Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4DFB860582111F0B32C7987DAE4EC9C.roa
File: B4DFB860582111F0B32C7987DAE4EC9C.roa (raw, json)
Hash identifier: 2uzXdSxWPmkTLm5RrTzsk7aZxpo4bmAuKPspzHNrjoM=
Subject key identifier: 1E:8E:42:11:6A:20:F7:79:99:54:37:0D:F1:8D:F8:37:4C:C1:E8:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0160A6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4DFB860582111F0B32C7987DAE4EC9C.roa
Signing time: Thu 03 Jul 2025 15:23:45 +0000
ROA not before: Thu 03 Jul 2025 15:23:39 +0000
ROA not after: Fri 17 Jul 2026 15:23:39 +0000
asID: 18013
IP address blocks: 156.239.24.0/21 maxlen: 24
156.239.32.0/20 maxlen: 24
156.239.48.0/22 maxlen: 24
156.239.52.0/23 maxlen: 24
156.241.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90278 (0x160a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 15:23:39 2025 GMT
Not After : Jul 17 15:23:39 2026 GMT
Subject: CN=6866a080-54c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:c4:c0:e8:49:cd:10:47:2c:a0:e7:48:46:
f9:62:04:19:c3:a6:66:a0:93:56:dd:99:e7:10:43:
81:a2:81:80:94:67:27:f4:a3:07:56:d9:e7:26:67:
b8:5f:ed:55:90:11:72:fc:24:0a:d0:f1:7c:a4:55:
67:b9:ce:aa:0e:1d:fd:a2:40:1f:32:c8:78:9e:62:
a0:ac:45:71:87:4f:8c:20:d2:1b:35:26:aa:31:86:
99:f4:0d:31:ea:58:5b:82:e5:03:c0:54:63:29:c5:
85:96:45:e4:25:a7:70:81:0e:53:39:78:c6:4e:56:
fa:8a:1b:70:80:5b:55:70:28:b3:1a:d7:a3:4e:5f:
e9:fd:74:68:5a:3e:6f:c6:fd:58:57:7f:30:f4:73:
99:33:59:1e:6d:79:5f:7b:00:3c:a5:7d:d2:6b:6b:
80:e5:01:97:c7:8e:ea:e3:8f:b5:d9:31:41:21:47:
0d:32:6b:c4:26:5a:fd:72:9c:5e:4e:bd:c0:41:60:
71:73:e3:40:85:b0:b0:40:fe:44:72:4c:8d:7d:d1:
25:84:7a:7d:cf:88:aa:d2:d0:c4:45:83:46:75:f6:
08:52:1f:86:92:72:56:a6:f2:fd:71:3d:5e:10:3a:
78:73:e2:6b:7e:af:3f:32:ee:b5:a3:3c:2f:ef:9d:
33:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8E:42:11:6A:20:F7:79:99:54:37:0D:F1:8D:F8:37:4C:C1:E8:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4DFB860582111F0B32C7987DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.24.0-156.239.53.255
156.241.128.0/18
Signature Algorithm: sha256WithRSAEncryption
a2:76:e1:d8:95:2c:25:5f:66:4a:60:ae:56:96:67:ea:93:72:
31:37:59:69:bb:21:21:6d:ae:35:09:10:8a:b7:65:fd:96:af:
68:fc:45:30:b8:0b:8d:c3:05:aa:76:24:0b:66:1c:4f:0e:75:
96:24:b3:1d:49:72:bd:fc:9e:82:29:db:db:06:a4:f1:06:85:
e5:2e:4b:50:57:f3:eb:2b:ba:8d:c6:58:32:ee:8b:09:1a:49:
89:ef:a3:89:46:9e:1c:f8:7e:b3:b7:97:7a:45:76:09:95:00:
47:d1:af:f9:d7:ef:76:20:19:b0:de:3d:53:77:73:e6:e1:94:
b5:04:9b:37:f5:04:b7:53:52:8e:c7:9e:10:7f:96:aa:b1:1b:
39:e4:89:75:32:85:d0:61:7c:87:80:bf:f7:fe:2b:88:a8:ad:
84:0f:88:8a:67:f6:60:83:bf:a1:7e:fe:41:7e:3d:d6:58:22:
aa:0e:c1:71:81:43:8b:2a:11:0e:07:e8:53:f3:87:e7:70:cc:
ca:87:6b:84:4e:53:da:45:72:ef:85:e6:85:23:d8:8f:6b:42:
ae:72:55:c3:c8:5f:87:85:a2:8f:13:ec:0e:16:09:4c:91:77:
4f:44:4b:7c:f9:1b:af:80:a4:75:79:8f:4a:12:ec:be:6e:4b:
2c:43:c9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:31:54 2025 by rpki-client