Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CA0CDE637E011F09DC9389DDAE4EC9C.roa
File: 3CA0CDE637E011F09DC9389DDAE4EC9C.roa (raw, json)
Hash identifier: qWLWo+2hFvipy+eKzo9FrCwNEvjYzjI3005l41mxEVY=
Subject key identifier: 84:73:33:A7:A7:7F:61:14:81:DD:57:1E:73:61:F5:54:5A:23:58:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0156EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CA0CDE637E011F09DC9389DDAE4EC9C.roa
Signing time: Fri 23 May 2025 14:14:28 +0000
ROA not before: Fri 23 May 2025 14:14:23 +0000
ROA not after: Sun 29 Jun 2025 14:14:23 +0000
asID: 213812
IP address blocks: 156.229.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87787 (0x156eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 14:14:23 2025 GMT
Not After : Jun 29 14:14:23 2025 GMT
Subject: CN=683082c4-c587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:95:eb:66:55:77:f2:ca:5c:73:16:83:ac:d7:
85:de:b3:72:6e:36:ab:f1:42:d0:61:be:89:68:db:
98:05:e2:68:ae:cb:c0:08:c5:48:c6:e0:66:12:a9:
a6:b6:66:73:4e:c4:75:84:57:be:23:65:68:88:66:
81:27:35:c4:0f:2a:b5:16:87:31:b9:08:99:65:dc:
a2:21:86:d9:6d:2c:a6:99:6e:4a:fe:30:a6:89:ef:
64:71:e0:dd:d1:07:d2:74:ce:c8:ca:20:8f:ef:53:
55:ab:22:1b:78:53:24:7a:cc:20:8f:32:69:4b:b8:
bb:ae:7b:18:80:aa:7f:18:4d:3d:8e:0b:d9:16:78:
76:a9:3d:be:f8:12:b3:35:4a:29:79:f6:5c:7b:c0:
7b:23:53:ca:8f:55:ac:14:21:d0:27:32:ca:14:b7:
fa:9e:b2:03:89:ca:cc:38:45:e7:cc:14:76:61:f5:
79:cb:e0:ea:50:34:32:a1:9c:2e:34:00:92:9f:89:
2e:a6:ac:5e:6a:67:aa:5b:99:81:d2:ad:ab:98:16:
87:9a:ff:b4:c2:19:3b:f1:4e:1e:9f:7f:ab:ea:93:
65:cb:94:de:32:9f:27:73:d8:b4:e2:9a:18:2d:56:
fd:c2:ec:b4:9a:76:91:ec:20:06:5d:f0:8e:9e:5b:
39:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:73:33:A7:A7:7F:61:14:81:DD:57:1E:73:61:F5:54:5A:23:58:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CA0CDE637E011F09DC9389DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.119.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:bc:05:85:19:a3:4f:8c:0c:51:80:85:2e:6e:b8:b2:ae:1b:
ea:8d:aa:b5:01:44:3c:24:74:e2:99:45:91:e1:67:f4:ee:9c:
5b:76:ca:84:c0:92:82:a7:1e:e1:42:6b:c9:4d:47:f9:39:75:
1d:9e:ff:8c:33:50:81:85:b6:1c:a1:fe:a0:92:de:72:51:d6:
4e:f9:99:2d:c9:c3:20:26:06:5d:d3:aa:48:50:97:18:6f:c8:
78:00:ba:8b:15:90:21:a7:ea:7e:fe:52:c6:f0:97:54:a6:9e:
94:8a:47:db:73:6b:c7:44:50:3f:fe:01:46:95:88:48:7c:9d:
a9:1e:0a:c6:6b:ab:dd:31:9f:8d:f4:f8:31:1b:e2:19:1a:19:
4f:ce:64:87:7b:2f:77:13:9d:84:12:5b:ca:15:6b:9d:3b:91:
07:40:c8:e5:81:08:95:e2:6d:93:69:64:eb:7d:7a:31:cc:84:
27:6d:51:1d:c0:45:c1:da:42:62:33:5d:31:ae:04:a7:75:d1:
58:53:91:cd:6b:1f:56:36:44:bd:f6:f3:47:41:71:53:a9:bc:
ba:fb:fd:95:64:13:74:a7:c6:96:20:42:f8:0f:e6:1c:36:98:
a6:64:d9:e6:35:52:e7:05:fe:4c:ed:b3:6b:1d:01:52:27:98:
8e:cc:ae:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:49:17 2025 by rpki-client