Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15B8E5AA557D11F0A53A79DEDAE4EC9C.roa
File: 15B8E5AA557D11F0A53A79DEDAE4EC9C.roa (raw, json)
Hash identifier: 3YkFUEMJ9UgzYfzf/HWHZH39cocou0s/7L4M4zg1RpI=
Subject key identifier: 14:08:BA:56:46:1F:9A:56:DD:7C:7C:83:D6:76:F4:5A:F3:4F:35:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F79
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15B8E5AA557D11F0A53A79DEDAE4EC9C.roa
Signing time: Mon 30 Jun 2025 06:40:18 +0000
ROA not before: Mon 30 Jun 2025 06:40:13 +0000
ROA not after: Fri 04 Jul 2025 06:40:13 +0000
asID: 22773
IP address blocks: 156.238.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89977 (0x15f79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 30 06:40:13 2025 GMT
Not After : Jul 4 06:40:13 2025 GMT
Subject: CN=68623151-27cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:ef:be:84:9a:70:50:4b:8b:d1:d9:5e:2e:
e7:92:73:92:70:48:d8:6b:f9:3f:68:1a:6f:7c:be:
b2:53:43:d9:71:88:ab:c2:44:4a:1a:5b:86:d6:da:
d3:24:75:be:fa:67:f1:c7:db:1f:a8:92:39:88:21:
7e:0b:9c:3d:4c:03:f3:06:ab:a7:63:33:19:59:d5:
cb:69:e4:32:4d:33:4f:0d:62:61:fe:1d:e9:20:a0:
41:07:a4:4f:14:d3:91:f8:0f:d9:35:ef:2d:11:bc:
92:c7:cd:f5:6d:27:8a:00:4b:91:61:82:d3:e3:de:
af:13:3b:ee:ad:39:b9:ac:68:af:c7:01:5f:fc:2f:
16:83:5d:89:9c:9b:15:60:0f:c9:88:56:b2:4e:4f:
b7:82:45:17:f0:63:08:7a:57:49:ee:34:96:21:df:
e7:6d:cc:7b:6d:79:42:34:2d:42:3b:80:81:4f:34:
c1:4f:fb:5d:30:70:44:d4:6d:2f:26:12:dd:bc:01:
6a:a8:cb:0b:ca:48:d2:36:3f:f1:36:b9:50:26:f0:
c8:d1:a7:6c:fa:f6:81:0a:a0:a9:ae:41:4e:a0:eb:
4b:42:40:a1:43:28:51:bd:51:66:62:d7:b9:40:20:
3f:85:ff:f4:0b:6b:d4:26:66:02:c5:48:73:5e:80:
9a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:08:BA:56:46:1F:9A:56:DD:7C:7C:83:D6:76:F4:5A:F3:4F:35:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15B8E5AA557D11F0A53A79DEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.176.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:bb:73:bb:ff:12:ef:bb:2f:1c:8b:87:b7:72:31:dd:14:eb:
bf:ec:fb:e1:fa:70:37:5f:d0:82:ef:fd:00:09:20:be:e6:be:
fd:d8:27:19:40:bb:66:da:84:a3:e0:af:19:f9:67:b0:01:c6:
e3:96:d2:4f:e3:c0:ee:91:d2:04:cd:c2:95:55:25:28:2a:3c:
e3:1c:4e:71:16:f8:11:77:91:d3:b3:c6:fd:4e:8a:98:66:25:
ed:69:2e:cd:a4:44:b5:7f:39:cd:37:95:2c:20:f7:d9:19:59:
5c:b5:c8:9c:77:bb:c3:3f:b0:4f:0b:8f:d3:2b:93:08:0a:3f:
63:f6:24:f0:28:74:c7:4f:d8:98:df:f0:e4:75:b2:92:2d:76:
56:e1:31:32:5d:42:6c:06:aa:49:62:0e:90:1c:88:49:bd:df:
50:0e:c6:21:d5:63:e0:42:bb:1e:cc:05:63:95:b0:fd:8d:12:
85:84:4b:48:8f:13:50:2e:71:aa:5a:fe:11:c0:53:c1:5f:0a:
47:8e:3b:bb:07:6e:e5:5f:af:17:8d:24:c5:b0:08:2d:fc:0d:
29:be:77:34:c7:66:ec:e2:4f:31:a3:76:43:ab:5f:ad:72:f7:
5e:15:10:0f:a3:7f:e8:ca:65:8a:47:11:b0:ca:d2:38:55:b0:
39:f3:27:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:36:47 2025 by rpki-client