Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED20A3B6609A11F08AD7228EDAE4EC9C.roa
File: ED20A3B6609A11F08AD7228EDAE4EC9C.roa (raw, json)
Hash identifier: QJeRD+ksajIvQmeZ2UoOFwbbpNgeJEP2zRWrr1cYpm4=
Subject key identifier: EF:00:02:25:6A:9C:0F:D9:11:55:ED:CA:93:F3:9D:95:23:A4:2E:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016508
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED20A3B6609A11F08AD7228EDAE4EC9C.roa
Signing time: Mon 14 Jul 2025 10:11:37 +0000
ROA not before: Mon 14 Jul 2025 10:11:32 +0000
ROA not after: Wed 20 Aug 2025 10:11:32 +0000
asID: 211265
IP address blocks: 156.231.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91400 (0x16508)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 10:11:32 2025 GMT
Not After : Aug 20 10:11:32 2025 GMT
Subject: CN=6874d7d9-6dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:49:e6:a4:a9:a9:77:ae:27:a0:63:a9:c0:c0:
1a:ee:c3:6d:36:71:27:8d:f8:03:c1:3e:14:73:3e:
a9:1f:c6:99:98:fc:70:35:27:cc:0c:97:df:53:55:
f1:16:8a:ea:db:7b:d6:ef:75:da:ec:4e:1e:5a:a6:
15:b4:37:ce:16:7d:78:80:ce:77:48:f5:ed:1e:bb:
35:a0:28:fc:b1:8e:c8:52:db:29:04:5b:16:4a:cb:
59:70:c4:8c:93:07:5f:d2:8a:a2:5f:52:4f:8a:73:
7e:4e:5f:59:a5:ae:8a:dc:a6:4b:14:19:06:e0:59:
8b:16:79:75:d4:f9:40:58:c6:45:c6:f3:d7:7b:70:
b9:5d:65:c0:a4:f4:d5:ad:91:25:e4:f9:59:df:c2:
72:86:dd:4c:76:d4:7a:26:c4:04:6b:8e:09:75:4c:
e6:51:c6:4c:26:13:b1:88:e9:2e:9c:62:89:dd:ef:
b5:c3:4f:4b:8f:27:d3:b2:38:78:f6:00:66:51:53:
e0:9c:0e:5c:f3:87:4b:82:ae:4a:f3:a5:53:ac:fa:
d8:3a:58:55:23:1c:f6:a6:6e:e9:97:3c:a7:06:2d:
0d:a6:bf:fe:64:8f:9c:32:39:f6:f9:e9:38:3f:79:
8d:86:6c:89:2e:33:bd:b1:4b:6e:e6:56:25:16:5c:
79:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:00:02:25:6A:9C:0F:D9:11:55:ED:CA:93:F3:9D:95:23:A4:2E:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED20A3B6609A11F08AD7228EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.163.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:11:69:7f:cf:b5:48:43:21:19:80:63:4b:e6:c6:13:5b:13:
bf:dc:43:4f:32:a7:c5:e6:da:bf:57:eb:d8:01:da:fd:fd:9b:
29:3b:5f:87:7b:40:0f:ff:0f:17:d3:00:1e:c3:48:7e:65:dd:
59:f0:4c:b0:79:93:a5:57:fe:1e:5c:d5:a6:d9:d1:42:c2:6b:
09:ca:af:51:8f:a4:f0:db:64:69:92:09:c0:93:52:ce:6b:ca:
c4:af:f0:a6:bc:85:d0:a3:dd:41:eb:ba:4d:cc:b0:0e:55:a3:
a0:25:80:d1:ee:c9:6d:17:7b:18:11:ae:d0:5a:85:61:71:70:
d2:87:23:f6:b6:8f:07:27:47:9d:5a:03:38:14:e2:9a:7f:84:
06:02:1f:38:8c:55:89:a0:ed:95:3e:06:1f:54:97:33:34:92:
f8:04:e1:77:e9:12:e5:cc:e0:48:1d:14:a3:dc:f2:7e:d2:a7:
b6:a7:0f:3a:71:90:95:e2:1e:7f:5d:29:4d:d7:96:9b:a6:51:
96:40:7b:69:1c:72:bf:dd:40:87:98:62:dd:02:c5:2f:ac:45:
45:af:04:66:af:39:29:c6:52:56:de:31:10:aa:36:f9:fb:91:
cd:45:a0:1f:fa:5b:7f:23:15:a0:10:0d:59:12:5b:7e:10:70:
9b:97:8c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:36:01 2025 by rpki-client