Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33D2F806803D11F09D7C05E0DAE4EC9C.roa
File: 33D2F806803D11F09D7C05E0DAE4EC9C.roa (raw, json)
Hash identifier: CvCpS7HMo9+UIA7H3EgALvlqVtjkrRHivQJgKC/JUBY=
Subject key identifier: 9A:F7:95:BA:B3:EE:53:D1:41:A6:AD:FB:27:40:A3:A3:76:E1:B0:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016F37
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33D2F806803D11F09D7C05E0DAE4EC9C.roa
Signing time: Sat 23 Aug 2025 16:21:20 +0000
ROA not before: Sat 23 Aug 2025 16:21:14 +0000
ROA not after: Tue 30 Sep 2025 16:21:14 +0000
asID: 62468
IP address blocks: 156.245.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94007 (0x16f37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 23 16:21:14 2025 GMT
Not After : Sep 30 16:21:14 2025 GMT
Subject: CN=68a9ea80-66ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:44:75:19:b2:83:fa:86:7d:d4:a1:5f:2a:38:
06:33:77:61:6c:20:57:31:ed:5f:1e:04:be:5f:a4:
af:2d:ee:23:c7:e3:9a:7a:4f:3d:28:fa:7d:cf:04:
00:cf:37:c7:1b:c6:95:3f:de:a2:3e:79:e7:ff:22:
e0:84:5c:ab:06:ce:b6:fd:0f:7d:fb:25:ab:32:dd:
07:37:9a:b4:85:f3:98:ff:6a:ee:43:b7:c6:81:16:
4f:26:73:8a:5e:6b:e5:ee:83:8b:16:86:17:2c:c4:
61:d4:db:21:95:14:21:d9:44:82:23:8d:b2:20:69:
1a:e9:c7:68:11:45:c2:d8:3a:4a:b0:f7:d8:27:ed:
69:f1:7e:54:fc:7a:d6:1f:92:19:5e:ef:e5:ef:ea:
9a:a6:c9:3a:9d:ec:3f:9c:e1:7e:53:5b:59:57:31:
6c:65:f7:4b:6f:e5:de:9c:de:aa:a6:03:c6:83:a9:
1c:ea:8d:71:ff:d7:85:75:61:64:15:b3:18:ad:cb:
25:d9:dd:77:7c:cd:7e:f9:36:56:b6:9f:a3:8f:e3:
c9:d2:3e:96:e3:c0:62:c3:1c:77:49:37:3e:a1:59:
b3:de:a3:7c:1c:d6:60:59:f4:36:73:44:d1:32:90:
d1:ff:e7:80:8b:b8:e1:46:36:8e:94:6a:bf:36:5e:
53:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F7:95:BA:B3:EE:53:D1:41:A6:AD:FB:27:40:A3:A3:76:E1:B0:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33D2F806803D11F09D7C05E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.244.0/22
Signature Algorithm: sha256WithRSAEncryption
90:18:3d:bc:8b:b3:cd:9c:8d:89:a6:bd:0f:11:fa:27:c6:1d:
e9:b6:7f:3e:8e:86:51:ff:1b:eb:19:47:2f:4a:e0:19:98:90:
09:98:0f:ac:83:f1:fd:c3:5d:ef:dd:1c:0f:3b:56:22:67:14:
d3:3c:e6:95:bb:17:17:54:5d:9f:a8:e8:03:6f:26:0e:c2:ba:
d4:9f:83:b6:60:bc:f5:d3:8e:f1:ca:36:17:f3:98:33:1d:3a:
3a:9a:91:80:d0:2a:6e:82:ac:cd:3b:71:65:68:39:c5:73:43:
11:93:6f:ec:7c:68:f8:8a:d5:a2:8e:bf:08:85:17:ac:14:3e:
d2:de:81:61:2b:9a:ff:28:7a:4a:c0:fe:ea:0a:58:11:bd:eb:
ca:e6:13:80:56:14:13:22:48:c7:dc:2f:a9:50:36:25:00:a7:
99:f0:e7:e3:79:cf:46:32:0c:86:26:be:82:07:d9:ce:89:47:
5f:52:25:0b:ea:77:f0:a1:df:7d:db:a3:4c:96:a0:0d:74:17:
00:4f:2e:bd:65:b5:59:91:f3:9d:2d:b7:39:2e:cd:6c:2e:a4:
ba:5d:9b:9f:71:f4:7b:21:3c:bc:ac:62:7a:e8:fa:79:f4:24:
94:11:5a:d6:e3:31:9e:46:b8:99:9a:17:f5:1d:fd:a8:43:f5:
9d:e2:4d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:28:40 2025 by rpki-client