Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8C6EEA23BA411F0807B35ABDAE4EC9C.roa
File: A8C6EEA23BA411F0807B35ABDAE4EC9C.roa (raw, json)
Hash identifier: FiNJx04dtNDBjDMBw6LtGb1owfULM4HzSNE0IYk5tUk=
Subject key identifier: 5A:46:4D:95:AC:A9:CE:CB:4E:DC:BA:73:3F:08:8D:1A:97:CD:29:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015825
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8C6EEA23BA411F0807B35ABDAE4EC9C.roa
Signing time: Wed 28 May 2025 09:18:04 +0000
ROA not before: Wed 28 May 2025 09:18:00 +0000
ROA not after: Wed 02 Jul 2025 09:18:00 +0000
asID: 213707
IP address blocks: 156.225.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88101 (0x15825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 09:18:00 2025 GMT
Not After : Jul 2 09:18:00 2025 GMT
Subject: CN=6836d4cc-b911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f8:61:3a:2d:54:44:d0:8c:b5:5b:17:00:a7:
64:cb:e5:94:b7:c3:cf:f7:48:0e:5d:c0:20:59:60:
9f:f0:13:4d:52:98:99:f4:14:55:38:51:23:1e:ba:
cf:ed:7c:cd:33:44:7d:4f:ca:e2:bf:ba:0c:c2:34:
f7:ac:04:79:60:24:f4:2d:6a:2e:64:c4:46:6a:70:
dd:6c:09:95:a7:20:e6:9a:41:39:5c:d6:6a:b4:7b:
a3:41:09:da:0e:bf:61:5d:53:a6:7c:02:1e:7f:9c:
48:98:32:82:8a:99:8d:74:1d:07:e6:20:17:8a:d6:
d1:47:88:ce:c3:dd:71:a3:5b:35:15:8f:0e:b5:d9:
76:0c:94:26:59:03:50:97:f6:6d:b3:ac:12:a8:55:
d0:09:57:68:79:79:f1:5b:47:7f:d3:35:4d:9f:cc:
00:c1:44:46:5a:ae:65:26:ed:c3:e4:95:24:f8:29:
44:d8:16:06:bc:1e:4b:79:93:4f:ef:6b:03:3d:72:
6a:de:94:4a:0e:21:ae:9a:18:93:0d:df:71:22:fd:
d8:e1:f0:bc:44:b6:67:47:02:83:dc:87:06:0e:ae:
b6:1d:da:df:8d:02:48:da:6c:c9:f2:91:09:f0:c2:
a4:c7:89:9d:fc:4f:03:6b:b2:09:73:1d:d1:d5:e0:
7b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:46:4D:95:AC:A9:CE:CB:4E:DC:BA:73:3F:08:8D:1A:97:CD:29:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8C6EEA23BA411F0807B35ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.41.0/24
Signature Algorithm: sha256WithRSAEncryption
17:c5:03:54:51:10:e3:f8:5a:c9:93:a6:c5:41:0f:cc:3a:89:
9a:d0:47:e4:58:a9:60:66:b4:d1:d1:b3:c3:c0:7c:55:05:cf:
bb:4b:a9:b6:8c:f8:3c:e5:4d:48:66:c9:0e:97:35:2c:c3:29:
84:41:b9:c7:83:21:fd:95:80:7d:9e:03:63:cf:24:ff:19:55:
12:65:07:98:f8:36:83:ef:b7:97:a5:42:64:19:b9:ae:8e:84:
fa:e2:b4:c9:fb:1c:16:aa:23:57:8e:fe:65:c3:99:a1:42:02:
c7:e2:ad:80:dc:66:f0:20:b9:69:46:a6:a0:66:3b:3e:27:ce:
24:1e:93:04:a3:f9:8c:e4:08:d0:55:66:66:64:2a:83:49:f3:
46:96:fb:53:76:30:ec:1c:f9:f5:96:6f:ae:a0:86:91:5c:14:
89:ce:46:7c:0f:ad:a7:bf:78:77:45:27:ed:4f:06:76:2d:9a:
62:a0:ae:d0:b8:f5:78:cf:f7:55:72:bd:da:a7:72:83:dd:36:
64:ca:e9:db:f0:44:b2:86:3e:48:b1:0a:37:d7:62:9e:c0:a9:
3d:57:1b:99:60:4f:d6:68:2c:96:54:1c:f4:9d:b3:22:6b:15:
e7:e3:60:38:40:25:d9:3d:79:70:a1:6f:74:c7:0c:01:02:26:
d4:28:e4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:22:06 2025 by rpki-client