Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCA86AC63D5911F0AB3BC6C1DAE4EC9C.roa
File: FCA86AC63D5911F0AB3BC6C1DAE4EC9C.roa (raw, json)
Hash identifier: LL9GMC7vsvd5ODkBdw9zIkrkFrJnXoZRwH78VzmVzGc=
Subject key identifier: 92:01:50:FE:73:8C:70:53:3A:39:19:33:D0:3A:4F:59:9F:1A:44:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0158DF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCA86AC63D5911F0AB3BC6C1DAE4EC9C.roa
Signing time: Fri 30 May 2025 13:28:35 +0000
ROA not before: Fri 30 May 2025 13:28:30 +0000
ROA not after: Mon 09 Jun 2025 13:28:30 +0000
asID: 18013
IP address blocks: 156.224.18.0/23 maxlen: 24
156.224.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88287 (0x158df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 30 13:28:30 2025 GMT
Not After : Jun 9 13:28:30 2025 GMT
Subject: CN=6839b283-4f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:46:ea:cd:90:39:2f:db:07:93:ac:87:d6:
9d:c0:59:b7:25:1c:c2:a6:2a:d9:91:ce:b3:bc:3c:
7c:49:b4:83:73:9c:ac:94:27:f7:0a:a8:7a:6b:00:
88:f3:f9:18:ce:d0:c0:28:71:1e:a4:9d:23:91:75:
0a:f3:c9:2a:aa:61:01:0e:ca:e7:56:f8:b5:13:bf:
f7:92:63:6e:55:f9:fb:bd:aa:ee:88:99:17:35:22:
a2:91:bf:c3:d5:8a:01:07:b1:41:27:52:a7:67:a4:
ba:b1:e2:8d:22:74:c5:c8:e1:82:0f:4c:30:fa:da:
6d:ce:5e:0d:50:c3:20:dd:05:ba:a5:ec:83:19:a5:
5c:c8:f1:54:38:f5:0a:0a:1c:41:fb:37:67:1c:0c:
03:2d:75:dd:f8:52:9d:38:90:18:ab:75:07:8e:8c:
48:ae:c2:33:2b:6b:ee:ae:9f:a5:b0:cd:8a:5d:a5:
1c:87:bf:9e:7e:5c:ec:6f:93:8a:24:e9:c6:ea:13:
06:06:57:62:f4:28:95:c4:95:a5:41:a0:89:6e:6e:
60:c9:a2:d5:42:a1:c9:d8:0b:2a:05:36:e9:22:7f:
e0:4f:07:24:84:ec:3f:59:55:f5:bb:f0:48:16:35:
b8:94:19:c6:42:71:0c:7c:f5:1c:dc:14:3a:fd:96:
bc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:01:50:FE:73:8C:70:53:3A:39:19:33:D0:3A:4F:59:9F:1A:44:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCA86AC63D5911F0AB3BC6C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.18.0/23
156.224.28.0/23
Signature Algorithm: sha256WithRSAEncryption
04:94:03:2f:f0:0f:ca:af:ba:fc:fc:0a:20:1c:8f:c4:94:e2:
8a:3c:94:88:03:cf:0f:3a:1d:05:dc:3b:25:d0:bd:18:fe:b1:
a2:bb:66:3c:2c:1f:1b:43:be:86:86:ba:f9:68:8f:e3:4f:08:
fa:11:30:f4:e8:53:f1:fa:1c:6b:1e:4d:a1:97:98:a3:81:65:
3c:8d:f7:46:49:ac:6f:00:75:47:1d:a6:64:9d:bc:ca:da:3d:
1d:b3:2e:93:ae:92:7e:b3:d2:39:eb:7d:64:62:58:4e:c9:c9:
fb:e0:3e:cd:73:4c:2e:01:bd:39:92:ea:1a:0a:37:81:37:7d:
37:9f:48:e8:8c:6c:6e:28:29:c8:fd:23:da:ba:66:81:2c:e5:
96:2b:a6:42:30:83:a6:9b:92:0a:bf:c7:3f:14:8f:bd:00:06:
00:e5:85:57:4d:0b:2e:58:d5:1a:17:30:47:2d:1f:e5:1b:04:
69:49:e1:df:13:ce:37:79:05:49:6a:86:ad:95:0b:43:fc:9f:
cc:e9:c9:ae:e2:8d:47:0a:63:27:83:cd:12:44:2c:2f:d3:36:
f1:24:e5:a5:37:4a:8a:99:70:6f:d6:e1:7a:da:64:36:88:b3:
e7:fa:b2:c5:3a:94:ec:28:18:e2:6f:7a:12:f4:dd:01:2c:5c:
96:d1:e5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:36:10 2025 by rpki-client