Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE0AB210355511F0A3A6B1D0DAE4EC9C.roa
File: DE0AB210355511F0A3A6B1D0DAE4EC9C.roa (raw, json)
Hash identifier: qPGGqoyHYBRzk5BBfh3FGzEvvFlrjIfnyWUOcyd5aC8=
Subject key identifier: 51:A0:4E:4F:81:B2:03:4B:67:65:D8:3A:B2:AC:25:BC:5D:4A:EC:01
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015614
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE0AB210355511F0A3A6B1D0DAE4EC9C.roa
Signing time: Tue 20 May 2025 08:38:56 +0000
ROA not before: Tue 20 May 2025 08:38:52 +0000
ROA not after: Fri 27 Jun 2025 08:38:52 +0000
asID: 57043
IP address blocks: 156.233.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87572 (0x15614)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 08:38:52 2025 GMT
Not After : Jun 27 08:38:52 2025 GMT
Subject: CN=682c3fa0-bbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:88:f5:0a:55:23:62:cc:0b:fa:18:18:99:90:
96:48:0f:31:56:de:e3:c4:40:35:e1:b8:68:82:6a:
f4:38:31:11:28:9b:7f:e2:60:c7:c1:50:47:4d:8f:
f4:7d:96:f9:d7:b0:2d:c8:47:46:65:22:fc:5a:a8:
2b:ae:07:b6:ef:86:2e:cc:62:d2:60:67:7b:a2:d6:
e2:42:ca:1d:98:64:57:97:e5:f9:3a:13:d4:c6:b3:
27:95:db:1a:ce:fc:0c:3b:fb:dc:e9:54:06:f0:f4:
41:b2:70:ee:56:9b:78:c9:e1:fd:bb:19:b7:f7:9d:
57:6c:77:9d:8e:d7:69:57:87:38:b7:9a:c4:10:53:
1d:b9:7c:be:4e:18:96:b5:5d:34:75:a7:5d:8a:c8:
cc:5f:32:8e:5f:e5:90:f1:58:5d:bd:ae:a9:82:38:
c6:d6:73:3d:22:77:ce:37:9f:43:f8:88:63:78:f2:
53:71:50:37:ea:c5:d9:f7:02:d9:ef:7b:59:6d:d7:
3a:03:ab:8d:94:97:f8:9f:3b:0f:c7:98:fb:eb:54:
fb:9c:a4:17:19:1e:e4:76:c9:c2:9c:76:63:5c:a9:
a3:e1:ba:fd:0a:8b:05:50:e3:93:04:74:ec:47:ed:
6e:7e:ed:79:ff:43:39:35:30:6c:d4:28:14:ad:92:
c1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A0:4E:4F:81:B2:03:4B:67:65:D8:3A:B2:AC:25:BC:5D:4A:EC:01
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE0AB210355511F0A3A6B1D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.54.0/24
Signature Algorithm: sha256WithRSAEncryption
40:11:9b:b4:3d:93:8e:aa:a7:97:43:61:5b:51:16:84:e4:3c:
3c:d0:f7:59:06:33:80:f7:c3:8c:0c:b9:2e:5d:3d:ad:02:1b:
13:24:3f:84:70:16:85:af:20:73:01:bd:a6:23:7c:de:ae:cc:
c1:0e:c5:14:a9:34:cc:c0:9d:ac:83:ca:38:ef:53:08:32:e1:
64:82:a2:65:6d:60:9f:ba:e8:e7:5a:38:d2:45:aa:53:18:9d:
7d:c5:da:3c:6f:88:f4:8e:7a:4c:a8:af:5d:e1:4d:84:93:5f:
e5:af:37:9c:bb:aa:19:68:89:76:d4:ee:de:9a:6f:62:6a:bb:
6e:41:93:9b:d1:e6:df:cf:03:53:00:80:ad:39:ad:ae:1b:0f:
70:d2:3e:a1:f2:76:48:d8:53:d0:64:1d:8a:53:8e:40:86:9b:
a6:db:e1:b0:b3:c3:31:06:d5:aa:37:a5:58:ba:c2:c2:91:9d:
20:52:02:87:c3:1e:62:75:c6:c0:48:8a:74:2d:b0:fa:c8:36:
3d:bc:e0:a9:b1:c5:c0:92:55:8e:bc:07:6e:05:c4:19:f7:f9:
63:a7:f2:26:3a:2a:e3:3e:c6:6e:44:e6:5f:20:04:4d:f8:14:
4c:53:e3:ef:b4:18:cb:b0:10:5a:9f:69:b3:c7:10:73:de:7d:
69:4e:1b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:56:14 2025 by rpki-client