Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55AF625C58BA11F0A73B2BF1DAE4EC9C.roa
File: 55AF625C58BA11F0A73B2BF1DAE4EC9C.roa (raw, json)
Hash identifier: oyWkGqgXZ8RMW/YNwKg4xesnYSB+XEZqAm7JI3pJ5TE=
Subject key identifier: 89:97:EB:AA:36:B3:29:F0:06:5F:2B:9D:5B:FF:EF:09:0E:C6:28:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0160C1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55AF625C58BA11F0A73B2BF1DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 09:36:18 +0000
ROA not before: Fri 04 Jul 2025 09:36:13 +0000
ROA not after: Tue 29 Jul 2025 09:36:13 +0000
asID: 20473
IP address blocks: 156.231.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Jul 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90305 (0x160c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 09:36:13 2025 GMT
Not After : Jul 29 09:36:13 2025 GMT
Subject: CN=6867a092-0d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:f4:e5:01:c0:da:11:92:84:b6:4e:49:3a:
cc:de:06:e7:22:7d:22:0c:4e:90:08:8d:c7:c0:81:
85:a8:13:c1:bc:fc:cc:67:b6:a7:da:49:9e:40:68:
27:82:55:0d:14:8c:be:be:12:0c:76:d1:c2:3e:81:
ea:a2:49:fe:0f:bb:a0:e6:75:0d:f7:80:b6:1e:c0:
c8:1a:ec:15:e2:f9:27:80:ae:8e:69:b9:b3:c1:83:
25:de:80:cd:15:b8:de:ed:4a:28:48:8a:83:ac:0c:
ad:41:e8:cb:fd:10:28:0c:e7:6e:ab:01:39:28:91:
f8:a9:8d:29:e4:fa:1e:87:52:6f:6d:a6:c9:51:f8:
38:11:22:14:4c:00:1f:71:61:43:03:49:10:40:d7:
00:bd:2f:5b:31:47:37:79:b7:9f:ef:98:97:00:0a:
3f:6c:8b:e9:a3:87:66:17:08:8e:cb:7a:14:18:fc:
e7:b2:64:1e:78:5c:17:12:c5:f6:1f:e5:96:f0:a6:
98:b9:9f:45:3e:ea:1a:3f:35:37:ab:3d:e2:ae:49:
29:ff:4a:32:45:bc:6e:ba:89:ac:c5:88:55:88:49:
9b:fb:29:f9:74:2b:e1:80:cc:17:05:c9:a7:ed:84:
e1:a0:75:fd:b0:3d:37:fc:2d:ae:78:88:35:40:4a:
c7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:97:EB:AA:36:B3:29:F0:06:5F:2B:9D:5B:FF:EF:09:0E:C6:28:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55AF625C58BA11F0A73B2BF1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.165.0/24
Signature Algorithm: sha256WithRSAEncryption
71:d3:06:d9:f6:2d:c1:63:7a:d3:f6:a5:f4:db:95:6e:3f:a3:
3f:58:bf:0d:82:a7:c6:11:13:76:3d:07:9f:c7:5d:ef:ca:95:
fc:26:f5:6d:ee:d7:a3:29:7a:96:59:fc:36:93:90:5b:a8:6a:
34:bf:aa:a2:eb:b0:0a:23:25:93:d3:49:1d:3f:19:9f:56:98:
03:fc:9f:bb:e2:ac:f3:1a:c3:c3:5a:e5:8b:86:3e:cb:7a:43:
35:93:dc:eb:db:08:9d:32:ef:e5:c7:9a:c3:13:c5:85:23:9f:
0b:ea:5f:2e:e0:17:1b:ae:d9:7c:6b:02:f7:99:19:24:de:65:
0b:e9:58:77:8c:cb:89:5a:be:c5:cb:6d:c8:21:b0:5c:ae:fd:
45:8d:ef:d9:cc:85:cb:d9:3b:a5:f4:7b:1c:94:71:a0:ce:58:
4d:f9:57:0c:9a:0e:2b:70:78:09:fe:ab:42:d5:f5:3f:7f:5a:
95:5c:78:86:48:48:26:14:43:2a:95:42:aa:37:0d:92:b6:c6:
88:d5:fe:f2:b1:ba:6b:47:6d:3b:12:ed:ce:2c:cf:6d:0b:13:
32:69:13:da:4a:3f:2e:9a:08:19:88:81:b0:13:fe:1f:d4:a0:
32:7c:41:00:7b:75:82:17:8e:a9:f3:5f:86:77:58:c0:70:02:
bf:cf:2d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 04:18:05 2025 by rpki-client