Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B81AB846490711F0B85310C5DAE4EC9C.roa
File: B81AB846490711F0B85310C5DAE4EC9C.roa (raw, json)
Hash identifier: E5z/hscLXjTugy8tp6tjAgByIFpNyp63FZ+pzTebTCM=
Subject key identifier: AE:FF:70:07:20:F5:73:D4:91:F3:57:2A:8B:C6:FB:5D:58:F2:C9:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015C01
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B81AB846490711F0B85310C5DAE4EC9C.roa
Signing time: Sat 14 Jun 2025 10:09:55 +0000
ROA not before: Sat 14 Jun 2025 10:09:39 +0000
ROA not after: Fri 04 Jul 2025 10:09:39 +0000
asID: 398823
IP address blocks: 156.227.160.0/20 maxlen: 24
156.227.176.0/20 maxlen: 24
156.252.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89089 (0x15c01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 14 10:09:39 2025 GMT
Not After : Jul 4 10:09:39 2025 GMT
Subject: CN=684d4a73-394f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f6:50:b7:b4:26:15:2d:9c:83:71:ea:88:6b:
4f:ce:39:98:4e:cd:bf:c7:81:41:5e:e1:80:d9:5b:
b2:98:63:38:46:4e:27:32:34:25:50:07:c1:4b:53:
6f:bd:65:1d:3d:cf:a5:dd:b9:e2:9e:91:44:78:2f:
70:6a:d9:64:0a:cf:92:18:c9:a3:b4:a6:98:c8:07:
c9:27:31:5f:46:ac:ea:e6:d4:84:96:d5:9a:2e:b5:
68:15:b4:65:72:9a:04:03:1b:4e:36:68:f4:67:c0:
40:c8:65:f3:5c:46:a1:22:11:ba:dc:6c:dc:25:3c:
78:1c:1a:8f:d1:6d:f9:87:59:7a:ad:49:44:56:c5:
8b:e0:aa:c4:47:30:33:e0:e5:7e:cb:80:92:cb:43:
35:94:cf:d7:94:60:2e:87:d7:5c:e7:82:79:96:26:
87:da:29:e5:81:db:29:70:66:f9:3a:e8:05:3d:39:
bf:34:ac:e5:3a:d0:88:e6:84:f3:5d:a0:1a:ae:27:
c5:56:f5:03:af:32:ad:59:ef:50:8a:4f:43:81:00:
4d:01:e9:30:38:9f:f1:96:3f:e8:54:37:2f:97:ff:
d3:38:69:fa:51:8f:1b:49:f8:96:c0:63:98:25:09:
a2:78:52:7d:34:7d:7f:73:d7:24:25:3c:bf:65:7b:
a1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FF:70:07:20:F5:73:D4:91:F3:57:2A:8B:C6:FB:5D:58:F2:C9:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B81AB846490711F0B85310C5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.160.0/19
156.252.96.0/19
Signature Algorithm: sha256WithRSAEncryption
a0:cb:ab:1d:62:51:9b:e0:ad:e1:cf:b4:6a:11:e1:ea:bd:65:
8a:39:51:03:28:08:82:47:2f:07:68:34:b2:7d:aa:a4:ba:77:
e7:a7:85:09:9c:8e:19:15:6c:4c:76:2b:e5:77:17:42:3e:3c:
59:31:8d:4a:c4:3e:a1:a3:4d:9c:c3:7a:f8:a1:ed:7d:f0:27:
2f:74:45:c8:8e:33:42:b9:d9:a7:c7:fe:28:22:9c:06:c9:72:
2b:f8:8b:56:bb:a4:3e:d7:86:1c:b2:ee:85:a3:c5:9f:95:f1:
71:cd:3f:3e:2b:da:0d:31:f4:34:c6:82:ad:62:82:5d:6e:6f:
c8:b1:3f:6f:8f:85:1b:a5:09:91:0e:26:f1:93:4a:dd:5e:d1:
7c:85:20:26:70:c4:58:3d:3a:38:bd:dd:97:8a:f9:1a:38:06:
32:e2:84:a8:a6:40:19:c4:5d:25:8d:36:bb:1a:47:f0:04:e9:
26:91:3e:8f:f9:15:e7:fe:ca:e0:01:3e:53:96:b8:cf:e5:f2:
e0:be:d2:c5:eb:fe:ea:bb:ae:fe:98:b0:31:14:ed:d6:ef:6d:
d2:81:43:d2:c4:7c:72:f0:aa:96:1f:f7:e4:2e:d3:02:ef:04:
bb:b8:5d:22:7c:9b:62:85:ac:17:cc:41:84:76:74:66:be:11:
f9:5c:99:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:01:12 2025 by rpki-client