Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FCBD98428B911F0A59D0BF0DAE4EC9C.roa
File: 2FCBD98428B911F0A59D0BF0DAE4EC9C.roa (raw, json)
Hash identifier: kscRSVSCI/1DVhfIWSjfOCmg5q5kdrKjgzLGI1BZmII=
Subject key identifier: 87:47:B8:A3:63:1D:7A:83:AB:50:06:8D:CA:CD:46:A0:1E:46:03:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0151C2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FCBD98428B911F0A59D0BF0DAE4EC9C.roa
Signing time: Sun 04 May 2025 07:27:09 +0000
ROA not before: Sun 04 May 2025 07:27:04 +0000
ROA not after: Tue 10 Jun 2025 07:27:04 +0000
asID: 137899
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86466 (0x151c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 4 07:27:04 2025 GMT
Not After : Jun 10 07:27:04 2025 GMT
Subject: CN=681716cd-1f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2f:73:8a:23:03:3d:d9:90:36:f9:0c:ab:c7:
34:fc:8c:a3:5f:09:eb:65:32:ed:de:43:96:0e:05:
d2:b9:d7:ac:ec:11:4c:ef:24:93:b7:87:a3:1d:0c:
fc:00:1f:bf:a3:96:f0:7c:9f:7d:6e:d8:a5:15:a2:
ac:65:72:73:a7:12:17:fe:76:95:0f:85:27:29:5d:
bd:d0:b6:63:1a:3c:8a:15:0b:79:c2:6b:49:73:6f:
ab:10:20:85:64:44:9c:41:33:e3:94:df:7e:72:c3:
b7:f4:63:cd:e1:d1:1f:f9:6c:bd:a8:12:1f:fe:4c:
8c:b0:5c:ac:8c:36:d8:fd:af:e1:34:de:5b:3e:17:
f5:9e:86:70:85:31:f2:f3:5c:64:66:7f:bd:69:c0:
b8:38:8b:d2:e3:8a:3f:b6:af:a5:31:dc:8b:7a:ac:
fe:19:09:b6:c6:cd:40:72:f4:f0:dc:63:1d:a2:ff:
58:07:69:80:47:b3:c8:03:80:21:86:ed:ff:27:6c:
d0:a6:99:50:94:e7:6a:74:27:1b:b3:ec:8b:2c:48:
c1:e0:b4:4d:18:47:1e:19:37:ea:6c:b0:21:6a:a5:
74:ab:a4:52:a6:be:fe:a5:3c:24:a1:f1:79:30:73:
04:b4:e8:fb:66:d0:04:eb:a3:ab:91:18:31:65:4a:
10:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:47:B8:A3:63:1D:7A:83:AB:50:06:8D:CA:CD:46:A0:1E:46:03:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FCBD98428B911F0A59D0BF0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
11:af:3b:b7:2d:a8:56:7a:44:b0:a5:11:fc:24:9f:37:06:cf:
cc:77:7a:39:b1:ac:cb:8c:78:ea:7c:da:92:26:5b:cf:f4:71:
91:ce:eb:f3:e8:c5:5d:28:d1:e8:7f:6c:68:91:87:e7:fc:83:
ef:6e:41:dc:1f:0b:c1:50:d3:b2:bb:02:e8:e2:b2:a9:9c:a0:
fc:bc:50:b0:a2:b8:29:70:68:a3:3b:a0:b1:ca:32:2a:46:7d:
e5:2e:7d:63:67:d2:99:24:02:95:e6:5c:b5:0a:7a:a0:ff:5d:
76:ca:44:76:d4:ae:23:9f:a3:63:b1:31:10:a1:40:e9:24:f9:
4b:4c:98:80:b3:b0:37:68:16:73:70:a2:da:2a:ec:7d:a9:de:
af:48:51:87:72:45:bb:4c:b0:f4:b8:5d:48:ff:23:e4:ac:24:
e8:7d:85:11:8a:8c:97:ed:70:44:75:df:3f:c7:c8:d8:7a:ca:
ae:38:02:c3:52:18:0d:71:1a:da:0d:d1:d9:1d:0d:97:93:cd:
47:12:f7:8b:5e:91:3e:57:74:13:b2:44:26:1a:e6:6c:84:9c:
63:3c:dd:ca:d5:8e:3d:8d:b5:cb:8e:10:a4:c8:54:bd:b0:eb:
7b:bf:04:6f:78:11:2c:2a:b5:a1:1d:c3:a1:5a:c4:85:fe:50:
02:5b:21:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:28:15 2025 by rpki-client