Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0985D5C43BAE11F096B35BE6DAE4EC9C.roa
File: 0985D5C43BAE11F096B35BE6DAE4EC9C.roa (raw, json)
Hash identifier: 1G/DdL2XSFC/QTTDv/l8Baf63gqNzSRTM6GZl/K+d2A=
Subject key identifier: DB:2F:61:FA:4F:17:DB:46:02:79:93:67:E4:CD:B5:99:44:78:7C:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015839
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0985D5C43BAE11F096B35BE6DAE4EC9C.roa
Signing time: Wed 28 May 2025 10:25:12 +0000
ROA not before: Wed 28 May 2025 10:25:07 +0000
ROA not after: Sat 07 Jun 2025 10:25:07 +0000
asID: 22773
IP address blocks: 156.238.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 12:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88121 (0x15839)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 10:25:07 2025 GMT
Not After : Jun 7 10:25:07 2025 GMT
Subject: CN=6836e488-0a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9f:fa:7b:50:c5:fb:70:cf:f4:61:35:16:77:
79:e8:82:9e:51:92:9c:02:10:84:71:34:9d:ae:b1:
9c:27:f6:c9:3d:64:9f:12:ac:4b:af:79:79:a5:49:
e3:ca:b7:d0:5b:c1:54:40:08:a5:92:26:de:3a:ac:
d3:94:fa:d2:97:9f:61:c1:0b:0b:65:03:70:dc:19:
9b:e2:88:75:95:66:21:62:1c:f7:20:ce:65:68:d9:
ab:9b:0c:3c:f3:9c:4f:0c:68:47:14:86:2b:17:6e:
d9:8e:b9:cd:02:a8:f0:02:42:2d:25:5e:0a:69:46:
d5:87:fb:9c:98:17:28:ab:04:18:61:09:ed:8e:f6:
72:3b:0e:83:d5:2b:9b:99:e7:cf:b0:8d:9e:9b:91:
ca:e0:62:78:d3:63:f8:32:26:22:ee:8a:96:aa:76:
57:92:31:fd:82:28:ec:84:d7:a9:e7:87:1b:41:2e:
c1:a6:9c:e7:91:ff:94:c5:49:34:aa:28:a1:b8:f8:
be:8c:2a:26:ea:14:0e:3a:c7:5d:dd:f8:2f:ca:bc:
59:de:88:d8:a6:82:cd:31:4f:1d:ec:bc:55:c2:f7:
ee:3b:19:40:46:96:11:cb:0f:fc:30:de:df:90:5c:
92:41:ae:2e:0e:95:92:ba:45:a7:29:cf:b2:f4:52:
f6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2F:61:FA:4F:17:DB:46:02:79:93:67:E4:CD:B5:99:44:78:7C:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0985D5C43BAE11F096B35BE6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.176.0/22
Signature Algorithm: sha256WithRSAEncryption
75:91:68:45:cb:47:5b:69:85:3f:7b:c2:c3:47:3a:03:7d:23:
ad:70:4f:8e:b0:5e:fb:f5:d2:5b:ec:d7:95:94:4b:1c:87:ba:
d5:be:ac:00:0b:cc:75:d2:b8:7c:c8:c4:9e:1e:99:f2:2f:6b:
48:4c:b9:57:7e:74:f0:10:2e:e0:7d:83:3e:cb:56:ef:82:d4:
a8:63:85:bd:94:70:26:b1:4f:38:21:e7:9c:e1:ae:f4:d3:87:
1f:4b:40:a5:e4:f5:ab:eb:e7:8d:1b:c7:7e:7c:97:7e:c3:0c:
07:cb:b2:1e:92:7a:ad:53:d5:d2:1a:99:3d:b4:69:69:98:b1:
9e:10:4e:41:15:24:3f:dc:46:3e:e3:ed:ee:b4:51:83:94:1e:
3f:ea:43:75:9e:9a:25:e3:23:80:b3:cd:9f:af:02:2a:21:80:
b8:c3:2d:c5:86:ee:11:57:2d:28:65:df:e8:58:7a:ec:70:af:
63:e2:6e:2f:88:0f:c6:ee:fe:ff:11:78:c9:ae:46:d1:b3:1e:
95:8a:43:78:ff:2e:cb:5c:3a:2f:01:8c:58:72:52:fd:f0:a6:
06:ec:56:dd:3a:c8:75:17:a2:58:3e:ed:a2:77:6f:72:76:61:
8e:fe:02:e6:ec:12:5b:54:b1:66:17:a0:f8:d0:de:ea:cb:42:
c7:45:f0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 02:03:34 2025 by rpki-client