Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C38F196332411F09B98109FDAE4EC9C.roa
File: 3C38F196332411F09B98109FDAE4EC9C.roa (raw, json)
Hash identifier: 7z/aBREZ+8Spyt4tEfHFQESv6NL7FI0BmX3dxJIWeGI=
Subject key identifier: 38:EF:94:9D:67:8D:AE:59:6E:63:A6:56:21:45:9F:D5:83:F5:65:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015583
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C38F196332411F09B98109FDAE4EC9C.roa
Signing time: Sat 17 May 2025 13:38:37 +0000
ROA not before: Sat 17 May 2025 13:38:33 +0000
ROA not after: Fri 08 Aug 2025 13:38:33 +0000
asID: 137443
IP address blocks: 156.236.96.0/22 maxlen: 24
156.236.108.0/22 maxlen: 24
156.236.112.0/22 maxlen: 24
156.236.116.0/22 maxlen: 24
156.236.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87427 (0x15583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 17 13:38:33 2025 GMT
Not After : Aug 8 13:38:33 2025 GMT
Subject: CN=6828915d-e2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:67:0b:97:5c:d9:90:6e:7f:a0:c9:99:ae:59:
12:b9:a6:47:76:05:58:63:1c:15:86:a3:66:04:a7:
b8:76:0e:51:45:bc:0a:ca:b1:7d:2d:78:eb:6d:90:
59:b5:e7:f1:b4:68:e7:2f:e3:d4:98:0b:2a:d0:ac:
f1:49:66:f5:d4:24:68:b2:61:76:ab:a0:d6:6f:bc:
bb:f9:09:14:9d:cf:c3:34:e2:1f:0a:9d:b9:37:e3:
c4:16:b6:7e:47:31:2a:fd:b7:58:fa:e6:f4:1e:e2:
93:1a:f4:e5:5e:39:34:c6:e9:ef:cd:e6:0c:2e:7e:
73:48:a1:f0:28:18:fc:65:e8:08:b0:9b:bf:98:74:
f1:34:ad:c1:33:c0:a7:d1:6b:8a:68:a5:8f:11:c7:
3f:74:5f:54:80:12:78:e1:d5:ff:19:eb:0d:c3:f2:
93:f6:89:0c:bd:91:4c:34:73:cc:e2:54:5b:6c:21:
26:5b:22:3a:2d:5a:d5:aa:5d:16:3f:2f:2d:9d:92:
84:7b:02:19:3a:e0:8e:60:e9:85:d1:3d:e6:10:68:
49:95:7c:78:5e:20:59:92:f9:80:a9:7f:a1:86:36:
57:7e:c9:1f:bd:f5:79:5e:69:b6:99:c6:e2:70:84:
19:7f:e2:e1:83:04:5f:6c:6b:4d:d4:e1:12:b8:46:
53:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EF:94:9D:67:8D:AE:59:6E:63:A6:56:21:45:9F:D5:83:F5:65:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C38F196332411F09B98109FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
14:50:ee:dd:f9:86:06:d5:34:a8:15:5f:21:99:3a:33:ed:b2:
e1:3a:fc:93:96:60:b0:a5:e1:b8:87:ce:e8:19:c9:23:62:05:
0f:ab:f6:ce:7d:4c:fc:ff:be:9d:93:00:b4:2f:b3:0c:9f:d3:
91:6b:f1:d1:5c:fd:d9:e3:91:10:44:86:eb:32:88:d1:d9:78:
08:76:55:79:a1:c3:0c:91:3e:f3:3d:f3:47:b1:f8:b3:a9:f4:
9b:eb:1b:ad:43:d7:ba:db:b7:af:d0:a4:03:99:df:1b:ef:4e:
fb:89:ee:9b:3f:f7:32:47:b2:15:c8:24:07:be:c2:cd:65:e2:
74:1c:48:62:eb:3f:96:c9:3d:f7:e1:f0:29:14:43:58:31:68:
d4:a1:3b:72:96:d2:08:fa:17:9a:29:58:da:38:ac:d7:ff:43:
f0:36:cb:ba:ad:4a:ec:07:32:9a:19:f2:90:64:ed:af:e8:ff:
f0:b0:2d:35:1b:ed:5f:da:79:9e:3d:fe:34:af:62:52:d4:77:
51:c9:d6:a0:dd:f5:c4:ce:f1:a8:9c:c2:06:a9:4b:3c:b2:3f:
19:44:fb:56:73:8f:00:bd:b7:17:03:45:a5:26:68:08:84:e0:
e7:20:86:33:bd:f1:25:6b:bf:59:fb:8a:d0:0c:c2:36:17:ae:
a1:59:02:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:34:30 2025 by rpki-client