Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F1415A0318411F0ACFCAEC2DAE4EC9C.roa
File: 7F1415A0318411F0ACFCAEC2DAE4EC9C.roa (raw, json)
Hash identifier: 3gnl1YFgz+MLpR0oY5qfHOhfrhtSjS552d7qS8miTy4=
Subject key identifier: 3B:3E:B8:E1:F5:91:CD:55:71:14:01:04:52:FC:AD:97:35:34:01:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0154B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F1415A0318411F0ACFCAEC2DAE4EC9C.roa
Signing time: Thu 15 May 2025 12:02:38 +0000
ROA not before: Thu 15 May 2025 12:02:35 +0000
ROA not after: Fri 13 Jun 2025 12:02:35 +0000
asID: 394432
IP address blocks: 156.227.160.0/20 maxlen: 24
156.227.176.0/20 maxlen: 24
156.252.96.0/19 maxlen: 24
156.252.144.0/20 maxlen: 24
156.252.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87223 (0x154b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 12:02:35 2025 GMT
Not After : Jun 13 12:02:35 2025 GMT
Subject: CN=6825d7de-9ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:65:71:e3:04:bc:80:80:1c:a4:d3:a7:40:
2f:2b:be:e8:d9:e8:66:5b:b9:bd:e7:10:31:cc:42:
31:30:0d:73:f8:d2:bc:17:77:11:fc:78:af:a4:8f:
2f:2a:2d:02:19:52:a6:80:32:da:1b:48:34:7d:75:
d9:64:d5:54:aa:3d:1a:8b:7c:b0:4a:6d:f4:cd:67:
e4:41:37:5f:34:47:b0:0e:bb:9e:6f:25:7c:58:85:
6b:88:fe:21:3d:9d:4a:7e:3f:0e:8e:58:86:10:0f:
9d:b6:7e:25:53:40:f0:4e:7d:e0:dc:cd:d6:57:90:
a7:0f:e6:44:59:f8:3c:40:6e:70:7c:55:89:10:b9:
6c:8b:48:50:4c:8f:4d:9d:d7:50:37:6d:db:d8:0f:
02:55:89:77:9e:18:a4:fa:75:d8:9c:da:27:0a:50:
de:eb:5c:37:02:28:8c:99:fc:69:de:42:5b:1b:83:
3c:93:51:21:c2:4b:b8:46:3b:fe:f1:4f:c5:10:84:
82:31:6b:24:52:e4:b8:68:7d:7a:c5:a6:37:cd:d1:
f0:c9:1a:ed:4e:b7:68:8f:5d:fb:11:1e:9d:94:91:
64:68:84:1d:bc:8f:07:7a:18:26:36:8d:a9:ae:db:
22:13:80:d7:5a:97:5c:4a:69:7c:23:9d:69:c3:53:
98:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3E:B8:E1:F5:91:CD:55:71:14:01:04:52:FC:AD:97:35:34:01:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F1415A0318411F0ACFCAEC2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.160.0/19
156.252.96.0/19
156.252.144.0-156.252.175.255
Signature Algorithm: sha256WithRSAEncryption
73:24:8c:94:2a:3d:78:f1:68:c6:16:27:c8:4a:2a:ec:78:7a:
c9:83:80:f8:c5:21:5a:35:a6:68:aa:50:8b:6b:80:5b:ea:ca:
c5:3f:51:27:bc:13:f8:9e:5c:f0:cc:35:9b:68:02:4a:a5:bf:
c0:91:42:5e:ce:11:47:1f:fd:06:6c:70:bb:9e:f3:b3:98:31:
d7:65:9f:1e:b6:7f:ad:0c:c8:0d:af:7c:17:75:c3:00:05:d4:
8f:b7:cf:b7:d0:09:45:3b:a7:12:9f:64:32:f8:24:34:b3:21:
13:80:1d:6d:1e:4a:d8:35:ef:99:8f:13:f3:61:ed:b9:c8:2b:
77:c6:ce:8a:7d:67:c1:bd:56:0a:7f:38:43:5b:96:61:c5:45:
5c:c9:17:b8:2c:f9:a5:0a:b8:79:e2:af:4c:f6:c1:56:9b:93:
49:6a:75:a0:02:50:4e:ed:35:bd:92:a3:34:9f:a6:9a:fe:8d:
e3:1e:ac:84:00:56:e8:af:68:17:ca:61:49:2d:df:8b:bf:11:
88:67:02:6e:6b:87:0e:d1:25:50:89:15:b6:83:9e:90:26:7a:
5f:eb:5d:0d:58:54:a4:2a:b7:dc:e8:62:72:c6:ea:12:97:88:
00:0b:83:fc:de:f9:36:b3:9b:80:d4:58:0b:11:ff:48:7f:ca:
3c:a9:7f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 02:05:45 2025 by rpki-client