Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFAAE85C617D11F091871ED0DAE4EC9C.roa
File: DFAAE85C617D11F091871ED0DAE4EC9C.roa (raw, json)
Hash identifier: 5EiYu8tCsllj4TBTQ5akV597aBOavVui07CDi97y3ak=
Subject key identifier: 63:20:41:C5:AF:27:E5:77:26:A0:2E:FA:88:79:B0:C6:67:29:38:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016557
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFAAE85C617D11F091871ED0DAE4EC9C.roa
Signing time: Tue 15 Jul 2025 13:16:10 +0000
ROA not before: Tue 15 Jul 2025 13:16:05 +0000
ROA not after: Thu 21 Aug 2025 13:16:05 +0000
asID: 14315
IP address blocks: 156.224.64.0/22 maxlen: 24
156.224.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91479 (0x16557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 15 13:16:05 2025 GMT
Not After : Aug 21 13:16:05 2025 GMT
Subject: CN=6876549a-428e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5c:e2:6e:a3:61:6c:a9:23:e4:5a:67:96:60:
36:db:16:4d:54:4a:44:74:08:44:43:e0:4f:e0:55:
69:aa:f0:09:0e:cd:5b:ff:5a:e7:ff:5e:50:0c:9d:
7e:49:e2:f4:56:d2:dc:8e:8c:be:b2:8d:6d:a8:86:
50:e6:c2:19:f1:1b:f8:54:18:ba:03:d4:9d:b0:c5:
de:8c:50:f9:9a:6e:48:34:eb:e0:b5:6c:74:53:9f:
3e:45:55:4c:82:9a:93:db:eb:5a:bf:08:31:75:5a:
b0:77:7a:6e:3b:f0:38:96:35:2f:95:b9:b1:30:26:
27:17:6e:fe:32:fe:bd:94:4b:d3:a5:24:e6:0f:88:
ed:08:27:88:b0:bf:51:c4:55:16:c5:ed:06:d7:01:
c9:0b:81:b9:dc:a7:a4:81:cb:18:6f:74:34:52:07:
22:4b:c4:bd:79:2f:b6:5c:d1:30:a1:27:4f:41:b9:
3d:ce:38:e0:a4:41:cd:bc:d4:a3:1d:e4:99:46:1f:
9a:1e:08:25:8c:45:56:46:96:31:5c:8e:87:c6:44:
c4:8b:4d:bd:85:a3:a6:08:83:c2:6b:fd:39:20:d6:
6e:e4:95:7e:5f:02:c0:16:4b:96:ed:c0:eb:04:86:
e6:f6:9b:14:d5:24:bb:ee:40:ab:4d:38:2e:a4:70:
ce:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:20:41:C5:AF:27:E5:77:26:A0:2E:FA:88:79:B0:C6:67:29:38:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFAAE85C617D11F091871ED0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.64.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:9b:1d:4b:07:bb:ae:5b:1b:80:9d:a5:aa:46:0e:3a:eb:bd:
3b:a6:a3:5e:bd:ae:92:8e:3c:54:ab:67:40:01:b9:5b:67:ac:
49:10:bf:6a:3c:2a:85:fd:bf:1a:ef:61:f8:9f:d0:f5:28:03:
da:c6:bf:f7:b7:07:6f:4d:bb:4d:81:2e:48:91:a6:c4:14:c8:
90:40:e2:95:a5:23:e6:0d:47:dd:e0:a9:4c:9a:8f:d7:40:b5:
d1:4b:e4:d2:2e:1e:33:0f:da:af:49:1e:99:ca:c8:62:6e:bd:
c5:9d:ed:89:53:03:98:e9:cc:9f:db:79:8c:da:0d:70:ec:16:
2c:33:bd:3a:e1:19:22:bc:97:02:8e:7d:a7:cd:63:59:64:29:
c4:52:bf:35:6f:3b:47:7a:f3:6a:a4:8c:62:4f:4f:44:39:21:
b3:04:41:d5:a6:32:72:00:66:d3:1e:e4:66:09:62:2c:09:02:
f7:be:45:51:12:b6:9c:4b:28:71:41:f8:38:29:e5:ad:ff:a6:
90:fc:91:ce:b7:d1:00:80:ae:3a:75:1d:3d:7e:09:3a:3d:82:
b8:96:40:ec:fb:19:22:e4:45:9e:14:53:7c:7a:43:e4:f3:ca:
32:ff:48:fc:56:c3:f0:fa:a0:65:66:69:64:d3:79:37:e4:b8:
e9:46:a8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:21:09 2025 by rpki-client