Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/909A99682CC311F087C3F3F3DAE4EC9C.roa
File: 909A99682CC311F087C3F3F3DAE4EC9C.roa (raw, json)
Hash identifier: W7k9K1guT12beQO8bjEvjQ1/2JaAujkXLPCFOyB0vJA=
Subject key identifier: D7:96:3E:06:D8:DF:3C:5C:AD:CA:69:FE:E3:7F:91:D9:A2:C3:D2:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01531B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/909A99682CC311F087C3F3F3DAE4EC9C.roa
Signing time: Fri 09 May 2025 10:51:31 +0000
ROA not before: Fri 09 May 2025 10:51:26 +0000
ROA not after: Sun 08 Jun 2025 10:51:26 +0000
asID: 198247
IP address blocks: 156.238.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86811 (0x1531b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 9 10:51:26 2025 GMT
Not After : Jun 8 10:51:26 2025 GMT
Subject: CN=681dde33-129e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:7e:86:2f:2d:c6:60:f9:2e:6f:c3:b5:63:
28:7b:ae:c3:32:9f:c7:2b:45:d6:5f:4a:93:39:3a:
fc:78:93:af:a3:6c:f9:89:fa:51:5a:a4:71:27:1f:
cf:cc:a6:34:43:cf:a4:a4:cc:d8:33:b1:fb:89:d8:
ec:9a:2b:94:ff:b2:f9:43:ef:dc:96:3f:b7:b9:6b:
8a:9f:f6:e9:89:e6:e8:0b:c2:85:c0:56:2b:47:cc:
2d:f8:bf:83:98:bf:9f:68:79:d7:8a:76:f5:0a:55:
ef:f6:57:a1:cc:c8:5f:47:91:6b:f5:ad:c7:4e:0d:
5d:1f:ed:7d:70:5d:81:79:fd:3a:5f:36:57:f6:ce:
b6:98:7f:aa:a8:00:c7:7c:08:c5:61:ea:04:2c:57:
fe:cf:b5:4f:cd:76:20:24:d9:b6:83:6a:60:2b:fe:
39:26:0c:11:f4:75:e2:d1:63:32:00:61:6c:a2:60:
9c:ae:c9:9f:bc:dc:11:28:a2:28:9e:8a:46:8a:24:
a5:38:65:05:37:e9:0b:7c:e0:8f:0e:92:c2:a3:71:
58:54:07:66:d1:fc:cd:4f:ac:13:dd:4b:78:69:83:
88:40:db:bc:8b:f6:df:d3:9a:e0:34:95:42:97:dc:
8b:81:60:7e:74:90:4d:69:9b:48:ff:dc:a3:01:f8:
51:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:96:3E:06:D8:DF:3C:5C:AD:CA:69:FE:E3:7F:91:D9:A2:C3:D2:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/909A99682CC311F087C3F3F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.84.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:18:66:e8:42:bf:5c:e2:26:53:c2:25:98:81:ab:ff:4c:03:
ca:69:0f:c1:ea:55:44:86:a3:d5:6f:92:30:21:8f:b6:27:81:
df:c8:59:1d:09:79:b1:30:2d:42:4a:59:75:b9:8c:e7:37:f1:
3f:7b:31:f9:5a:86:b3:24:76:51:88:fe:4e:f2:84:f8:ca:b6:
cc:a9:ac:75:28:e2:20:2a:2c:4c:78:15:56:a6:64:81:66:20:
69:6d:5c:24:97:c2:86:11:37:70:e1:32:70:a0:24:29:65:b9:
31:46:f1:29:ef:59:2f:ad:c9:5d:83:de:49:fb:73:61:4a:54:
e7:4c:1a:ba:05:4c:b9:1c:d3:62:15:b0:ea:96:a0:61:51:60:
6f:cd:76:03:25:07:c3:b0:46:3e:e2:ff:10:17:3b:35:a7:f1:
f3:9b:a4:54:f6:b0:8c:26:0b:da:a3:d6:56:85:21:0f:68:5e:
49:c8:0f:72:03:5a:e3:a0:75:4b:2f:e1:51:4c:ed:f1:88:74:
6f:1f:74:92:08:0f:dd:01:06:73:ae:6c:4e:30:78:5a:78:24:
a0:73:4c:57:80:7d:bf:ec:20:32:ee:90:f8:63:a6:cf:54:ac:
8a:64:16:2b:c4:6a:70:e0:43:65:88:e4:17:21:08:2e:5f:e0:
ba:7f:bf:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 09:20:23 2025 by rpki-client