Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2C66D2258EC11F0A931AFB3DAE4EC9C.roa
File: C2C66D2258EC11F0A931AFB3DAE4EC9C.roa (raw, json)
Hash identifier: Ekj0L6/ZTveA7HJDTETBwvWpQva17yc2sIcACekaKJE=
Subject key identifier: 9D:3F:8C:2F:43:52:2C:ED:86:91:03:66:B0:4E:C7:6A:B7:8C:50:24
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016120
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2C66D2258EC11F0A931AFB3DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 15:37:16 +0000
ROA not before: Fri 04 Jul 2025 15:37:11 +0000
ROA not after: Sun 24 Aug 2025 15:37:11 +0000
asID: 142032
IP address blocks: 156.239.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90400 (0x16120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 15:37:11 2025 GMT
Not After : Aug 24 15:37:11 2025 GMT
Subject: CN=6867f52b-d659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5f:32:67:c2:b5:0a:cf:37:46:5a:13:15:7e:
48:06:e1:eb:e3:9f:85:74:cf:c7:24:f2:40:49:13:
4b:8f:34:81:1f:da:c5:b6:e7:1a:31:c7:0f:c7:da:
2c:8e:df:9f:c8:32:ad:89:d2:2e:1c:31:be:5d:8a:
36:6a:cb:81:f7:96:05:54:6a:c1:0a:82:04:0a:e6:
10:05:07:3d:59:da:28:92:5f:48:00:2e:77:cd:07:
41:ae:3f:27:b0:b3:80:96:84:ec:d5:17:ca:31:65:
30:84:75:b9:20:92:6f:49:ab:7b:3a:de:3f:89:92:
fa:b9:77:dd:13:67:e9:f2:a8:5c:58:be:6e:57:d0:
b0:67:4e:7e:bf:1a:30:bc:40:ce:09:ac:c3:bd:85:
a3:5c:db:c7:4f:f9:47:b7:34:81:81:f0:08:9e:17:
e1:53:e1:d7:da:e4:05:df:13:09:b8:02:62:ae:17:
4c:b4:11:15:42:ea:0d:45:75:c3:2d:a2:01:24:c3:
f9:56:ef:c4:33:8f:cb:9d:d3:3d:cf:68:b1:83:17:
5f:1a:c9:15:f4:ab:25:97:3c:a4:f7:11:20:c4:4e:
f8:91:f5:28:c3:72:0e:c6:94:28:a8:94:c7:3f:45:
89:16:ae:29:67:5e:71:45:05:42:b4:56:fe:78:16:
a0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3F:8C:2F:43:52:2C:ED:86:91:03:66:B0:4E:C7:6A:B7:8C:50:24
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2C66D2258EC11F0A931AFB3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.52.0/23
Signature Algorithm: sha256WithRSAEncryption
77:e6:a5:fe:00:96:12:2e:4e:9d:38:cc:07:67:92:67:a0:bc:
03:91:fb:f8:37:eb:9c:32:82:2a:52:da:fa:67:d3:da:ce:1c:
24:a8:fc:df:de:be:0e:0f:25:60:1d:d5:75:bb:b1:72:86:d4:
2b:0a:74:fa:97:cc:cd:ee:b8:af:df:ef:39:d6:5e:1d:20:6f:
4a:de:d3:c5:80:df:eb:9c:ac:6a:27:6c:8c:f8:c4:43:e7:ae:
46:8b:96:8c:b2:60:ca:31:96:c8:11:c1:2e:21:e6:99:97:69:
90:67:5f:f7:ac:cf:eb:31:c2:88:04:89:35:62:1f:c5:e5:19:
7c:0d:7f:01:2d:24:e4:28:10:8c:09:85:8c:71:c9:2e:d4:fc:
de:bb:ad:0a:df:40:0f:06:a8:64:58:43:9e:7d:14:4c:38:b3:
86:eb:c6:3f:1a:bf:a4:03:e9:d6:22:e7:4e:2b:6c:d1:50:88:
6b:ed:95:66:99:9b:f9:f9:e8:1a:e3:e7:8f:f4:4e:0d:af:c1:
bf:92:97:97:51:8c:99:aa:70:ce:af:bd:d4:92:7e:6f:fe:a0:
97:16:27:e3:3a:5d:1c:85:1b:11:60:67:36:7f:f3:fd:f1:46:
94:2d:68:a1:c1:4a:df:54:ce:95:cc:de:19:05:68:56:2b:84:
3b:d3:15:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:37:29 2025 by rpki-client