Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DACE3F56590C11F0B20B5F82DAE4EC9C.roa
File: DACE3F56590C11F0B20B5F82DAE4EC9C.roa (raw, json)
Hash identifier: hxXZzHMUZC268xL2giLGSIzmxKf6c9U6pZ5lBB7Xyjk=
Subject key identifier: 0E:81:9A:80:2E:87:EB:F4:81:B8:F7:0C:AE:62:CB:00:2B:87:31:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01613A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DACE3F56590C11F0B20B5F82DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 19:27:00 +0000
ROA not before: Fri 04 Jul 2025 19:26:54 +0000
ROA not after: Sat 06 Sep 2025 19:26:54 +0000
asID: 44901
IP address blocks: 156.229.125.0/24 maxlen: 24
156.229.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90426 (0x1613a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 19:26:54 2025 GMT
Not After : Sep 6 19:26:54 2025 GMT
Subject: CN=68682b04-91c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:42:11:e8:27:59:19:1b:88:c4:96:71:42:
77:74:d9:15:44:95:37:4d:5b:46:76:c7:a4:1a:c5:
61:40:66:d6:21:2a:8f:ca:08:15:ed:08:28:0e:14:
39:53:8a:72:ff:8a:bc:02:ec:6f:c6:a9:de:e5:40:
87:88:ec:ba:68:51:8f:f6:22:ed:f4:f5:51:bc:0e:
13:95:e4:b2:d8:33:32:1f:1b:eb:78:8d:2c:dc:25:
60:4f:fa:25:1b:c5:c4:34:a3:64:c6:f4:41:8f:0b:
24:23:11:3d:4f:48:3c:c0:e4:84:83:e0:27:ca:04:
80:2f:a8:f6:38:9a:e3:b0:ba:fd:76:20:cd:d3:e1:
ac:54:59:9a:29:7f:60:25:24:60:f3:70:3c:59:43:
9e:3a:07:46:77:a0:cf:97:a3:b3:c4:79:bd:5b:8e:
01:6f:1a:ad:76:4f:56:56:6a:84:3c:13:86:97:42:
49:18:0c:51:40:09:de:b9:74:6b:db:66:98:98:4f:
3e:56:ce:95:9b:ed:cb:4d:48:c1:82:61:7e:7f:d7:
3b:c6:4a:94:9e:0f:eb:0c:c4:ef:11:44:66:41:5f:
5b:10:09:76:6c:6b:09:86:04:5a:a5:1d:51:45:e0:
a7:e9:c5:f0:12:06:57:11:98:04:ab:a1:96:46:0e:
06:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:81:9A:80:2E:87:EB:F4:81:B8:F7:0C:AE:62:CB:00:2B:87:31:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DACE3F56590C11F0B20B5F82DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.125.0/24
156.229.239.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:ce:ee:64:ef:c2:9a:69:98:79:70:a6:58:e6:86:e3:55:c1:
c9:c9:37:de:de:59:27:44:f4:5b:de:05:dc:2d:d3:d5:47:d6:
cb:fc:d5:5d:e5:ed:c1:bf:80:2d:dc:e9:2f:16:a8:59:f9:4c:
0d:20:fb:ef:c4:69:6c:be:68:b0:bb:b8:c5:a4:6d:92:c5:47:
48:c9:2c:71:5b:e4:5f:98:ae:67:3d:15:1d:5c:1d:9b:f4:16:
93:e6:36:53:c6:62:08:a2:9c:74:40:53:35:8f:f2:20:09:6f:
b8:f9:4d:82:4e:d6:96:fa:bb:b8:6f:07:94:18:06:a4:07:4c:
72:e6:2c:d0:c5:fc:9f:ae:c1:66:4d:3f:8e:d9:c4:36:44:ca:
cc:bc:a7:c9:d4:19:ca:b9:6b:e4:0c:ef:5d:5f:99:60:ad:01:
a2:e2:c2:51:c3:e6:a4:95:7c:33:7c:8d:10:9a:96:b5:69:06:
8c:6d:29:d3:21:5e:29:21:50:38:7a:2a:9d:03:3f:92:d0:2d:
aa:60:21:31:f6:a2:f5:74:9c:1a:c7:a2:94:90:cb:6d:9b:76:
e5:ad:a2:3e:ff:f7:68:6f:20:12:c9:7f:2e:17:6e:80:0e:de:
fe:db:7e:8a:bb:55:5b:af:bc:4a:41:33:78:b2:30:9c:14:5a:
01:69:4c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:29:40 2025 by rpki-client