Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BE59F6A331A11F08C8D0EDDDAE4EC9C.roa
File: 7BE59F6A331A11F08C8D0EDDDAE4EC9C.roa (raw, json)
Hash identifier: b2u8+0kLQm99fi8PRksmJReIduD4uDWVjzAxtdPgrGQ=
Subject key identifier: E7:44:50:D2:F3:F0:52:BA:BD:1B:2E:71:99:8D:11:8B:2D:E3:3B:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01555F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BE59F6A331A11F08C8D0EDDDAE4EC9C.roa
Signing time: Sat 17 May 2025 12:28:49 +0000
ROA not before: Sat 17 May 2025 12:28:44 +0000
ROA not after: Sun 08 Jun 2025 12:28:44 +0000
asID: 62084
IP address blocks: 156.238.34.0/24 maxlen: 24
156.238.35.0/24 maxlen: 24
156.238.36.0/24 maxlen: 24
156.238.37.0/24 maxlen: 24
156.238.38.0/24 maxlen: 24
156.238.39.0/24 maxlen: 24
156.246.23.0/24 maxlen: 24
156.246.87.0/24 maxlen: 24
156.247.16.0/24 maxlen: 24
156.247.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87391 (0x1555f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 17 12:28:44 2025 GMT
Not After : Jun 8 12:28:44 2025 GMT
Subject: CN=68288101-39de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:01:85:e0:e7:88:83:54:0f:43:a2:62:5e:2f:
ff:c2:55:43:e6:4b:f4:a2:8e:72:cd:64:63:04:a4:
68:1b:b5:22:22:82:8c:73:90:d9:a4:bf:fd:98:18:
8a:70:b5:fd:af:46:13:b9:8b:50:4a:54:cf:0e:cb:
bf:0b:55:ad:7b:d5:73:26:4a:ce:7b:80:91:ad:9f:
58:ed:46:f2:4e:76:26:d6:40:22:ad:d6:38:44:ae:
f0:33:aa:7a:70:84:bd:08:7d:f9:c9:ea:c1:06:0d:
59:db:ae:6f:2d:65:82:c2:07:1a:0f:f1:a6:b4:4d:
94:bb:45:62:ae:14:87:12:64:bc:84:b5:1e:82:64:
d9:21:43:b1:c3:4d:71:93:1f:c7:96:33:b2:e4:20:
f3:a6:56:ea:4c:fb:89:61:63:ef:6b:80:ec:ff:97:
08:4b:e7:64:1b:e2:84:9a:90:54:6c:27:48:8e:5b:
2b:8d:a9:cb:7d:bc:4e:dd:21:f0:1c:e2:ab:14:29:
ce:f6:4b:ae:bd:fc:bc:02:d9:d9:dd:8a:b3:19:a7:
82:6c:8e:f1:f8:a7:ab:8e:8e:20:02:94:0e:50:a4:
6b:05:9d:9e:1a:bd:a3:6a:10:45:12:48:ae:bd:d1:
e9:fa:bb:66:fb:e4:04:40:ae:d5:21:6a:78:63:e3:
2f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:44:50:D2:F3:F0:52:BA:BD:1B:2E:71:99:8D:11:8B:2D:E3:3B:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BE59F6A331A11F08C8D0EDDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.34.0-156.238.39.255
156.246.23.0/24
156.246.87.0/24
156.247.16.0/24
156.247.19.0/24
Signature Algorithm: sha256WithRSAEncryption
02:d4:bc:d1:24:7a:a9:a9:19:88:89:aa:be:b8:3c:69:1b:21:
93:1c:41:91:89:56:b8:86:8d:2f:2d:fa:39:a4:9f:d6:b7:f8:
22:cf:c4:1e:a0:07:7c:94:fa:24:59:74:64:33:49:68:5f:e3:
3a:96:cb:21:a9:dc:8c:55:57:e3:6d:c5:a5:8b:22:b0:78:6b:
bc:24:7c:2e:e8:41:7f:2f:e5:fa:9d:8b:81:80:f6:f9:1d:a6:
51:48:72:d7:c1:fd:29:8d:92:96:81:ec:c3:49:6e:ab:21:04:
6a:a3:17:2e:90:5f:1b:a8:16:7a:16:d9:fb:df:09:82:6e:26:
4f:47:f5:4a:0d:50:01:32:75:c2:33:b9:ee:b3:a5:dd:2a:6e:
7e:fc:24:82:18:07:e6:01:36:98:3b:70:04:63:26:ee:4a:69:
95:69:ec:a3:33:08:ad:5a:92:de:17:f4:e4:42:4b:b7:b0:47:
b3:31:e6:2e:f1:8e:96:ef:d7:25:ae:54:ba:99:cf:97:d9:f3:
44:b6:29:a0:14:4d:34:76:8a:5c:66:d1:7a:2f:81:f6:d3:2b:
6f:51:c2:96:8a:ae:69:a8:f4:b0:32:18:9e:38:68:0e:27:71:
8a:bf:7e:9a:37:e8:2e:01:92:d0:6a:2e:0f:99:f6:6c:5a:db:
68:33:3f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 01:54:28 2025 by rpki-client