Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/600F08D23BBF11F0B2048CD4DAE4EC9C.roa
File: 600F08D23BBF11F0B2048CD4DAE4EC9C.roa (raw, json)
Hash identifier: xq4+ErCVuzajI+z6fG/izgNqbVl9sYIlpO/mqz+5kTE=
Subject key identifier: 33:0C:E6:F9:C6:81:17:67:88:CD:5A:34:EB:D6:8A:EC:E7:B7:A5:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015866
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/600F08D23BBF11F0B2048CD4DAE4EC9C.roa
Signing time: Wed 28 May 2025 12:29:19 +0000
ROA not before: Wed 28 May 2025 12:29:14 +0000
ROA not after: Fri 06 Jun 2025 12:29:14 +0000
asID: 23764
IP address blocks: 156.238.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88166 (0x15866)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 12:29:14 2025 GMT
Not After : Jun 6 12:29:14 2025 GMT
Subject: CN=6837019f-741f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:68:e0:57:c5:03:2d:9b:f3:8d:f2:1e:99:5c:
10:2c:a2:fe:79:ca:4b:6d:b6:3a:f2:2d:3f:7e:71:
bf:ea:38:f1:47:5d:53:46:ab:ba:6c:f0:da:fa:a0:
47:5c:c7:97:61:57:06:ca:40:99:b0:45:0f:46:c9:
2b:89:f0:1c:f8:bc:c8:7c:13:cb:b8:91:69:40:50:
1b:7a:aa:a7:47:ab:32:be:45:d5:8d:73:84:69:95:
13:a7:f2:f8:8e:bb:a3:82:52:1b:68:c3:f3:91:ca:
a3:59:6e:12:25:ea:97:02:0d:b6:25:0a:76:de:55:
7d:c0:ab:08:61:66:ee:1d:a6:83:f8:87:52:c8:e1:
c9:eb:40:6a:4e:01:ca:3b:b7:bb:31:71:ad:fc:56:
f3:7b:57:d4:1d:64:65:c7:b8:72:01:53:1f:3f:bf:
10:3b:b1:da:80:31:01:a9:e2:22:ba:34:97:ed:c4:
33:04:1d:27:c5:7b:0d:c0:cc:57:17:ba:47:71:a1:
5d:39:73:5a:31:ac:71:8a:6f:68:9b:73:82:3a:4d:
f6:62:ae:f3:27:d6:a3:27:57:51:2d:10:dc:a5:e8:
0d:a1:b1:20:fb:6a:61:73:7a:94:e8:29:a8:b2:97:
7e:0b:71:b1:1b:d0:46:e0:a5:b0:86:ab:23:8a:3d:
8b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0C:E6:F9:C6:81:17:67:88:CD:5A:34:EB:D6:8A:EC:E7:B7:A5:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/600F08D23BBF11F0B2048CD4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.20.0/24
Signature Algorithm: sha256WithRSAEncryption
94:fd:1f:23:5d:6d:f0:93:f0:91:30:42:6f:fc:2c:13:c5:2e:
91:c3:d6:f0:4d:ba:d5:6e:07:c3:6a:90:15:2f:5c:7a:91:c2:
bd:6b:ca:07:06:03:13:4d:b9:1b:bc:5c:27:c8:d0:36:05:3b:
55:b9:44:c3:33:70:38:71:7f:09:8f:89:08:08:8f:06:bb:d8:
06:6e:be:80:fb:3c:90:cd:16:9b:78:b2:43:e6:20:1d:62:8b:
c2:8c:3e:ed:36:79:71:3f:10:45:36:33:cd:c2:5a:fc:3f:80:
78:5b:16:23:31:e1:80:5e:40:aa:5f:99:53:19:f3:8c:a7:f7:
50:df:2a:34:8a:d5:6a:43:c0:fe:fd:14:96:b9:3c:6e:b3:ac:
ff:96:52:11:1c:5d:3a:c4:ef:c2:0a:63:5b:76:18:f0:ef:ea:
7a:dc:a1:c4:d9:12:b3:d2:c3:08:c2:01:10:df:fe:ee:7c:9f:
a7:ff:e8:b8:f5:d0:21:e8:5b:8c:dd:d0:4b:cc:88:05:b7:a5:
c4:c2:1c:21:fc:7e:c2:be:1a:48:c8:a0:89:b6:d1:40:37:f7:
61:a8:18:a9:2b:2f:06:37:c3:8d:a3:e2:e9:94:d3:4c:e0:f6:
c3:23:e2:43:7e:ed:0f:bc:a5:a6:f2:67:cf:c3:b1:6e:65:17:
34:7e:11:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:31:22 2025 by rpki-client