Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48AC9164587A11F08E5D63C1DAE4EC9C.roa
File: 48AC9164587A11F08E5D63C1DAE4EC9C.roa (raw, json)
Hash identifier: fce5OOCTxoRBq/dlLw9Xi6mMiwZDzjGVWYwJYChDJPU=
Subject key identifier: B2:51:ED:6E:D4:DC:75:F7:F3:DF:19:90:B4:E5:9C:BF:4A:05:14:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0160AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48AC9164587A11F08E5D63C1DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 01:57:48 +0000
ROA not before: Fri 04 Jul 2025 01:57:42 +0000
ROA not after: Tue 22 Jul 2025 01:57:42 +0000
asID: 20473
IP address blocks: 156.231.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Jul 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90287 (0x160af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 01:57:42 2025 GMT
Not After : Jul 22 01:57:42 2025 GMT
Subject: CN=6867351c-6432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bc:55:26:9b:b4:a6:10:83:be:55:59:98:d3:
c3:6b:e0:d5:3a:a4:73:e8:7e:a4:65:70:e1:46:b4:
bc:4e:12:ad:be:a4:12:e9:3a:21:69:a3:d3:16:e7:
6d:fe:70:45:69:f9:27:78:22:6f:58:d8:21:cf:01:
f4:7e:3c:72:c5:16:70:86:0c:34:c2:2d:31:89:bd:
f3:6b:4e:62:13:f5:c9:58:de:66:07:c9:27:7f:31:
de:16:e8:12:28:33:e5:63:cf:bc:6c:03:c4:44:56:
a5:8d:23:20:a4:b4:be:ec:c0:f8:d1:c4:6e:d2:e8:
18:b4:bb:8f:3c:0f:99:35:be:6f:d6:b8:c9:51:ac:
8f:98:95:af:8a:10:d9:0b:b3:22:48:79:34:22:46:
1c:ba:5e:bd:50:0a:53:9f:cf:a0:4b:ff:1c:e7:bc:
69:9c:48:2a:dd:1c:52:2b:58:73:fb:02:cb:0e:6e:
22:e7:30:bb:32:47:e4:c8:26:df:72:a7:0a:90:53:
fd:46:8c:e9:64:2a:ff:31:c9:f4:fc:12:3b:86:9e:
6a:3e:ae:cf:89:16:1f:c3:00:38:14:87:3e:de:a0:
ed:38:6b:e5:5e:18:e7:8a:9c:c4:c6:7e:13:a8:fb:
1b:2a:90:43:e6:ce:03:68:78:b7:56:09:ac:f9:1c:
57:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:51:ED:6E:D4:DC:75:F7:F3:DF:19:90:B4:E5:9C:BF:4A:05:14:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48AC9164587A11F08E5D63C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.165.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:54:cb:c1:8b:6a:f7:f4:cb:7b:f9:f7:2f:14:9a:05:32:15:
92:8d:5f:ba:23:fa:a0:82:f9:27:30:15:10:1f:76:7b:6b:83:
90:24:25:64:5c:65:10:d8:57:ab:c4:ef:a1:46:63:2d:90:1c:
3d:41:8e:7a:75:0e:e7:04:30:7a:30:b9:78:b5:30:bb:54:67:
1b:41:6b:0a:7a:c2:08:a6:01:a4:9b:c2:87:cc:0f:f1:ef:5c:
c3:b6:f6:ca:1c:82:6b:8b:e9:11:d7:a8:b2:55:a8:1a:45:12:
54:de:02:f6:ff:7b:6d:ea:85:9d:f8:35:7c:a0:4c:82:15:66:
82:b7:22:87:20:2b:3e:89:b0:17:87:05:3b:d0:11:85:49:be:
92:6d:cb:de:e4:34:e9:a7:bb:17:21:0d:f5:7c:59:7b:d3:47:
e8:97:77:67:15:0c:5b:03:48:3d:6d:04:4f:37:8e:cc:f1:02:
97:4f:6f:a8:13:83:e8:56:cb:27:0f:d3:5a:cf:e1:f0:b8:43:
8c:91:74:8a:a0:18:14:3b:b9:7b:49:db:5f:96:90:eb:90:42:
41:37:d6:80:9c:f2:ff:69:e2:ab:2f:32:08:35:fa:53:a7:60:
97:57:93:06:33:34:0f:57:60:5b:e3:84:4a:da:20:d3:7a:0d:
28:9b:ce:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 04:40:19 2025 by rpki-client