Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F860D5FE412B11F0B19C249BDAE4EC9C.roa
File: F860D5FE412B11F0B19C249BDAE4EC9C.roa (raw, json)
Hash identifier: 4veAjBkJN52HvXcsKWmTr6cGg8rLhIB8/6AOS0EEkco=
Subject key identifier: FC:1A:11:15:BC:A4:B4:0C:A0:27:EA:C7:D0:A7:A4:D9:95:44:6E:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0159AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F860D5FE412B11F0B19C249BDAE4EC9C.roa
Signing time: Wed 04 Jun 2025 10:09:16 +0000
ROA not before: Wed 04 Jun 2025 10:09:11 +0000
ROA not after: Tue 08 Jul 2025 10:09:11 +0000
asID: 200373
IP address blocks: 156.228.85.0/24 maxlen: 24
156.228.86.0/24 maxlen: 24
156.228.87.0/24 maxlen: 24
156.228.88.0/24 maxlen: 24
156.228.89.0/24 maxlen: 24
156.228.90.0/24 maxlen: 24
156.228.91.0/24 maxlen: 24
156.228.92.0/24 maxlen: 24
156.228.93.0/24 maxlen: 24
156.228.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88492 (0x159ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 4 10:09:11 2025 GMT
Not After : Jul 8 10:09:11 2025 GMT
Subject: CN=68401b4c-1115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d7:1b:95:22:37:b3:5b:4c:57:73:0e:3a:4a:
54:7b:cb:46:26:7e:0f:d7:d3:9b:ec:25:f5:9c:e5:
66:c1:d3:25:11:5b:d0:20:5c:17:4b:cb:d4:80:20:
72:e5:40:4a:a5:25:50:e9:c5:60:67:da:ee:05:a9:
7d:59:97:d8:ee:dc:49:20:41:a3:e4:8e:84:eb:79:
8b:4e:b3:b3:27:9a:11:6d:ed:00:29:8d:6b:44:32:
fa:8b:97:04:fa:e4:d0:2b:77:45:98:d3:a1:e0:55:
60:dd:33:48:71:3a:f5:b4:b8:7d:9c:0a:97:b6:b3:
af:fc:47:ee:3d:6f:15:89:e8:0d:0b:cd:9a:6c:4f:
3a:7a:29:1f:9b:19:5b:82:1e:f9:8b:d6:c1:53:a2:
89:e4:d1:23:26:16:7f:e7:25:1b:b6:18:b8:23:06:
1c:30:f6:2b:c3:bd:0f:2d:26:48:13:e2:07:46:17:
11:f5:61:11:6b:f2:27:44:58:63:30:a5:e5:4f:50:
79:95:00:5f:cf:d6:b6:fc:f9:da:67:49:d7:fd:65:
a1:b2:51:a8:f4:2c:92:c6:9d:e4:44:ef:f0:77:a2:
b5:27:ab:3a:15:58:c4:97:df:d0:bc:be:f3:fe:94:
c9:5b:5d:66:4e:a3:f5:1e:9a:33:dc:29:90:f6:85:
cb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1A:11:15:BC:A4:B4:0C:A0:27:EA:C7:D0:A7:A4:D9:95:44:6E:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F860D5FE412B11F0B19C249BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.85.0-156.228.94.255
Signature Algorithm: sha256WithRSAEncryption
32:1d:66:72:ed:2b:ca:8e:0f:e5:af:df:f4:ee:38:73:db:16:
af:d0:2a:95:04:90:00:19:6e:95:8e:cf:76:28:cc:1b:c6:4d:
e6:fc:a0:1f:b1:db:2b:3a:1a:df:c0:9c:39:27:2a:6b:ee:77:
db:2e:a4:84:bd:76:e4:34:60:b3:b1:a2:cf:95:40:15:cd:dc:
80:38:a1:4b:e2:59:33:62:03:c3:18:18:45:98:5b:15:30:e8:
79:20:65:ec:63:01:d4:72:89:89:35:4c:dd:93:04:99:6b:30:
b0:68:ea:23:c7:e0:e1:b7:d8:6b:f8:a1:a3:83:9d:25:3a:93:
aa:7d:0c:f5:42:2c:b7:84:c6:24:3a:2e:ce:e6:a2:6c:c3:ca:
a7:83:48:f0:8c:0e:ed:db:79:aa:db:51:95:6e:66:47:30:7a:
9a:b9:ff:18:4c:34:87:39:e2:0a:38:23:95:1e:33:34:48:ca:
e5:29:0f:e2:ae:d3:2b:34:dc:79:5b:b2:f5:de:04:09:22:68:
6a:97:18:f3:42:87:f5:80:4c:63:ad:c2:97:a6:f8:07:e3:72:
eb:35:23:0f:c2:a5:ed:6a:0e:3f:70:a9:29:af:44:c4:51:ed:
98:98:0c:be:b4:03:48:ff:68:cb:0c:e2:f2:bb:7d:6c:1a:f1:
0c:5e:ca:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 14:24:34 2025 by rpki-client