Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80F34842438011F0A08012C0DAE4EC9C.roa
File: 80F34842438011F0A08012C0DAE4EC9C.roa (raw, json)
Hash identifier: Wp9bwudbCAx9/LkG9nfBh0nB1y3HQ0D5imO80aqbBOQ=
Subject key identifier: 59:58:C9:73:B8:2B:B5:66:6A:CA:4B:20:29:53:90:15:A2:22:C5:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015A24
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80F34842438011F0A08012C0DAE4EC9C.roa
Signing time: Sat 07 Jun 2025 09:19:25 +0000
ROA not before: Sat 07 Jun 2025 09:19:20 +0000
ROA not after: Wed 18 Jun 2025 09:19:20 +0000
asID: 134489
IP address blocks: 156.238.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 09:19:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88612 (0x15a24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 7 09:19:20 2025 GMT
Not After : Jun 18 09:19:20 2025 GMT
Subject: CN=6844041d-0147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1c:29:dc:cf:ae:b6:31:1f:58:64:20:b4:01:
a0:a6:98:86:99:46:26:2a:bc:2b:04:36:34:c8:73:
38:ac:63:ea:81:64:c7:72:21:c2:0b:6b:ba:ae:32:
7a:47:7d:89:43:a6:1a:8c:22:50:0e:89:72:6b:e9:
9d:21:8e:d7:97:9c:87:9c:e3:7b:71:a4:12:ad:b4:
2a:da:cf:cb:06:6d:ca:5b:b2:ad:f3:8d:20:2c:cc:
bf:86:66:09:e0:de:b4:2d:a7:ce:bd:9a:51:8e:20:
2b:a0:ba:49:59:a5:d5:05:ec:9e:a7:da:aa:98:5f:
97:52:bf:b9:c0:1f:da:51:bb:f3:18:76:e9:f8:eb:
b9:f4:42:9a:b4:ee:fa:14:9d:df:cb:30:6a:d4:8b:
56:2e:17:3c:03:41:b0:95:12:da:c5:8e:39:0d:bb:
d2:07:9a:1e:35:35:d7:bc:9a:5a:d2:57:5c:65:0c:
ae:5d:5a:6c:6b:c9:e2:92:50:25:fa:86:5a:fd:94:
88:51:27:d1:22:f9:59:55:83:43:7e:66:5e:60:b1:
07:2b:ae:6f:6e:bc:73:c0:82:36:b0:39:b3:a8:b1:
3b:18:5c:eb:6d:ae:6c:e2:05:b6:60:67:ef:83:65:
be:c9:44:5c:81:0d:55:aa:c4:d4:f3:62:2d:6f:d7:
3b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:58:C9:73:B8:2B:B5:66:6A:CA:4B:20:29:53:90:15:A2:22:C5:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80F34842438011F0A08012C0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.86.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a3:6d:2c:2d:13:6f:87:05:fb:c5:26:c7:84:7b:2c:92:88:
26:27:35:cb:42:9d:a6:ee:c7:57:71:f0:c0:81:d6:c0:d6:60:
75:82:db:43:f8:05:c5:98:da:a7:2c:b9:11:20:d3:e1:6e:a6:
83:e2:e5:df:83:d5:b0:65:0c:27:95:4b:f2:2d:72:49:ee:80:
b4:54:6c:af:70:8f:c9:47:a0:c1:40:b7:96:78:c8:41:39:e2:
cb:02:52:1d:f4:e7:5d:b2:2c:f7:a1:a1:b9:ee:9f:32:56:57:
2d:3f:6e:43:53:12:a4:c5:26:09:75:ef:ce:15:99:e1:31:ce:
69:42:04:35:1c:71:f7:d8:ba:d5:ae:c5:fe:b6:be:66:b8:71:
98:89:5f:96:76:ce:68:15:90:5a:75:cc:8a:96:81:f2:93:61:
e3:91:b3:ad:dd:37:aa:6f:07:42:b2:f5:61:a6:03:40:5a:78:
6f:46:94:12:87:26:3b:70:4c:39:f4:6b:91:9c:19:56:ae:d4:
37:8b:20:8d:d6:a4:f1:18:44:8f:bb:75:d0:fa:26:e9:40:8c:
5b:e9:d8:56:23:ec:93:4a:29:66:cb:5d:7c:b4:0d:f5:ef:e7:
08:11:a8:43:b5:77:73:4f:b7:d1:7c:db:ad:91:16:85:1c:1c:
f9:36:8e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:40:17 2025 by rpki-client