Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/880683DE557C11F0B0655ADADAE4EC9C.roa
File: 880683DE557C11F0B0655ADADAE4EC9C.roa (raw, json)
Hash identifier: wNj8KhFVIfFDs2xiuhvzCJdqMbt6RoaLBM3lmfWYncI=
Subject key identifier: 95:9E:FD:0A:50:90:19:53:7C:50:3D:AC:7A:34:65:5F:EF:76:1B:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F77
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/880683DE557C11F0B0655ADADAE4EC9C.roa
Signing time: Mon 30 Jun 2025 06:36:20 +0000
ROA not before: Mon 30 Jun 2025 06:36:15 +0000
ROA not after: Fri 04 Jul 2025 06:36:15 +0000
asID: 3561
IP address blocks: 156.248.88.0/22 maxlen: 24
156.255.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89975 (0x15f77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 30 06:36:15 2025 GMT
Not After : Jul 4 06:36:15 2025 GMT
Subject: CN=68623064-aca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:08:7b:39:4c:f9:cd:21:e4:b8:0a:42:a3:
dc:07:60:7d:47:ae:51:a1:3c:2c:2a:6a:23:e7:11:
cf:57:ea:b1:7e:2a:f3:a6:e1:af:1d:04:2e:a0:b5:
84:95:22:b0:05:d2:d1:b5:6b:1e:1f:53:fb:67:2d:
b5:a6:eb:ff:33:81:6d:34:0e:26:89:2e:00:eb:c8:
94:e3:e6:10:81:01:17:3d:72:a4:d5:cf:d7:6e:8a:
ab:28:4a:09:14:62:ee:25:23:94:aa:97:59:0e:f1:
7f:ee:53:08:f7:e0:cf:ab:96:8e:24:45:09:d7:a1:
07:40:42:ba:ec:18:8c:52:a1:cd:5f:cf:30:2f:63:
01:7e:2c:a1:88:a2:7e:c8:af:c4:59:3c:ae:45:42:
68:3c:52:bc:f7:b8:a1:d3:38:a1:39:da:1f:0f:98:
c0:2f:22:7f:d3:40:b3:93:45:a8:c6:45:6f:bd:e4:
df:7d:14:e2:0c:15:8a:6b:b3:5c:f3:24:04:f3:e2:
95:00:dd:29:e9:e9:db:28:66:0d:dc:23:6f:b6:bb:
6f:9a:4c:c4:8c:7a:e5:d4:6d:ab:e3:12:49:db:ee:
e6:32:62:8c:20:80:c9:e4:86:0e:4e:1f:b6:63:3d:
2e:ca:a4:39:1a:dd:5f:8f:46:4e:e3:2a:ca:b9:ec:
c9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9E:FD:0A:50:90:19:53:7C:50:3D:AC:7A:34:65:5F:EF:76:1B:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/880683DE557C11F0B0655ADADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.88.0/22
156.255.4.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:8d:20:b1:d8:27:11:51:df:48:88:d2:28:3c:87:9c:01:93:
f7:da:8b:be:f8:1d:a8:b9:92:b8:42:a8:51:a9:80:07:2a:fa:
ce:a2:66:b1:c7:d4:0e:88:d7:ff:ea:07:63:7b:3c:e8:d3:3f:
a9:b0:6d:e4:53:86:3f:70:9b:29:0d:97:0e:2f:31:f4:12:78:
1c:95:0d:a4:8f:0f:07:9a:d2:5d:59:d0:79:0c:b7:4a:86:09:
a1:ac:98:20:cd:06:cb:9f:7f:e2:fc:4b:52:a2:9c:3f:29:fb:
a5:c8:e6:30:c0:66:df:9c:93:04:d0:57:08:d7:8a:65:df:02:
59:2a:42:74:54:d7:e3:80:d2:70:f0:fd:ed:49:9b:9a:ea:8b:
8e:75:96:d4:8b:d9:ad:7a:26:ab:a9:8c:76:d6:d9:7f:5c:4a:
3f:60:68:1f:95:c0:33:d4:95:04:09:74:38:15:0a:4b:98:c5:
f0:fa:cd:63:e2:cd:cd:7b:2f:7b:7c:eb:d3:80:af:29:0f:3e:
db:82:18:26:ec:61:bf:b4:9c:7c:82:8e:e4:c7:23:3c:52:b2:
5b:f4:a0:d7:1f:b1:49:4e:1b:9e:36:f6:df:1c:c7:54:ec:a1:
1b:10:20:6f:bd:8d:b1:9d:12:73:a3:c0:04:5b:36:02:db:73:
88:98:cd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:17:13 2025 by rpki-client