Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00AE3762317B11F0B61BBF85DAE4EC9C.roa
File: 00AE3762317B11F0B61BBF85DAE4EC9C.roa (raw, json)
Hash identifier: iZq7Uh8fl1qcwZTvsBZmMlFH4uC3nJYqocbARWlDUWQ=
Subject key identifier: 1A:B2:C7:F5:AC:62:8E:1E:9C:C6:98:EA:81:33:A1:62:78:3F:81:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0154A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00AE3762317B11F0B61BBF85DAE4EC9C.roa
Signing time: Thu 15 May 2025 10:54:41 +0000
ROA not before: Thu 15 May 2025 10:54:37 +0000
ROA not after: Tue 01 Jul 2025 10:54:37 +0000
asID: 398443
IP address blocks: 156.229.176.0/20 maxlen: 24
156.229.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87207 (0x154a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 10:54:37 2025 GMT
Not After : Jul 1 10:54:37 2025 GMT
Subject: CN=6825c7f1-2988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a1:0d:16:9f:36:a7:75:08:53:64:f3:c1:0a:
d9:62:71:6e:03:63:58:1d:83:24:ff:6b:31:69:b3:
16:70:99:4b:7c:8c:7d:0c:9f:5c:b6:a3:5f:b5:6b:
48:8e:f0:63:9f:fd:4f:32:b1:ed:ab:05:a9:2a:da:
6c:23:08:9f:ef:a8:e8:11:58:e4:bd:41:ef:ef:33:
23:47:59:20:8c:9c:08:19:f4:6c:0e:06:0f:01:e7:
55:51:3b:09:12:c0:db:0e:82:d5:4e:4f:56:0a:1a:
79:a6:31:00:bc:83:b4:3a:c7:7e:09:a1:03:1a:88:
68:ac:1e:76:d0:3e:b7:11:b1:39:7a:b7:38:0d:b7:
de:cf:bd:ef:ec:5b:76:1a:0a:92:00:11:9e:c3:98:
ae:e4:e3:8e:4a:00:cc:71:13:d0:b1:0b:3b:5c:20:
a9:46:1c:d3:d8:c8:36:2c:40:54:3f:04:50:04:28:
07:7d:a7:df:a4:c1:92:e8:84:53:62:f4:aa:c8:be:
f3:9a:0a:7e:f8:18:68:1c:11:fb:cc:45:c6:bd:ce:
59:37:36:ef:b1:58:f4:49:ed:cc:c5:1d:a8:c5:65:
4f:bf:be:8f:42:ac:05:0c:3b:ce:b2:56:87:a7:a8:
e2:f4:5e:0d:18:b9:03:28:79:f9:86:de:fd:cf:23:
62:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B2:C7:F5:AC:62:8E:1E:9C:C6:98:EA:81:33:A1:62:78:3F:81:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00AE3762317B11F0B61BBF85DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.176.0-156.229.223.255
Signature Algorithm: sha256WithRSAEncryption
9c:1b:fa:d7:12:5b:d7:2b:7e:85:58:31:52:3d:39:58:ae:a2:
a6:6e:81:e8:47:1b:f3:9b:39:51:d2:47:86:43:16:cf:ec:8e:
86:50:2f:da:e0:c7:30:a0:0a:08:be:43:47:24:05:61:18:cb:
1f:c3:47:a7:29:db:e2:ed:ae:6b:6e:8b:1d:99:49:f9:4f:85:
fd:0b:bc:23:2a:b0:58:65:e1:a8:a0:1e:73:68:af:6f:81:3c:
04:5d:46:6e:48:49:76:a1:ca:a3:b0:a5:07:e2:7b:78:6a:8a:
be:76:96:62:35:8e:a2:97:c6:1a:b5:f8:5b:1c:bf:2f:33:30:
c6:11:fe:c5:6c:46:a1:f6:e9:80:07:4b:1a:a3:a3:38:4c:d0:
4b:c0:bc:bb:89:53:ec:66:fb:a9:79:53:21:3f:d1:69:83:8c:
61:99:b6:6c:3a:08:d4:3e:89:9c:df:38:54:67:48:d4:86:c7:
92:7e:1a:b1:0d:68:7d:b4:7c:ca:30:f5:11:ef:72:98:4a:73:
10:ff:68:fc:29:d1:bf:92:f2:fe:66:29:90:49:81:e7:cd:ba:
cf:7a:49:42:b5:43:86:aa:ea:97:c1:e1:0c:54:b1:c2:40:14:
75:16:b8:0a:fa:96:07:4f:01:7a:5c:cb:0f:a9:05:c6:52:c6:
59:a4:de:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:35:32 2025 by rpki-client