Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C7FB8CA712211F084E0F1C3DAE4EC9C.roa
File: 2C7FB8CA712211F084E0F1C3DAE4EC9C.roa (raw, json)
Hash identifier: 1KvPS/9W8ogqGLO+gnmkyYsaMvSp1i6UsyHDZlwwdvI=
Subject key identifier: 89:44:70:E2:B7:53:6F:4C:5A:DD:E8:3F:ED:0E:DB:25:AE:A1:BC:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01692A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C7FB8CA712211F084E0F1C3DAE4EC9C.roa
Signing time: Mon 04 Aug 2025 11:00:04 +0000
ROA not before: Mon 04 Aug 2025 10:59:59 +0000
ROA not after: Thu 11 Sep 2025 10:59:59 +0000
asID: 29802
IP address blocks: 156.238.117.0/24 maxlen: 24
156.239.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Aug 2025 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92458 (0x1692a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 4 10:59:59 2025 GMT
Not After : Sep 11 10:59:59 2025 GMT
Subject: CN=689092b4-eca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7f:e2:93:f3:57:e7:ac:10:77:16:3d:b6:57:
53:da:08:04:50:3d:12:13:e3:b7:e1:ca:93:37:0b:
20:63:36:4d:f0:36:2c:ab:94:29:70:3d:a4:5e:3e:
4d:d1:f7:5c:53:4d:81:c0:05:08:4c:64:e5:77:86:
3c:78:99:2b:6f:0c:d2:7f:12:d1:b7:c4:bd:3a:be:
88:e8:c9:b6:58:95:e7:54:24:b5:27:4b:37:63:ef:
82:7d:e8:97:ea:cb:61:6a:4c:f5:ad:cb:3d:c3:35:
1a:e1:02:58:23:6e:72:c6:11:36:ce:d9:68:2f:de:
fa:8e:97:8b:f2:68:ab:0f:89:c4:16:89:cc:3c:f3:
0b:c5:f1:7d:f9:17:2a:45:5e:c2:aa:b6:fb:7f:6a:
33:2f:a9:e5:d2:e1:e7:6f:e6:2b:84:a5:0c:3e:b2:
43:cf:9b:6a:c3:8b:90:d0:67:99:16:d2:95:5c:0f:
dc:c0:0d:3c:88:71:ae:d7:89:58:5c:4b:36:e8:2b:
3b:04:2c:f9:e7:7b:3b:84:5b:2c:5d:af:31:b7:3f:
9b:76:cc:e8:ef:29:28:54:72:bb:1a:70:2f:28:7b:
6f:f5:25:bc:0d:59:3d:10:2e:b5:a6:2d:0c:c1:8e:
d1:56:8d:44:5b:ce:5c:21:53:27:c6:70:0b:88:96:
ce:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:44:70:E2:B7:53:6F:4C:5A:DD:E8:3F:ED:0E:DB:25:AE:A1:BC:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C7FB8CA712211F084E0F1C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.117.0/24
156.239.54.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:05:be:7d:25:74:2c:79:18:f5:5b:d1:10:6f:fb:ae:07:e4:
d5:80:71:38:75:69:b5:c3:28:28:63:2b:20:8a:d0:3a:ac:48:
99:11:c0:9c:03:d0:79:5c:fe:0f:90:0f:3d:53:2c:58:a0:9f:
6e:cc:39:cb:1a:f9:6c:2b:4f:0b:d4:c9:d5:31:1e:4e:c4:7a:
30:06:12:32:85:61:3c:22:23:bb:18:44:66:85:7d:e5:b6:51:
38:46:45:16:f1:7e:84:e1:fa:08:2a:21:22:00:55:18:a4:39:
ff:a5:a6:98:03:c2:fb:37:4a:44:3a:6d:68:4e:40:98:8a:2a:
81:4c:d3:5e:f9:d8:ce:ff:32:d2:4d:20:29:d1:20:6c:74:81:
61:72:65:e0:c2:a5:36:35:bf:7c:5e:78:66:07:d1:18:4b:be:
f5:07:78:dc:bc:fe:2a:da:f8:0d:14:43:92:b0:89:58:44:aa:
19:c4:94:7c:a6:b5:b3:68:7f:1f:50:36:8e:72:ae:8e:d2:28:
59:3b:a0:ad:c8:e6:83:a6:f0:5b:88:ec:45:01:0e:7c:e6:31:
cf:1b:86:7b:fb:1b:4c:ac:30:26:87:ef:93:4b:22:2c:3d:4a:
9d:8a:6e:34:cf:b7:e7:ab:aa:27:d8:32:7d:1a:ee:19:6d:5e:
02:0d:88:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 11:12:08 2025 by rpki-client