Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/225F9E62406911F08A75D2A6DAE4EC9C.roa
File: 225F9E62406911F08A75D2A6DAE4EC9C.roa (raw, json)
Hash identifier: zWCaKkyEhccJeDxOribzzcsvBMQfp82DXmeJFMObI9Y=
Subject key identifier: 8D:41:6B:82:11:17:B2:8F:82:CE:DE:A7:2F:BA:57:4A:0C:4E:8F:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01597C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/225F9E62406911F08A75D2A6DAE4EC9C.roa
Signing time: Tue 03 Jun 2025 10:54:34 +0000
ROA not before: Tue 03 Jun 2025 10:54:30 +0000
ROA not after: Sat 06 Jun 2026 10:54:30 +0000
asID: 133007
IP address blocks: 156.247.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88444 (0x1597c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 3 10:54:30 2025 GMT
Not After : Jun 6 10:54:30 2026 GMT
Subject: CN=683ed46a-4c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:c3:37:8c:a0:87:c6:ee:e6:30:b4:72:bf:
02:f5:e6:ee:6f:84:7d:f2:82:05:19:5c:cd:26:e8:
8b:8f:48:12:1d:bb:ce:3a:f6:72:4b:0e:2c:3e:ff:
e4:be:ce:de:08:43:73:16:32:0b:6d:74:28:d7:9c:
f4:4d:8e:38:f8:c6:fb:f9:d0:e0:4e:90:13:3b:68:
79:f4:8f:1f:1e:e6:e9:d8:98:20:58:de:df:83:a4:
71:81:e6:a6:3f:34:e4:e6:49:28:70:a0:9f:cc:73:
9f:4b:4f:5c:e0:2a:cb:43:30:90:9c:33:d5:db:75:
8c:cb:13:fc:dc:a1:18:9d:22:c8:36:5f:2b:7b:2d:
e3:1b:f6:2c:d7:8d:dd:0e:0f:1a:19:d2:96:da:2c:
4e:90:38:30:23:f6:ff:96:9e:c7:99:01:fa:64:27:
38:a8:f7:89:ee:d5:f1:98:16:47:19:ec:3f:7c:de:
e0:a2:6c:35:1a:a0:a5:04:5d:ef:ba:4c:91:ee:ec:
3d:f9:e0:8f:8b:a0:21:af:24:3d:dc:c4:9f:cb:37:
38:cd:e9:1e:01:e2:ee:b3:b0:13:be:8a:93:bb:c9:
c0:42:cd:b3:c2:4e:71:fd:a9:b5:4d:e5:58:28:72:
f6:cf:86:53:96:a7:2b:4a:5d:7b:62:c5:44:57:70:
54:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:41:6B:82:11:17:B2:8F:82:CE:DE:A7:2F:BA:57:4A:0C:4E:8F:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/225F9E62406911F08A75D2A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.1.0/24
Signature Algorithm: sha256WithRSAEncryption
37:71:f6:1f:1b:6d:a1:99:36:66:49:3c:f8:23:ec:96:77:f5:
3e:c4:1a:eb:08:1c:87:d3:ee:85:42:ca:51:a0:54:d9:bd:0e:
90:c4:dd:11:2e:44:63:35:95:89:26:d6:5f:73:2f:e6:c7:df:
47:18:1b:72:21:6c:d5:a5:e0:eb:a2:dd:72:76:d1:6a:13:13:
da:5e:f2:4f:8c:8b:a5:76:e1:b1:14:dd:90:c6:d0:6e:d0:ef:
8a:27:f9:94:0b:d8:43:4d:32:f0:17:50:69:67:2c:d8:da:8d:
75:52:f9:2b:91:ef:ed:88:cd:0b:88:2c:a7:29:c0:66:94:75:
a5:22:5c:42:65:aa:5e:24:62:78:de:c7:cf:62:7f:54:79:69:
90:87:e7:86:37:86:94:72:95:bc:38:1a:76:2e:e9:ad:a1:17:
a9:a5:6c:5c:67:ba:d2:6b:aa:92:ab:d2:81:cb:29:6a:39:37:
f4:cd:5c:a1:db:46:41:1c:c0:f5:91:df:11:9f:98:50:d1:df:
62:51:4e:40:cc:57:b8:9b:9a:5c:f5:1d:50:93:c3:51:06:53:
bb:01:20:71:46:99:16:a7:90:b8:99:5e:d0:4f:8b:2e:94:9c:
bb:d1:f3:97:69:1a:24:bc:be:66:b7:13:58:db:7b:52:ef:fc:
c4:b8:f7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 14:29:02 2025 by rpki-client