Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D3F3BE82F3B11F0B87919F2DAE4EC9C.roa
File: 6D3F3BE82F3B11F0B87919F2DAE4EC9C.roa (raw, json)
Hash identifier: Eg36WbVzG+BMVD3buGK/7w/ZkSfoskCCC3X9d+rHP9Q=
Subject key identifier: AC:4B:3E:94:BE:A1:07:E7:A7:31:95:B5:C7:D9:78:4F:12:8A:C7:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015391
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D3F3BE82F3B11F0B87919F2DAE4EC9C.roa
Signing time: Mon 12 May 2025 14:14:33 +0000
ROA not before: Mon 12 May 2025 14:14:28 +0000
ROA not after: Sat 21 Jun 2025 14:14:28 +0000
asID: 203020
IP address blocks: 156.233.180.0/22 maxlen: 24
156.233.184.0/21 maxlen: 24
156.233.192.0/24 maxlen: 24
156.251.96.0/20 maxlen: 24
156.251.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86929 (0x15391)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 12 14:14:28 2025 GMT
Not After : Jun 21 14:14:28 2025 GMT
Subject: CN=68220249-0d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:94:f5:fe:0b:f9:d6:0a:38:c7:a7:d8:a1:d5:
9f:d1:c1:7c:3f:87:2f:a5:e2:77:13:27:bc:99:6c:
34:f9:9f:41:d6:82:58:66:97:3d:62:14:4a:1a:0f:
30:f5:1f:79:68:91:da:74:21:5e:22:1c:a9:e2:45:
a1:b7:d3:e9:7c:73:ac:6e:09:81:5b:a1:bd:d6:25:
c4:73:86:1f:88:73:4d:d0:47:a4:6b:19:c3:84:52:
0c:28:26:ad:0c:50:e0:c2:2c:bc:0d:3d:cb:f4:20:
7b:b3:c2:5a:42:18:5a:74:4a:d1:ed:1b:d6:4d:60:
84:13:36:f4:3d:b0:78:72:bb:8f:34:c2:c3:db:bb:
79:a0:15:2f:74:ba:37:c0:cd:8e:2b:79:c8:ec:d6:
b5:d1:7e:fd:e5:a6:5e:68:f8:a4:e7:06:b6:c0:45:
ee:5a:51:2f:06:e8:70:b7:86:74:13:07:b7:b6:aa:
aa:d3:02:94:09:c1:a9:3b:08:0c:b6:88:06:70:3d:
e0:bb:c1:d9:fd:4a:e0:85:f9:20:61:c5:72:0a:76:
85:62:71:46:9a:fd:89:0b:63:66:e2:2f:21:2e:de:
a0:1d:64:b8:b5:17:67:cf:5a:3c:86:1d:3b:c4:3a:
5c:5c:e4:fd:36:aa:72:0d:63:eb:d4:e5:84:35:21:
70:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4B:3E:94:BE:A1:07:E7:A7:31:95:B5:C7:D9:78:4F:12:8A:C7:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D3F3BE82F3B11F0B87919F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.180.0-156.233.192.255
156.251.96.0-156.251.119.255
Signature Algorithm: sha256WithRSAEncryption
82:10:d1:a2:b3:a0:56:2c:3d:e0:e0:e4:58:21:13:7d:6c:28:
f6:ce:aa:24:35:13:c7:66:3b:80:b3:99:d3:2f:a0:38:94:7c:
c5:25:51:b1:ab:19:af:51:5b:c6:84:8e:d6:dd:f4:38:c5:38:
d3:d5:0a:15:1c:f7:bd:d8:b3:21:43:d9:0b:3d:8a:05:1c:0f:
bd:fd:88:f2:ea:84:d0:ca:8e:2e:a0:78:7b:7d:c3:bd:c0:0a:
54:e9:00:be:9c:fd:b9:4a:f9:af:61:0c:27:e6:5a:94:dd:f6:
8b:0c:4c:bc:35:4b:2a:00:36:f8:22:26:86:4e:e2:5f:ce:57:
b7:91:48:07:97:55:e5:b3:43:fe:cd:96:e5:db:7b:4e:44:44:
e2:93:10:f6:38:ee:37:29:8c:13:fb:88:7a:fa:02:90:a6:de:
7e:e7:da:7a:c6:25:21:ff:06:eb:72:24:e8:3e:6f:72:ea:e2:
23:4e:70:cd:56:c7:5e:f6:15:77:24:27:c7:66:f5:1b:9b:0d:
52:9f:44:a9:49:0c:ca:78:d8:6b:f9:3d:71:a9:0b:fc:8b:f2:
29:32:a0:4c:4a:c9:5a:91:66:ce:d2:61:cc:81:da:39:be:8e:
d1:9c:4b:37:12:42:3c:ae:f1:1d:f3:e2:5d:cb:09:c1:8a:27:
a2:f4:e5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 09:10:45 2025 by rpki-client