Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0D7357A58D011F0815E3082DAE4EC9C.roa
File: D0D7357A58D011F0815E3082DAE4EC9C.roa (raw, json)
Hash identifier: Q+2AyqDymqO8x1+ldo+ds9vo3NzNRgwNd3FakhsUIcA=
Subject key identifier: 2E:54:33:9A:36:F0:8C:3C:94:41:00:90:CC:E0:46:E8:69:DE:31:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016100
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0D7357A58D011F0815E3082DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 12:17:13 +0000
ROA not before: Fri 04 Jul 2025 12:17:08 +0000
ROA not after: Mon 11 Aug 2025 12:17:08 +0000
asID: 214143
IP address blocks: 156.231.108.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90368 (0x16100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 12:17:08 2025 GMT
Not After : Aug 11 12:17:08 2025 GMT
Subject: CN=6867c649-31c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d0:ed:8e:9b:b1:56:4d:eb:a5:91:48:1c:aa:
5f:50:3f:5c:ce:18:f5:6f:ad:0b:31:f5:12:07:b8:
77:2f:34:2d:55:40:6c:7f:aa:36:c9:00:1a:81:a5:
b7:2c:dc:50:31:29:3e:98:74:73:f2:1f:ab:e7:7b:
09:06:38:68:0c:39:fb:0b:be:8e:6c:f1:90:af:6f:
97:b4:3d:b5:28:59:9f:ad:8d:ee:76:05:77:ff:b9:
94:29:c6:40:6f:3a:07:8f:30:d5:1d:77:c0:c2:67:
7c:b5:8c:fa:0c:e6:b1:ad:a2:67:55:45:71:a8:5d:
9f:41:30:97:e0:fd:53:7e:3d:0a:a1:8f:da:69:ba:
72:14:41:1b:c5:dd:58:51:d0:11:05:16:fd:3b:2d:
1c:53:8a:78:ed:11:77:38:e8:fe:24:b2:54:42:10:
a2:5d:04:96:91:6a:f8:53:e5:a8:4f:eb:97:c4:22:
fc:c3:4f:5a:a8:cd:90:43:3d:d8:dc:1e:e9:c6:ec:
dc:a0:22:93:90:c3:3e:78:2f:2b:7d:72:6e:01:6c:
42:3c:f8:56:68:14:98:72:f3:7d:80:d4:a2:d3:f8:
50:61:f4:83:19:ea:e8:2c:1c:75:88:7b:99:ee:35:
f7:f6:3b:bb:73:25:b3:d0:22:a7:13:61:55:b5:44:
35:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:54:33:9A:36:F0:8C:3C:94:41:00:90:CC:E0:46:E8:69:DE:31:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0D7357A58D011F0815E3082DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.108.0/23
Signature Algorithm: sha256WithRSAEncryption
38:be:f9:85:56:b9:2c:72:60:9b:c5:78:a5:c6:a5:c8:33:f0:
a7:13:c7:63:7c:79:be:59:a3:1f:db:49:74:2d:cd:27:6e:8a:
e3:54:81:ef:9b:79:ca:fd:a0:e6:a8:13:77:f7:ab:58:3e:8e:
1f:a8:f0:8e:e7:43:34:4a:b9:6c:37:56:d5:f1:5b:a0:44:57:
36:86:15:b0:bb:e3:20:bf:01:ff:35:05:8a:0a:cb:76:f0:ed:
05:69:25:ae:fd:de:ba:29:64:ff:42:7e:b5:80:f5:87:b4:7d:
1f:16:90:6e:71:e5:41:90:09:2c:f8:24:db:04:ce:5e:52:97:
72:bc:5a:87:48:c2:89:02:ae:5b:80:74:21:06:f2:bc:fe:36:
f4:f4:4e:59:85:f4:4b:e1:0d:5c:ab:ab:ac:eb:89:24:1f:d8:
19:3e:30:e8:9d:2a:bd:c4:8a:4c:ee:83:1d:d5:82:96:50:2d:
2b:bf:f1:39:41:08:ce:d8:40:2b:ad:0b:b9:f5:6c:ac:9a:71:
06:50:f8:cc:1a:e6:46:8e:e4:23:80:6e:24:c5:be:7e:2a:bd:
0b:54:0f:1c:59:a8:2f:0f:bb:c8:73:5e:52:55:22:1e:a0:d9:
3e:e6:c1:a9:39:1a:0e:e5:10:92:f0:6f:b3:03:36:a5:28:a9:
ad:3d:c2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:35:31 2025 by rpki-client