Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29AE5D683D5111F095E5188BDAE4EC9C.roa
File: 29AE5D683D5111F095E5188BDAE4EC9C.roa (raw, json)
Hash identifier: Ta03slegzHbs6Cc5HGGpUTaIECTsncWMgv+L47ZU5ik=
Subject key identifier: 30:7D:C8:3C:4A:8E:AC:43:98:7B:00:11:A5:CD:B9:99:1D:AB:C2:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0158D5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29AE5D683D5111F095E5188BDAE4EC9C.roa
Signing time: Fri 30 May 2025 12:25:25 +0000
ROA not before: Fri 30 May 2025 12:25:20 +0000
ROA not after: Sun 08 Jun 2025 12:25:20 +0000
asID: 133007
IP address blocks: 156.247.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88277 (0x158d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 30 12:25:20 2025 GMT
Not After : Jun 8 12:25:20 2025 GMT
Subject: CN=6839a3b5-fcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:31:4c:37:22:d3:e7:ee:a5:47:f0:21:9d:
6f:c2:03:01:6e:bc:cf:e5:3d:a9:82:6d:9c:71:62:
46:a2:39:b3:98:90:12:e9:87:29:dd:9f:64:47:e0:
37:ad:b5:32:ed:1c:11:5a:dc:9a:b2:6b:a3:83:cf:
5c:b3:e6:8d:46:55:d0:b7:31:86:7c:6e:6a:be:36:
c3:a4:5c:02:f8:3b:b7:08:47:d5:86:08:05:92:d5:
63:13:35:bc:53:0d:14:aa:67:66:d9:28:9c:0a:79:
9d:fd:79:72:f6:7c:1b:32:cd:f7:0e:cc:8f:e5:76:
da:ac:85:59:27:76:42:59:32:88:7d:9f:f7:90:c5:
da:2f:b9:bb:7b:9b:da:02:79:8d:99:cb:f0:3f:49:
b5:67:d6:66:03:61:f3:0f:fd:fe:cb:f5:12:61:51:
23:1f:f8:f5:dd:1d:04:0e:45:73:98:e7:c2:5f:13:
41:e9:00:1b:04:f1:11:70:c5:c9:82:55:1f:d0:25:
8c:7c:5c:29:27:e7:d0:e5:9b:d7:ef:76:9b:92:a9:
81:61:ef:65:4c:bf:27:c2:35:df:ab:9d:cb:e0:8e:
0a:5f:13:aa:cf:b9:fb:04:4b:a8:83:ca:ab:35:1e:
27:5a:48:7c:bc:e2:19:b5:18:39:4a:4e:d7:1e:75:
dc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7D:C8:3C:4A:8E:AC:43:98:7B:00:11:A5:CD:B9:99:1D:AB:C2:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29AE5D683D5111F095E5188BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.1.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:93:b3:d6:3d:d3:7b:df:58:b3:a9:52:0d:66:a3:c5:ef:56:
0a:20:77:71:3b:23:9b:5c:92:06:6c:4b:5c:22:79:8b:50:3c:
58:59:35:bd:f3:9d:48:7c:b7:43:96:85:fc:eb:39:2c:6d:3e:
fd:10:03:04:67:a1:0a:53:97:a0:c2:d9:9a:2b:3a:95:8d:8b:
58:b9:cb:f9:a5:44:ff:d1:88:0a:85:3e:19:fc:5a:69:af:b6:
c6:53:37:40:12:ae:d7:92:11:bb:af:dc:b9:05:01:71:8d:03:
22:47:e9:53:da:1d:b7:c9:e5:ef:11:9f:e3:f7:77:a2:5f:e9:
23:90:3f:90:ed:1a:3b:8e:21:4e:60:cb:cc:8f:8d:f3:06:d2:
92:6e:ff:73:1b:a5:b1:cb:7e:c8:ca:e8:f5:83:f5:e4:32:b2:
24:a4:30:0e:5d:9e:ef:50:73:c3:9e:f7:e9:b2:35:4c:09:2e:
bd:f7:bb:68:6b:f1:07:29:29:11:47:b4:87:ab:71:f0:49:d8:
01:79:bf:d8:3c:df:1e:ae:45:3e:ef:c0:41:79:99:bc:49:8a:
e1:48:2f:fe:ba:19:a4:b4:11:6a:dd:a2:b4:bc:3a:3d:8f:e1:
f9:1f:66:7c:03:e2:c5:cb:a3:a4:9a:a1:95:ca:d8:59:ff:64:
e5:e0:97:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:22:10 2025 by rpki-client