Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D1C91442FC411F080882A8FDAE4EC9C.roa
File: 2D1C91442FC411F080882A8FDAE4EC9C.roa (raw, json)
Hash identifier: MiBppZwrULPQ3HZDpdeqMDsARK5urVFfgqqBnPxP5Nc=
Subject key identifier: DB:D6:E5:F3:CA:8C:82:94:AF:83:8A:62:A8:F4:7C:47:25:AD:5D:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0153C8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D1C91442FC411F080882A8FDAE4EC9C.roa
Signing time: Tue 13 May 2025 06:33:27 +0000
ROA not before: Tue 13 May 2025 06:33:22 +0000
ROA not after: Wed 13 May 2026 06:33:22 +0000
asID: 140951
IP address blocks: 156.227.144.0/24 maxlen: 24
156.227.218.0/23 maxlen: 24
156.227.244.0/23 maxlen: 24
156.231.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86984 (0x153c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 13 06:33:22 2025 GMT
Not After : May 13 06:33:22 2026 GMT
Subject: CN=6822e7b7-6a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2d:67:12:5a:1c:f5:cb:47:c2:61:8a:2a:85:
3d:4c:c5:51:17:87:1a:86:fa:cf:31:ef:5e:78:81:
d1:0c:f1:ac:b5:52:f2:13:06:0b:4a:13:6e:5a:d0:
ed:4a:07:36:fd:01:e8:1f:cf:b9:7c:2c:91:2c:9b:
78:8e:15:10:27:fa:a7:98:89:df:c7:e2:e4:a9:5c:
8f:b8:f0:40:9c:45:01:c0:d3:46:46:98:72:5d:68:
85:51:89:be:1e:46:7d:cd:65:42:ab:03:b0:58:1f:
bb:48:21:6f:cb:92:7a:51:49:a0:c6:91:84:54:ab:
11:3e:8a:94:32:86:ae:20:27:4f:74:c5:11:af:39:
5c:f4:2b:24:d8:75:99:4d:97:df:1f:99:cb:d1:5e:
2f:29:6c:80:83:30:76:a8:9a:5c:be:da:61:27:74:
ff:7e:7f:5e:ae:14:d1:f3:66:0b:f1:c3:02:d3:fd:
cd:2b:4a:fe:3a:49:9c:9c:37:7e:64:c3:e4:9b:8b:
25:2d:f7:90:7a:25:d3:cf:6b:21:62:94:f7:cb:52:
68:4c:70:1a:aa:ea:c0:52:94:3d:62:ad:d2:ed:82:
76:1a:51:d0:2b:22:66:10:97:4d:53:b1:ea:30:be:
b8:d0:f2:f2:60:7c:dc:66:fa:e3:5c:b1:eb:ea:85:
e5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D6:E5:F3:CA:8C:82:94:AF:83:8A:62:A8:F4:7C:47:25:AD:5D:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D1C91442FC411F080882A8FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.144.0/24
156.227.218.0/23
156.227.244.0/23
156.231.56.0/23
Signature Algorithm: sha256WithRSAEncryption
06:cc:df:23:ff:15:22:fd:8c:84:bd:89:4d:9c:69:4a:ee:e6:
47:2b:e3:49:9f:f7:bf:77:f7:8b:43:eb:55:9a:c2:cb:8c:37:
c4:f3:1b:1c:3b:f6:d1:93:77:df:86:cb:6a:68:51:f8:5d:90:
b8:ad:78:b6:86:f9:86:5a:ad:13:34:e2:d6:3c:b7:8e:3a:15:
4f:19:2c:c6:38:72:5b:87:da:a7:9e:e7:cf:6e:f8:5a:62:54:
9c:44:85:be:ac:2a:ff:85:65:70:1a:06:15:2d:c0:58:27:e3:
02:74:76:fa:ce:ac:98:be:35:c2:76:5a:71:09:65:de:7a:dc:
0d:ce:e6:76:83:e4:b0:99:cc:93:ba:bc:11:80:1a:dc:10:ca:
39:41:33:51:43:80:9c:c3:23:8b:50:9d:f1:b6:13:62:37:d8:
c7:a2:76:7a:76:1e:f5:7d:65:95:e4:85:7a:a2:ea:66:5e:c2:
bf:08:35:63:95:6c:53:4c:d0:1f:6e:93:1e:56:63:0a:e0:cc:
63:d5:3f:26:1c:d0:28:30:aa:0d:32:78:cf:e4:dc:53:5c:8a:
17:4e:08:d9:05:a0:5f:eb:09:f9:c2:57:58:11:46:5e:a2:09:
b0:d4:70:d0:a5:62:e3:95:a3:1a:b3:29:7f:4c:bc:95:38:2c:
4f:c4:25:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:22:05 2025 by rpki-client