Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/129EC5D43BB911F086332DADDAE4EC9C.roa
File: 129EC5D43BB911F086332DADDAE4EC9C.roa (raw, json)
Hash identifier: k9KUTvibzatnlIrotVCn0VbNLvIaBl5kxTQk/+8S4U0=
Subject key identifier: B0:64:F3:F9:52:78:E1:4C:F5:62:3D:B0:AF:80:E0:2C:3D:DF:E0:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01585C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/129EC5D43BB911F086332DADDAE4EC9C.roa
Signing time: Wed 28 May 2025 11:44:12 +0000
ROA not before: Wed 28 May 2025 11:44:05 +0000
ROA not after: Sun 06 Jul 2025 11:44:05 +0000
asID: 48031
IP address blocks: 156.236.22.0/24 maxlen: 24
156.236.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88156 (0x1585c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 11:44:05 2025 GMT
Not After : Jul 6 11:44:05 2025 GMT
Subject: CN=6836f70c-6d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:a1:5b:b7:d4:42:da:61:88:6c:75:d1:3f:
28:a1:6e:60:90:93:53:78:30:b2:4c:1c:ba:23:d9:
16:5c:77:4c:51:f1:25:ad:34:3a:d1:a4:43:ad:ea:
fa:60:14:b4:bc:dd:0b:e4:3f:9f:6d:b8:f6:12:25:
08:b2:0d:b0:35:98:66:76:1b:db:67:f7:68:a7:93:
d9:09:af:d8:45:dd:ff:09:a0:75:c6:a6:14:59:85:
d1:54:48:d4:b7:3a:2d:cd:a7:29:37:8f:0e:3d:01:
e1:38:e5:26:8b:2c:5f:6a:12:75:df:27:54:49:4c:
a8:f2:07:8e:64:e2:c1:16:ba:84:aa:4c:dd:c4:b8:
ff:12:77:fc:e2:db:01:77:12:c4:e5:30:3a:32:ee:
ba:46:ac:fb:e5:7a:5d:2c:65:b2:09:e4:1e:b2:a3:
85:8c:07:0d:13:fc:17:2e:fa:43:05:17:09:4a:4e:
a2:73:7b:8b:53:12:12:c3:d8:47:8a:14:42:41:ac:
05:01:7d:f5:00:8d:c3:8a:74:a4:c1:ae:c7:48:0d:
bf:cc:5c:9d:e1:48:87:a6:9b:a7:66:b7:29:d3:f5:
83:6b:01:d1:18:a4:b9:b8:bd:11:a6:67:6b:04:00:
cd:b9:b9:46:2e:c0:81:41:22:93:ad:f0:94:b0:75:
28:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:64:F3:F9:52:78:E1:4C:F5:62:3D:B0:AF:80:E0:2C:3D:DF:E0:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/129EC5D43BB911F086332DADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.22.0/23
Signature Algorithm: sha256WithRSAEncryption
90:6c:91:f6:f5:e3:78:98:da:38:49:14:e2:3b:ef:e6:7f:d0:
ed:7c:57:8e:c3:b3:04:58:3c:bb:59:13:84:30:28:0d:96:f0:
cd:26:c9:46:7f:b7:8e:27:e2:92:b4:ab:fc:70:ea:21:f4:a2:
fe:ff:53:2f:28:ce:d1:65:d7:f2:98:9c:17:4c:39:05:ef:41:
25:1e:d6:af:cd:9a:30:8a:d1:43:04:b8:c2:f9:bd:bf:cd:c3:
03:1d:3e:42:bb:7a:7f:06:24:69:eb:16:c2:62:ad:b3:4c:45:
93:51:bd:d2:15:09:1e:ce:ef:31:fb:e4:e1:f5:b8:2a:a0:92:
78:ba:db:ec:55:99:30:2e:95:5f:4a:fd:91:fc:4b:5c:b6:6b:
3f:5e:bf:05:7f:31:e9:e0:24:d5:5e:f3:07:b0:4f:57:55:1e:
41:86:a2:51:16:67:69:a4:d1:b1:85:b6:b6:76:dc:f3:d7:7e:
8b:df:4c:c5:19:45:91:fb:88:34:89:f1:ff:14:62:16:fc:57:
10:7d:8f:84:f3:fd:9c:d7:39:12:e7:f6:0f:5d:eb:ab:b2:58:
71:61:58:f9:d4:70:e4:9f:a8:88:e8:22:fb:fb:74:81:08:be:
e1:ce:bd:bc:17:e4:4c:80:9d:a6:d2:02:92:d5:4b:01:85:a1:
c8:9d:76:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 02:01:09 2025 by rpki-client