Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E5A861C317111F0A6F2C6C4DAE4EC9C.roa
File: 6E5A861C317111F0A6F2C6C4DAE4EC9C.roa (raw, json)
Hash identifier: L+rY5W0ZNlN6mO4A9FBOT3t8tmVh31bMeQlIDd4e3Kc=
Subject key identifier: 01:69:7E:7F:7E:87:4F:FE:DD:E9:16:25:78:60:D8:31:F8:78:CB:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01549D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E5A861C317111F0A6F2C6C4DAE4EC9C.roa
Signing time: Thu 15 May 2025 09:46:10 +0000
ROA not before: Thu 15 May 2025 09:46:05 +0000
ROA not after: Tue 24 Jun 2025 09:46:05 +0000
asID: 137899
IP address blocks: 156.239.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87197 (0x1549d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 09:46:05 2025 GMT
Not After : Jun 24 09:46:05 2025 GMT
Subject: CN=6825b7e2-bd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:54:ef:df:12:b0:54:86:e8:40:1a:75:fb:50:
3a:d1:5f:b1:6a:1a:58:2f:30:e2:67:f6:12:90:99:
a9:10:7d:46:6a:ff:85:ea:b8:e5:24:7b:03:be:95:
0e:54:da:5f:46:3c:eb:15:50:ad:50:c2:3b:94:2b:
2c:1e:40:e8:13:61:2e:e6:01:b5:cb:8b:65:bd:a8:
23:1b:30:14:26:96:b2:15:ca:36:e9:d6:44:03:6e:
3e:7d:c7:99:2b:c3:41:8e:cb:9c:63:61:0b:e6:8c:
68:98:b5:82:13:fd:0d:1c:74:d3:a7:37:b3:c7:7b:
5d:45:05:17:2a:f8:03:7c:a5:89:00:74:0d:1c:7f:
b1:09:11:ee:48:d2:e7:a4:d8:ef:9a:05:8e:7a:c6:
de:2e:7e:7e:8b:20:77:cb:79:d1:ea:d1:b9:f2:eb:
04:ab:06:98:d2:94:44:d4:15:e5:96:f0:a5:aa:4c:
92:4a:90:f6:55:e9:b5:1a:a4:58:e0:c1:ef:b9:eb:
d1:76:38:7f:21:48:b0:4e:3d:60:af:81:4a:96:64:
49:51:06:62:c7:35:11:de:c6:5a:de:fc:46:af:44:
12:23:88:7e:0b:c8:ea:81:54:7b:df:83:9a:16:1d:
73:77:9d:01:1a:d6:77:9a:e5:d5:4e:21:95:f0:11:
fc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:69:7E:7F:7E:87:4F:FE:DD:E9:16:25:78:60:D8:31:F8:78:CB:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E5A861C317111F0A6F2C6C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.52.0/23
Signature Algorithm: sha256WithRSAEncryption
40:e2:06:5f:7c:71:3a:08:67:c2:15:e1:c4:08:4e:a2:00:b6:
47:9f:11:c9:41:df:3f:46:77:13:ba:88:18:34:35:47:20:77:
3d:78:29:14:5b:fc:bf:a2:0c:21:82:cb:fd:b1:40:9f:35:c2:
55:5c:d5:ee:e7:83:92:55:4c:9a:e1:c9:88:f1:07:7d:f5:cf:
e8:df:0f:96:3b:0f:8d:11:74:cf:3d:55:0a:f0:c5:38:2b:47:
c4:25:dd:07:b8:63:63:93:13:14:d7:4f:57:2a:03:f1:bd:fd:
79:0b:09:fd:82:fe:2e:a7:e6:9b:7d:75:f5:8f:0c:7a:18:4d:
40:68:64:a2:e6:12:7a:5d:e2:91:2e:d8:64:b5:5a:98:6c:fb:
39:00:68:da:c0:f5:02:e7:9e:25:f5:45:c2:e4:19:9e:0f:53:
d6:58:9a:4b:5b:c2:e9:41:92:bf:7a:18:e5:fb:44:bf:c1:21:
9a:c1:0f:90:cb:e5:8f:98:b3:41:39:ef:c1:00:72:46:7a:4a:
ef:c0:ba:6b:f1:31:c9:53:ad:c1:4d:f1:c5:80:c5:0a:2f:ac:
5e:0c:46:bd:61:6b:ab:33:9e:5b:ff:4d:07:c7:33:d0:c8:db:
c4:6b:3a:47:b1:d3:b1:1b:f7:4a:0b:25:84:81:3c:19:15:f7:
64:4b:4c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 09:10:41 2025 by rpki-client