Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7391D616354611F08F79ECE9DAE4EC9C.roa
File: 7391D616354611F08F79ECE9DAE4EC9C.roa (raw, json)
Hash identifier: +IBM2mhXrebXQ2A9iVG3gsenoHBCcJp+P+Ly/PPODVw=
Subject key identifier: 52:4A:B9:7E:4A:3A:BB:3C:11:80:EE:C2:9B:9E:A4:8A:73:B8:CB:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0155DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7391D616354611F08F79ECE9DAE4EC9C.roa
Signing time: Tue 20 May 2025 06:48:35 +0000
ROA not before: Tue 20 May 2025 06:48:31 +0000
ROA not after: Mon 25 May 2026 06:48:31 +0000
asID: 212552
IP address blocks: 156.241.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87516 (0x155dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 06:48:31 2025 GMT
Not After : May 25 06:48:31 2026 GMT
Subject: CN=682c25c3-3020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:36:1a:e8:c9:be:73:f2:fb:fe:ab:d5:35:
3f:00:48:f2:f3:a4:3f:66:65:76:47:c1:3a:0c:13:
df:82:16:e2:e1:cf:a6:ac:8f:5d:3b:80:24:55:a8:
d1:bc:a5:7a:06:84:02:12:5f:65:ec:f6:aa:93:b4:
7b:f2:90:d8:10:01:23:52:0b:bd:25:7d:59:a3:4a:
18:4b:e7:06:ce:9f:67:d5:f5:ac:6f:c2:b9:bd:45:
2a:8e:f7:27:6d:d0:f0:f6:26:60:f0:d8:f7:22:88:
49:c1:f9:9b:38:dd:0b:54:f4:57:24:26:00:33:69:
a6:58:1a:f0:02:d8:aa:13:37:ed:c2:77:7f:2d:8b:
50:39:ef:aa:cd:23:3c:69:44:98:50:05:ba:61:11:
a4:b8:20:6d:17:e0:3e:42:aa:5a:50:82:27:f2:77:
3a:7f:27:95:0c:6f:0a:4e:10:55:4f:09:4b:b1:62:
99:e1:68:b2:12:85:18:59:eb:98:df:86:1b:98:42:
ec:11:7f:88:59:28:47:bd:f8:d2:ba:d2:0c:c8:93:
b8:c0:ea:46:cf:e8:c7:b1:7f:c6:44:17:c3:2b:97:
00:36:cf:f6:e8:3e:44:8c:5c:17:8d:25:fc:82:b8:
fd:f8:85:7f:25:d3:00:f7:65:0e:90:44:21:33:05:
60:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4A:B9:7E:4A:3A:BB:3C:11:80:EE:C2:9B:9E:A4:8A:73:B8:CB:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7391D616354611F08F79ECE9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:33:c0:6d:bf:7b:14:2d:dc:f7:7d:b3:3a:de:7c:32:35:37:
0d:d4:ca:f2:43:e0:46:d8:1c:b6:c7:1c:57:8f:b1:24:0c:64:
c4:cc:5e:59:40:cb:1b:13:73:89:0c:57:ee:1e:66:ef:13:46:
63:f9:c2:31:48:9e:42:f0:1a:60:88:9e:f6:c1:c2:1a:c7:b3:
31:23:22:44:6d:91:04:52:f4:e1:d0:55:8e:fc:b1:1a:4b:c5:
48:54:63:70:88:99:6c:69:51:ea:39:4f:30:49:53:e9:c2:c8:
8b:7d:00:79:a8:b2:c3:c4:da:57:4f:34:b5:e1:ab:fc:11:22:
5b:bf:6d:73:2d:be:b7:72:49:55:9a:fc:fb:b4:4e:79:b9:5b:
6e:14:d0:2d:06:9a:67:b2:22:d7:3c:17:67:f9:9e:6c:30:e8:
53:f5:f7:d7:39:28:d7:aa:f6:d6:18:98:c5:3b:17:a4:32:d1:
f8:76:4a:6b:ab:e9:75:8c:c4:54:07:ee:fe:b3:68:af:63:b0:
86:c7:a0:52:9e:53:80:d4:09:b1:42:6a:bc:ba:f6:0d:c7:71:
58:02:ec:d4:1c:f6:20:02:07:a2:47:63:b1:0d:68:f6:a0:41:
08:01:0b:fb:07:74:4f:4a:53:1a:e2:a5:b1:ff:10:53:bb:c4:
b1:96:2b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:23:45 2025 by rpki-client