Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14D38E4837EF11F08319E37DDAE4EC9C.roa
File: 14D38E4837EF11F08319E37DDAE4EC9C.roa (raw, json)
Hash identifier: vneS9kEb+5tu681BBSG6fgTz//eNfBmwmV9uvt0b/2k=
Subject key identifier: 44:E3:EC:B6:B4:DE:D4:DD:37:23:71:DA:7C:B3:D6:6B:AA:FD:C6:4C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0156F9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14D38E4837EF11F08319E37DDAE4EC9C.roa
Signing time: Fri 23 May 2025 16:00:44 +0000
ROA not before: Fri 23 May 2025 16:00:39 +0000
ROA not after: Sat 21 Jun 2025 16:00:39 +0000
asID: 153656
IP address blocks: 156.254.32.0/19 maxlen: 24
156.254.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87801 (0x156f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 16:00:39 2025 GMT
Not After : Jun 21 16:00:39 2025 GMT
Subject: CN=68309bac-7eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d3:e9:49:8a:cd:57:ea:c0:16:25:31:be:bb:
ec:96:19:8e:23:ca:1c:e5:25:a2:64:7e:fe:4e:bf:
62:b6:05:f5:67:eb:8a:bb:9b:c7:6d:74:ad:44:5d:
0e:ce:1b:59:91:2b:c1:e5:a6:7f:09:4a:7b:3f:f7:
1e:7d:03:c4:e8:a7:6b:7e:08:3c:39:54:98:e4:89:
cb:d0:f1:30:8b:f9:4a:38:bf:f7:f8:a6:fd:b7:bb:
58:be:96:12:c2:d0:e5:f3:3c:0a:0e:56:a9:b7:9f:
87:fd:b1:9c:a8:66:6c:06:c3:cb:f1:d7:ea:8b:f4:
fe:8e:db:b1:ce:83:06:10:c4:d7:a1:24:9b:44:17:
4c:60:8a:db:82:97:a9:74:13:9c:ef:61:03:81:ec:
ac:a5:79:da:38:d6:8c:d7:fd:df:51:b2:15:cb:98:
96:d1:e9:6f:ab:93:db:b1:e0:70:a8:63:3d:31:4b:
6d:38:c8:58:a5:4b:bc:52:d4:1c:78:87:b8:d1:25:
f4:94:31:f4:64:34:80:15:5d:eb:b8:e3:f5:92:d4:
6c:e8:3b:e4:b4:16:42:f2:86:34:9b:3d:f6:dc:60:
04:85:be:d6:72:71:9e:d5:a5:be:43:3f:03:2c:6b:
64:23:7b:7c:ec:7e:21:b3:01:3b:4f:29:b8:f8:d6:
20:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E3:EC:B6:B4:DE:D4:DD:37:23:71:DA:7C:B3:D6:6B:AA:FD:C6:4C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14D38E4837EF11F08319E37DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.32.0-156.254.95.255
Signature Algorithm: sha256WithRSAEncryption
4a:1e:55:a5:4a:f9:4e:77:78:ae:15:2b:cf:26:80:e7:d6:7c:
02:7c:10:6c:09:c1:b9:65:aa:f8:e8:d5:f8:88:81:fc:65:62:
48:3d:6e:8b:23:9d:f3:3f:31:09:be:72:66:30:5c:ea:31:43:
ce:b4:68:63:57:8e:19:25:f7:3d:be:56:1c:e6:98:67:6f:49:
e0:5e:07:63:23:4c:5f:66:3e:82:96:e7:2c:01:6a:0c:da:57:
3b:50:d9:30:aa:54:c0:bc:47:4b:05:b2:c3:ae:1f:e0:d6:00:
c5:01:87:05:34:5a:51:97:d0:cb:ff:da:cd:47:7e:82:38:35:
64:4f:03:32:13:5f:f2:9f:c2:ff:f1:41:93:ac:39:e6:ac:de:
b0:cd:13:5e:20:e3:24:50:9e:f9:ba:32:a7:d6:67:9f:8c:d7:
74:c5:e5:cd:15:3b:34:5a:58:aa:03:81:8e:d5:19:35:ac:3a:
0b:8d:de:1a:27:09:c7:ae:d9:02:0c:01:64:55:26:61:a6:40:
9c:82:33:45:99:58:ca:10:c9:5e:2d:8a:1c:cf:3f:05:ca:2a:
ac:ca:8b:d9:b9:67:b2:2f:3c:6a:61:2b:e4:e8:8f:6b:c0:8b:
84:19:43:23:90:02:75:47:97:27:a0:6d:2e:d9:62:b0:c5:7c:
04:68:a7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:44:00 2025 by rpki-client