Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/087D7268439C11F0AFEFAAF0DAE4EC9C.roa
File: 087D7268439C11F0AFEFAAF0DAE4EC9C.roa (raw, json)
Hash identifier: IXRDVdvJiBQLBSovuo0oJtSLiNCNgqUBxXwO7ABNRZs=
Subject key identifier: 77:B9:C9:D5:DD:8B:F4:67:8F:60:72:5D:AC:8D:71:2B:A6:73:7E:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015A4F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/087D7268439C11F0AFEFAAF0DAE4EC9C.roa
Signing time: Sat 07 Jun 2025 12:36:29 +0000
ROA not before: Sat 07 Jun 2025 12:36:24 +0000
ROA not after: Fri 11 Jul 2025 12:36:24 +0000
asID: 57043
IP address blocks: 156.229.120.0/24 maxlen: 24
156.229.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88655 (0x15a4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 7 12:36:24 2025 GMT
Not After : Jul 11 12:36:24 2025 GMT
Subject: CN=6844324d-e021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b9:71:fd:37:69:b0:ac:21:8d:74:ed:2b:76:
d4:ee:e2:43:e2:6d:b0:01:9c:da:9e:5a:c5:19:df:
70:58:32:6e:b8:01:43:fd:1b:51:63:fa:63:3b:db:
4d:97:3d:3c:d3:c5:59:5d:05:89:45:f4:59:41:b4:
91:71:82:7f:95:4b:a4:73:47:a1:fc:a6:a2:ac:72:
40:b1:a1:39:5c:cf:08:d2:80:bb:57:d9:11:73:5c:
15:99:d1:0f:c9:50:56:e0:ea:b3:14:2f:23:ec:c4:
a6:b1:02:72:45:24:fd:9f:90:c7:06:04:d5:f8:30:
4c:e0:ad:e9:8d:8d:ed:38:03:5b:52:95:fc:8d:df:
ae:9e:a2:45:c2:f8:d9:f4:5a:6b:89:37:d4:58:9d:
6e:79:a6:f5:7d:19:f0:8e:cf:9c:d8:6d:96:04:bb:
b5:f6:dc:ce:0b:7d:ce:eb:7a:a8:7c:67:8d:2d:77:
4c:86:c0:35:b3:d2:99:32:fd:82:ec:28:ab:93:08:
64:c6:cb:a4:73:24:5e:a6:f6:93:ae:4d:2d:98:cf:
50:3d:68:69:87:6d:6c:1d:b8:52:ad:0c:aa:30:b6:
eb:08:ac:37:63:33:66:34:ef:26:58:89:c6:87:84:
7e:57:1e:8b:b9:85:87:7a:64:f9:1f:fa:e1:3e:d5:
b8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B9:C9:D5:DD:8B:F4:67:8F:60:72:5D:AC:8D:71:2B:A6:73:7E:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/087D7268439C11F0AFEFAAF0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.120.0/23
Signature Algorithm: sha256WithRSAEncryption
82:53:90:c8:3c:df:98:d2:9d:7b:af:8d:99:6a:e9:a6:d4:f2:
71:c5:7c:1e:a3:2e:31:f1:f0:7c:f5:da:ff:79:f0:2d:57:3c:
a5:06:75:d2:c3:43:19:80:01:dd:f3:60:21:d9:61:f0:95:36:
45:98:22:00:4e:bd:49:60:45:37:28:86:2c:90:49:38:5a:8f:
d2:1e:c4:ff:0e:98:07:ce:5c:43:ad:61:35:6b:11:4b:5a:50:
db:b5:36:14:b1:d1:3f:7c:22:cc:83:e6:54:ae:62:99:50:67:
06:e0:ea:02:6b:8a:6c:a2:13:02:ce:04:10:26:2e:d1:b6:7a:
b2:38:d8:68:c6:77:04:66:a4:be:a7:2f:e7:5d:c3:e0:17:48:
16:a4:8d:ef:69:8f:b9:46:ec:27:62:ce:f5:a3:f0:9c:8a:19:
db:41:7c:e3:8f:87:8d:f5:d7:e9:a3:22:9c:b1:e5:3f:c1:e5:
2f:6b:0c:8b:c3:f8:a4:8a:80:4c:7e:6c:51:d6:79:80:d7:60:
82:e2:c6:67:1d:49:e4:16:8b:2b:5f:2c:d5:10:90:00:7f:69:
4c:dc:78:d5:0a:cb:41:92:0a:ad:c4:7f:6a:f0:96:24:f8:71:
cd:15:50:d1:da:d9:d0:7b:d0:d4:74:58:a0:32:e1:e4:33:23:
44:4d:8d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:41:39 2025 by rpki-client