Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DC838AA2F3C11F0B962897ADAE4EC9C.roa
File: 3DC838AA2F3C11F0B962897ADAE4EC9C.roa (raw, json)
Hash identifier: kI3U9TmuPZYSagjvwcSwaWTsrVpxtOcG0WWgsgZPG+k=
Subject key identifier: 7D:91:B5:7F:48:B5:88:8C:1B:F1:80:6E:56:D9:8F:21:47:99:E2:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015395
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DC838AA2F3C11F0B962897ADAE4EC9C.roa
Signing time: Mon 12 May 2025 14:20:23 +0000
ROA not before: Mon 12 May 2025 14:20:19 +0000
ROA not after: Sat 21 Jun 2025 14:20:19 +0000
asID: 42689
IP address blocks: 156.233.152.0/21 maxlen: 24
156.233.160.0/20 maxlen: 24
156.251.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86933 (0x15395)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 12 14:20:19 2025 GMT
Not After : Jun 21 14:20:19 2025 GMT
Subject: CN=682203a7-ce09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:73:7d:14:0f:4f:2a:ac:10:4a:ae:4b:22:de:
ac:d4:e2:4b:77:8f:ad:73:27:9d:08:60:89:d0:e7:
16:f6:5b:4b:e2:22:41:f5:94:96:dd:b7:0c:36:4c:
f3:80:45:0c:60:df:70:97:30:07:47:4f:cd:60:5b:
2e:50:97:87:0f:14:7e:d5:92:64:3a:11:20:77:bc:
56:fc:30:c3:28:cd:df:b6:f2:97:13:3e:4f:54:45:
a3:24:8e:c7:78:77:64:16:d7:60:96:19:60:d9:6e:
59:ed:61:b3:a4:54:62:39:02:c6:17:ae:a8:f1:59:
12:b4:44:c9:99:ad:75:8a:b3:4c:3f:64:34:11:11:
26:bd:78:ff:74:3a:29:ca:b1:19:58:f8:4c:2f:01:
8c:07:59:8e:3f:16:7d:21:95:bf:ee:8f:79:f1:86:
4b:29:d9:49:47:8f:96:ec:65:9d:ca:e5:12:fa:a6:
fa:b1:f6:51:3b:82:37:f4:64:9d:b4:31:6c:9c:a6:
ac:9c:59:03:57:a1:6a:1f:af:fd:5c:a2:2e:8d:b8:
2c:93:d8:31:8f:1b:1c:00:b8:28:3e:e1:3b:b9:cf:
a9:88:9b:c4:79:21:b1:66:4f:14:db:fd:69:a8:41:
98:91:1f:66:25:5d:4e:22:f1:58:6a:c5:ca:9b:4e:
cd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:91:B5:7F:48:B5:88:8C:1B:F1:80:6E:56:D9:8F:21:47:99:E2:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DC838AA2F3C11F0B962897ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.152.0-156.233.175.255
156.251.80.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:25:bd:85:e8:f0:12:4b:15:cf:0a:60:3a:1e:26:6b:62:50:
22:15:65:b4:80:0e:4d:c5:0d:d9:07:6e:3a:3a:d0:98:93:64:
35:0a:5c:33:46:ff:42:a2:76:7d:53:e3:1d:bf:38:f3:cf:1a:
e3:84:c4:51:f1:ff:b0:8d:ee:e2:07:85:81:bb:07:08:47:27:
50:b3:4e:fd:e8:38:57:ee:6b:a0:f9:24:17:0f:d4:19:7f:3b:
d4:1c:65:07:de:55:97:3e:f5:a7:dc:fc:60:46:e3:5d:5d:11:
75:29:dc:fe:f5:10:18:6e:35:5d:30:34:7a:e2:88:9a:4e:d9:
3c:4e:12:4a:6a:db:67:50:2f:70:fa:f7:12:e5:2a:88:a3:ab:
b7:3c:4b:18:ff:eb:ed:1a:44:95:52:23:16:a3:18:56:b0:92:
d4:85:2d:9e:c0:87:6d:9a:60:e7:c4:ce:57:ae:9a:02:9a:97:
21:a6:48:1c:32:a3:7e:8c:ed:5c:e3:e6:c2:eb:01:8f:40:66:
a1:f9:22:c4:4d:b3:71:e3:e0:48:dd:c3:8d:b9:a5:74:cb:ca:
c9:bd:5e:9f:fe:73:33:2c:32:6d:9a:ab:8e:4a:f6:1d:f1:0f:
79:61:df:e0:d3:91:3c:c9:c5:d9:60:52:27:07:59:30:79:c8:
88:4a:9a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:32:34 2025 by rpki-client