Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C6A88E6317611F0957C2EE5DAE4EC9C.roa
File: 3C6A88E6317611F0957C2EE5DAE4EC9C.roa (raw, json)
Hash identifier: 0tso1AkQj0GqVsOPF/GWqRQbiLqILaPASsIQlP4P+Jk=
Subject key identifier: 88:8E:A1:41:8E:43:63:EA:20:F0:D4:F4:4B:81:CB:1D:07:3E:B9:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0154A1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C6A88E6317611F0957C2EE5DAE4EC9C.roa
Signing time: Thu 15 May 2025 10:20:34 +0000
ROA not before: Thu 15 May 2025 10:20:29 +0000
ROA not after: Tue 24 Jun 2025 10:20:29 +0000
asID: 8796
IP address blocks: 156.239.24.0/21 maxlen: 24
156.239.32.0/20 maxlen: 24
156.239.48.0/22 maxlen: 24
156.239.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87201 (0x154a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 10:20:29 2025 GMT
Not After : Jun 24 10:20:29 2025 GMT
Subject: CN=6825bff2-2d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:46:95:ea:96:8d:c6:ee:9b:20:8c:f1:63:
4a:bd:48:11:e4:7a:1c:45:bd:17:23:d8:c9:d3:48:
fd:c3:72:70:ee:2b:30:c9:0d:4f:60:5e:c9:50:01:
d3:95:09:00:2a:17:5f:a7:1c:e7:39:76:59:15:bd:
f6:87:10:ff:43:1a:81:37:9f:bc:8b:52:1a:2f:b4:
e0:54:08:48:46:20:76:ab:fc:e8:fb:c9:f1:3d:0c:
06:68:24:2a:4a:01:45:39:08:52:85:83:9a:00:46:
f5:c6:06:5e:a9:a6:5e:17:ad:93:b2:50:93:6a:ba:
df:ff:af:1b:08:e6:c6:c3:38:49:be:eb:04:5e:80:
d9:9a:e9:0b:60:46:2b:e2:3c:87:bb:e9:e3:1b:d3:
8a:4f:74:dc:fa:81:54:c0:1c:86:fb:07:63:53:ae:
04:11:56:19:c3:68:ca:94:6e:4f:ca:34:03:7a:d9:
d3:43:ff:ec:4d:4e:f2:84:6f:64:14:27:47:8c:91:
54:6d:c1:b6:54:37:83:ed:0f:e0:e3:c4:0e:c5:f7:
52:c3:9e:3e:a7:3c:25:31:3b:b3:0f:7f:e2:cb:27:
4c:d3:02:62:4c:d5:98:eb:0a:56:86:74:35:18:89:
d9:c1:1f:08:14:56:34:74:ef:59:4c:44:cf:b8:95:
d0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8E:A1:41:8E:43:63:EA:20:F0:D4:F4:4B:81:CB:1D:07:3E:B9:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C6A88E6317611F0957C2EE5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.24.0-156.239.53.255
Signature Algorithm: sha256WithRSAEncryption
6b:fd:50:29:7d:f3:e3:20:ea:34:3a:e9:bf:68:70:bb:f4:5c:
26:a9:5e:39:c6:7d:f5:ed:c2:9a:17:0f:1e:24:52:6f:23:20:
94:91:c7:fe:a7:a1:cd:07:41:72:d8:8e:69:c9:fd:35:de:92:
99:1e:81:83:fc:c6:72:06:e6:a9:7d:08:42:7d:dc:8b:73:cc:
d0:bb:23:b3:4a:d3:52:3f:b5:8f:33:da:60:a7:70:27:41:ad:
f1:0d:14:41:6b:ed:84:9b:97:fa:e8:81:bd:84:f2:cc:2a:11:
43:6a:36:58:92:1e:87:4c:83:78:b2:2f:61:2f:c2:f6:4d:25:
b7:eb:44:01:8f:99:7d:34:45:d8:b4:2b:3d:d6:a6:ae:9d:f8:
31:7b:f1:40:00:c9:42:36:e7:98:cf:cf:9a:e4:03:a1:51:c0:
ef:7d:1a:10:4b:81:30:57:32:9b:70:0b:7d:dc:2a:8b:db:d2:
9b:25:af:86:36:3e:6d:3c:b9:6c:23:82:5b:6e:fb:d3:7e:5c:
6b:11:32:3a:94:d2:b2:7a:43:37:69:25:a0:0b:1c:b2:9a:84:
bd:7e:3e:95:71:a4:99:8c:c9:2a:e6:a5:99:c0:6b:f5:21:80:
20:e0:ff:f4:93:cf:d2:ee:12:2e:ad:1b:1f:6b:ce:ba:be:c9:
96:4a:5f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:29:18 2025 by rpki-client