Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4BB69022B3011F083E452EEDAE4EC9C.roa
File: F4BB69022B3011F083E452EEDAE4EC9C.roa (raw, json)
Hash identifier: +yIN9vf+gLoqAbJn8a1maNR9LhHBXOCjEbGhR0wL2xc=
Subject key identifier: 67:0C:9D:1C:B5:EE:72:76:C4:88:A7:0E:A2:60:89:B7:7B:BC:1E:24
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0152AA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4BB69022B3011F083E452EEDAE4EC9C.roa
Signing time: Wed 07 May 2025 10:49:32 +0000
ROA not before: Wed 07 May 2025 10:49:27 +0000
ROA not after: Fri 06 Jun 2025 10:49:27 +0000
asID: 36137
IP address blocks: 156.245.64.0/20 maxlen: 24
156.245.80.0/20 maxlen: 24
156.245.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86698 (0x152aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 7 10:49:27 2025 GMT
Not After : Jun 6 10:49:27 2025 GMT
Subject: CN=681b3abc-c6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:82:ed:cc:0b:2e:be:dd:4c:88:6e:01:64:78:
41:ce:bd:e8:8f:9f:b2:ea:c2:9e:ab:46:96:84:48:
19:d0:7c:08:b4:7c:54:54:5b:da:b9:d6:13:86:fe:
f1:0a:d5:57:cb:f7:f4:fd:d7:64:2c:d7:0a:37:04:
ea:b2:90:f8:48:05:c8:01:f9:d2:64:ce:1e:47:9f:
74:77:46:3b:df:44:7b:7a:9f:a9:95:10:fb:93:9a:
08:9d:1a:a0:47:86:12:b9:e2:12:1a:b2:15:cd:8b:
a2:a8:22:ba:15:03:4d:2b:87:07:ac:b2:45:2d:aa:
18:f2:0b:c2:ea:c7:8c:7f:90:ef:d5:0b:4b:6c:72:
58:af:e7:7c:8b:e8:e9:75:8f:22:15:30:50:2a:b8:
97:8d:28:04:72:82:42:14:2b:da:a5:fb:cf:3f:90:
68:36:dc:d1:1f:06:77:e0:e3:b2:00:84:3c:53:a2:
a4:8e:76:ed:6d:e2:e8:07:8d:00:91:97:89:58:52:
40:36:56:98:61:df:93:d0:43:e7:51:69:d2:48:e9:
e7:2c:9e:d7:23:89:cd:f3:43:38:a4:13:54:db:63:
5a:b1:62:a4:32:85:ea:30:8c:cc:3f:45:6b:57:66:
8f:91:ea:e0:71:47:20:3c:cb:5a:7a:9b:88:74:71:
13:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0C:9D:1C:B5:EE:72:76:C4:88:A7:0E:A2:60:89:B7:7B:BC:1E:24
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4BB69022B3011F083E452EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.64.0/18
Signature Algorithm: sha256WithRSAEncryption
08:3b:ea:51:10:33:9b:8f:c9:e2:e4:26:f3:ef:fd:fa:e7:85:
07:a9:31:c2:da:77:ac:48:c8:3d:6b:d1:a5:ff:a6:82:e1:79:
ec:96:89:5b:de:5c:50:46:48:7c:92:b6:5b:f5:07:ac:15:40:
09:ed:e6:bf:84:59:05:29:c0:41:0a:eb:1a:0f:7a:e8:4b:30:
9b:3b:33:30:2b:87:87:3b:c2:1c:e2:ef:5b:1a:38:87:1d:7e:
d4:12:1a:9e:c2:66:5b:ac:20:f3:da:63:67:30:3c:bd:8b:99:
e8:31:10:20:cd:50:8b:95:87:32:b5:61:21:1d:ef:9d:d0:94:
db:b2:88:03:15:d2:90:cc:45:fa:da:25:8d:f2:75:66:d3:07:
2a:51:f1:70:68:df:e0:a2:e9:38:e2:63:65:df:42:2d:06:d5:
cd:f6:63:47:62:2a:2e:7d:a7:e3:0b:6c:d0:7d:a8:ec:2e:f0:
57:ad:99:36:72:4e:a5:98:38:44:95:83:50:2d:27:56:c9:28:
be:58:65:dc:ef:fe:a9:09:f2:84:25:c0:a9:97:19:39:d8:47:
0d:62:e1:6a:d9:f2:b0:ad:97:22:49:72:6c:1d:09:14:ab:b6:
29:fa:22:2e:4c:93:29:0a:bc:56:84:2a:7d:19:49:df:7c:e1:
d9:e9:f5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:56:27 2025 by rpki-client