Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC9DCD365AA711F09F2EABF2DAE4EC9C.roa
File: EC9DCD365AA711F09F2EABF2DAE4EC9C.roa (raw, json)
Hash identifier: x87YawF6HXS1zt2np+mCqqi9+6ISzGBTTU8FAaY6+kE=
Subject key identifier: B5:71:67:8F:61:87:B8:85:EF:07:CB:13:16:7C:F1:13:AB:9F:8C:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016285
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC9DCD365AA711F09F2EABF2DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 20:29:33 +0000
ROA not before: Sun 06 Jul 2025 20:29:28 +0000
ROA not after: Sun 24 Aug 2025 20:29:28 +0000
asID: 142032
IP address blocks: 156.239.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90757 (0x16285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 20:29:28 2025 GMT
Not After : Aug 24 20:29:28 2025 GMT
Subject: CN=686adcad-bf85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c7:e3:a3:62:40:6e:77:ae:f5:cf:8d:5a:5a:
67:7f:be:6d:e3:16:29:81:b4:d3:ef:ef:aa:2f:64:
81:e4:ca:17:92:63:84:f8:0d:55:7f:cc:1b:39:39:
16:5f:53:08:12:47:27:72:7c:68:59:09:76:99:f4:
c5:01:9e:3b:e2:a3:aa:f0:2a:66:0d:76:90:8f:dd:
5e:c4:17:1e:47:b5:39:b5:71:2f:ef:ed:13:39:4b:
3b:2a:f6:5b:5e:8a:33:6a:52:ad:69:a3:eb:b1:f6:
ef:78:d2:10:97:1a:ea:8a:25:f8:48:9f:6d:50:56:
95:20:7f:dc:f7:71:5c:c5:0e:a8:5b:28:36:4f:27:
8c:47:95:12:36:da:47:ed:b8:5e:1d:7f:72:64:29:
56:63:b2:f0:4c:c0:11:1c:b0:1a:cf:34:e1:33:a7:
40:ac:6c:e6:34:ec:e5:7e:90:3e:2a:9c:2e:e5:3e:
03:4e:9c:5a:8a:f8:95:b7:02:d6:ac:ad:6e:4d:90:
c4:0a:f6:6c:c6:de:c4:0c:62:cf:25:b4:4b:86:ad:
5e:72:b2:64:3a:7b:00:fa:6c:49:09:ee:39:74:7b:
2d:4f:60:31:52:dd:b0:d2:c5:1b:8e:8a:37:6a:75:
8c:62:b7:d9:13:23:40:7d:ca:50:7b:a9:d1:a8:94:
b1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:71:67:8F:61:87:B8:85:EF:07:CB:13:16:7C:F1:13:AB:9F:8C:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC9DCD365AA711F09F2EABF2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.52.0/23
Signature Algorithm: sha256WithRSAEncryption
61:02:d4:d4:68:99:33:0a:6c:d6:7b:42:a7:71:bf:30:0c:ee:
3b:f2:e6:e4:5d:1f:88:3c:1b:90:f3:c4:ca:75:85:81:6d:f7:
f2:16:38:d0:d3:3f:70:31:ce:a5:b6:af:b0:1e:d1:6a:54:ca:
98:03:26:65:fc:9c:c1:3c:9f:cf:a4:97:ae:b4:a3:ba:a3:69:
58:58:e6:61:e1:86:b1:82:f2:1a:9f:25:06:c2:09:57:a6:c2:
e8:f1:40:42:f3:12:55:fa:0b:2c:ba:d4:a4:c1:02:9e:6f:68:
1b:3e:02:3a:24:1a:b8:66:38:0f:d4:dc:a2:24:b2:af:a6:58:
14:c1:64:8b:28:f4:aa:32:b7:74:bc:4c:96:d7:46:f2:00:ea:
e9:6a:10:7c:3f:9f:16:1e:1d:2f:a8:25:a8:20:8d:1b:1b:c6:
35:44:98:59:16:51:3a:f9:be:31:65:80:e8:34:54:95:25:13:
88:48:7a:91:a4:20:40:5b:ab:1f:27:30:a5:33:7d:19:8a:e3:
3a:b4:34:af:e6:5d:38:72:40:ff:21:94:46:a1:29:a1:16:3a:
0e:8f:dc:5c:d6:ef:e8:0e:4d:ed:bb:80:56:40:d2:28:f1:55:
98:02:e3:bc:75:3a:35:97:44:d3:1f:61:d2:b9:9c:18:b3:ac:
15:76:b2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:27:02 2025 by rpki-client