71:6d:df:5c:0f:87:a8:3f:82:0a:
93:ef:74:a1:67:e4:7a:f9:c7:c8:b9:88:ad:ce:4d:fd:be:91:
d8:62:59:1b:e6:cd:00:db:04:89:21:40:29:be:4b:02:73:d6:
82:3d:ef:76:9e:7c:f2:1b:6c:35:8c:d9:44:56:c9:eb:2f:6f:
3d:53:d5:22:e9:28:ad:56:fb:4a:b0:b7:67:87:3e:a0:00:5b:
8d:f9:6b:f1:df:79:0e:75:53:b2:ec:37:c7:40:62:80:38:55:
7f:bb:e8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:35:36 2025 by rpki-client