Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD1BBFF2871C11F0BDDAFDB1DAE4EC9C.roa
File: DD1BBFF2871C11F0BDDAFDB1DAE4EC9C.roa (raw, json)
Hash identifier: VFPsXXlPGOJQjzWojjQZDWBsPAYFC8hzfmR/XW5p+vg=
Subject key identifier: C5:59:70:C2:93:60:DD:41:4B:45:D1:00:0E:23:5A:6C:5A:B4:B0:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017541
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD1BBFF2871C11F0BDDAFDB1DAE4EC9C.roa
Signing time: Mon 01 Sep 2025 10:17:29 +0000
ROA not before: Mon 01 Sep 2025 10:17:24 +0000
ROA not after: Mon 06 Oct 2025 10:17:24 +0000
asID: 5068
IP address blocks: 156.225.8.0/22 maxlen: 24
156.226.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95553 (0x17541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 1 10:17:24 2025 GMT
Not After : Oct 6 10:17:24 2025 GMT
Subject: CN=68b572b9-e44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:68:52:f8:35:db:4e:fe:fd:4d:6b:73:4d:b8:
48:d8:1a:96:55:ef:ac:bd:21:e9:23:b0:b0:71:c2:
94:f1:f7:a2:f3:e1:7f:b6:1f:78:29:e5:3b:92:dc:
2e:bf:b6:6d:66:fb:ed:fa:3a:6c:81:33:43:b5:44:
68:56:7e:cc:d5:2d:f1:62:57:72:00:08:da:c9:b0:
72:b1:b2:a6:01:7a:b7:1e:68:a1:6e:23:04:f7:a8:
2d:8e:01:9e:93:2b:d9:c5:b7:e1:0c:c4:6a:44:8d:
cb:66:14:d0:80:0a:67:1f:2d:09:80:2a:63:a8:4a:
2e:96:43:6b:aa:7e:ed:3f:5b:2d:66:d0:5b:91:db:
09:00:07:3b:e9:52:e0:32:2a:d0:f3:65:ae:9b:13:
3e:b0:81:e8:a0:a7:14:74:12:b9:c4:b2:1c:53:77:
6e:e5:35:55:94:4f:69:ce:93:1c:e7:24:ff:e5:a2:
78:c6:02:f9:da:25:7e:aa:b6:32:ee:a9:46:1e:9c:
74:53:76:54:69:fb:e8:b3:46:f7:34:ec:d2:19:7d:
a9:da:b6:cd:59:64:ec:d1:25:79:29:2e:a3:87:4b:
88:be:d6:1e:c5:fa:96:d6:b0:96:e5:b2:a1:d2:92:
71:12:2a:ff:fa:2c:f6:e2:bb:3b:87:95:61:ae:92:
9e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:59:70:C2:93:60:DD:41:4B:45:D1:00:0E:23:5A:6C:5A:B4:B0:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD1BBFF2871C11F0BDDAFDB1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.8.0/22
156.226.164.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:5f:4d:34:a1:21:65:63:f6:52:d3:39:5f:b8:9c:1e:88:4b:
8c:98:b0:b6:f1:2a:bf:4f:ef:c1:57:46:5e:1d:ef:88:0e:31:
a2:da:7c:f6:14:63:e3:4c:43:9b:4b:b3:62:44:f1:01:24:5d:
e4:3e:24:cb:a9:af:81:91:ca:db:65:e1:b6:23:e0:a2:d0:89:
80:21:b2:8f:f8:ab:fc:3e:8a:ac:74:ad:d8:a6:34:b6:92:22:
03:a2:ef:2e:a1:70:0f:c1:13:5d:c3:d9:2f:b2:1e:e5:be:83:
13:79:bb:f6:d3:36:1f:c0:ca:66:c0:a1:08:80:51:e9:da:09:
c0:67:58:86:a8:3d:f4:80:50:5d:31:1b:fd:c8:46:2e:9a:77:
45:0a:5e:0e:b3:2f:b9:75:fc:93:fe:89:3c:b9:a8:60:2c:7f:
0d:0a:61:01:04:19:22:0a:2b:5b:d9:05:c4:80:02:27:6a:b8:
22:15:31:5a:f9:91:cf:3a:5f:a1:92:9d:b2:ba:ab:72:33:67:
29:99:4b:47:da:30:a7:2c:6b:25:e5:e5:83:ad:14:86:78:0c:
7b:60:39:a4:5b:c1:c5:22:5d:85:e4:50:c7:a0:c7:60:49:9e:
80:ba:6e:02:45:06:94:60:e0:2d:23:e6:83:83:81:a0:53:cb:
5b:49:36:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:11:05 2025 by rpki-client