Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88A0B3A2478811F0A90BDDF4DAE4EC9C.roa
File: 88A0B3A2478811F0A90BDDF4DAE4EC9C.roa (raw, json)
Hash identifier: aVyA5EAIu7DXCSpBnkGjUIYm7RGf3ZTOxkO8S4y245Y=
Subject key identifier: 1C:C6:7A:27:08:E6:5C:27:CD:3B:7C:23:8E:E1:84:28:47:E6:56:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015B77
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88A0B3A2478811F0A90BDDF4DAE4EC9C.roa
Signing time: Thu 12 Jun 2025 12:26:58 +0000
ROA not before: Thu 12 Jun 2025 12:26:52 +0000
ROA not after: Tue 22 Jul 2025 12:26:52 +0000
asID: 142032
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Jun 2025 08:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88951 (0x15b77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 12 12:26:52 2025 GMT
Not After : Jul 22 12:26:52 2025 GMT
Subject: CN=684ac792-642f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:34:09:40:77:7c:10:d5:bf:6c:67:8d:b4:d3:
e6:cd:82:d8:89:a0:c1:57:64:8f:a9:36:57:11:2f:
76:6d:bf:3e:80:a5:64:09:97:77:9d:90:ef:4c:8b:
5e:0c:74:9b:cd:1f:74:ed:cd:70:9c:cb:99:38:e2:
12:51:65:3f:8e:9f:be:5b:75:c1:8f:93:fb:ab:7a:
53:39:db:0a:c8:95:a8:a7:dc:a7:ef:59:5b:ed:cd:
b1:bf:41:6d:52:d2:b2:68:42:dd:f7:64:f8:70:aa:
ea:dd:b4:32:11:51:d8:a6:7b:e6:8e:b6:a3:e3:21:
e4:53:c5:68:21:04:87:8c:c6:41:8e:b3:f7:02:18:
4b:0a:73:dd:8b:46:56:f4:25:e4:8a:6e:f4:61:8a:
2d:8f:ef:b4:77:05:7b:d6:58:21:2c:38:b4:85:5b:
99:4c:ae:76:47:fc:63:d9:5e:1c:31:98:fc:7e:b1:
75:ac:01:01:4d:ae:6f:b8:08:4b:6d:82:47:02:ea:
b0:50:c8:a4:4f:c1:7e:28:9b:fb:37:f4:45:38:d9:
f7:2b:b5:b1:11:28:bd:12:45:e5:72:5f:71:39:03:
67:ef:0d:cb:2f:89:2d:5c:30:df:d6:9f:6e:5b:e0:
82:32:48:24:bb:c8:f9:81:90:71:8f:b0:c4:4c:2d:
8d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C6:7A:27:08:E6:5C:27:CD:3B:7C:23:8E:E1:84:28:47:E6:56:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88A0B3A2478811F0A90BDDF4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:4f:ee:9a:68:5e:cf:38:82:08:d9:d8:09:be:e6:63:f0:1c:
bd:cf:ca:c7:a4:6b:8c:0e:74:e8:9b:84:90:78:4a:1f:de:0c:
8c:a9:79:a5:ad:4f:35:56:21:59:9c:06:4b:12:f5:25:4d:de:
10:73:c4:94:b0:15:60:ad:b5:6f:35:ab:88:bb:47:11:ae:b8:
0d:b1:5e:a8:da:75:c2:24:8e:b2:fd:cb:4d:7a:a9:e1:e0:33:
f5:64:c6:8e:16:62:bb:cd:d6:1a:1e:08:87:d7:19:c1:8c:64:
6e:d4:dc:94:a2:e7:46:b0:57:d8:56:63:b2:16:74:30:db:de:
59:d4:99:8f:9f:1f:86:f7:9c:50:c0:84:30:2c:6e:33:3d:71:
d2:8e:c1:8e:ef:dd:74:e6:7e:07:68:60:19:33:d3:e3:1e:82:
a2:88:57:39:32:4b:cc:67:87:f5:09:9d:8a:61:0b:97:e0:8b:
09:13:40:1b:4e:03:55:95:73:fc:42:59:a6:a4:1d:d7:d3:10:
d4:8b:a5:e6:f4:8f:5d:22:33:7a:5a:7a:46:6f:aa:9b:f5:49:
f1:17:42:97:d8:79:fb:eb:1d:60:b6:20:69:1d:d6:95:b6:db:
c1:cf:5d:87:18:c5:54:f7:a7:6c:c9:9c:9d:14:38:c0:6f:53:
d9:21:84:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 12:04:35 2025 by rpki-client