Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2108FEE60A311F08C3AB1C6DAE4EC9C.roa
File: B2108FEE60A311F08C3AB1C6DAE4EC9C.roa (raw, json)
Hash identifier: Dj+Qzz4uj8/YTIQMhNX7ByOaMpQVxNAcQ9NE51Sn3LE=
Subject key identifier: 5C:CD:98:B8:57:6C:7A:DD:D4:3F:70:78:80:DE:14:93:BD:46:4C:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016524
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2108FEE60A311F08C3AB1C6DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 11:14:23 +0000
ROA not before: Mon 14 Jul 2025 11:14:19 +0000
ROA not after: Wed 03 Sep 2025 11:14:19 +0000
asID: 216047
IP address blocks: 156.234.118.0/24 maxlen: 24
156.234.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91428 (0x16524)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 11:14:19 2025 GMT
Not After : Sep 3 11:14:19 2025 GMT
Subject: CN=6874e68f-1135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:37:89:d0:51:32:58:32:9d:d3:02:af:16:
8b:83:b7:6e:9a:ed:03:4e:fc:c3:68:0d:ee:39:57:
71:fd:d2:5f:ec:4f:21:0b:61:27:87:ea:c9:46:e3:
f8:87:10:38:28:e5:ca:24:6c:f2:e6:0d:f1:5b:c1:
5e:52:82:3a:f1:eb:b4:4c:d6:9c:0e:5f:24:ee:c0:
2c:06:f0:1a:dd:9c:e7:b9:49:c5:eb:2b:f5:3c:43:
0b:22:db:6a:c7:62:ba:f2:bc:00:93:ad:64:d1:b4:
c1:de:25:18:2e:f2:06:ce:82:a3:4b:64:42:27:73:
f7:92:49:8a:2f:09:d7:fd:c3:39:8b:75:ea:c0:b9:
71:f9:58:75:30:53:e5:22:4a:44:ca:9a:95:51:bc:
2b:fb:18:e7:91:57:66:9c:56:ac:ff:31:7e:92:7f:
00:57:36:da:da:a2:3c:6f:d5:14:7a:33:30:92:2c:
f8:39:76:16:1d:eb:da:f3:02:db:ba:b7:dd:e6:74:
ed:dd:2f:1f:aa:fe:93:a5:95:bb:68:d0:d4:70:d6:
35:67:05:24:ca:22:88:6d:71:fe:f7:04:71:ac:06:
12:3e:11:9f:c6:3d:69:9e:14:d0:14:94:e7:28:36:
d0:ec:31:fa:76:1c:2d:0d:1b:19:da:18:c1:c7:92:
9c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CD:98:B8:57:6C:7A:DD:D4:3F:70:78:80:DE:14:93:BD:46:4C:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2108FEE60A311F08C3AB1C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.118.0/24
156.234.123.0/24
Signature Algorithm: sha256WithRSAEncryption
29:55:8a:30:ae:56:d6:4d:fc:1a:14:8f:77:fb:b5:b9:68:c5:
7a:99:9a:50:b3:9e:90:21:05:d2:97:16:e2:58:04:61:36:21:
15:72:28:22:d6:1f:e0:65:b2:f3:88:b2:95:71:0d:8a:d4:41:
55:0a:9f:b2:5f:9c:71:90:8c:c5:da:87:91:79:90:9e:6b:6d:
e1:b7:e8:15:4b:cb:24:fa:85:9d:e4:f3:54:82:5b:55:db:5b:
d9:a9:f1:48:d7:4d:5c:4c:0e:a3:f0:71:90:12:54:a8:21:00:
e8:bf:b4:87:91:0b:7d:ce:96:eb:d7:2a:5e:81:c3:e6:a7:09:
da:1f:26:ad:fc:2d:2d:1d:e9:0b:df:1b:48:cb:00:5a:b1:db:
86:e0:9f:30:39:a4:9b:26:10:0b:67:7d:24:e6:20:d3:88:70:
ef:45:dc:e8:1d:ef:fe:38:49:26:77:fd:da:21:2d:63:50:c9:
bb:fe:4d:71:29:17:d3:21:05:34:39:49:f6:52:ae:53:68:eb:
cd:4d:1e:10:11:a5:08:e9:fb:59:71:1e:2c:bd:bf:9c:d7:ce:
93:c3:d7:3b:6e:97:0f:d2:8b:cc:e1:c8:af:71:bc:47:12:ed:
db:4f:5f:10:94:2b:d1:5f:af:b9:5c:da:81:fe:9d:2b:65:c3:
c1:a6:ac:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:31:17 2025 by rpki-client