Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFCD037842CF11F0BD852CC2DAE4EC9C.roa
File: DFCD037842CF11F0BD852CC2DAE4EC9C.roa (raw, json)
Hash identifier: 0Q5QzGiQLa/hC9xgG5yiBc554LAF1E78z+quA9FSEHw=
Subject key identifier: 98:B5:45:99:CD:80:51:EB:C4:83:C0:16:B7:E6:1A:9A:90:8A:51:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015A02
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFCD037842CF11F0BD852CC2DAE4EC9C.roa
Signing time: Fri 06 Jun 2025 12:15:03 +0000
ROA not before: Fri 06 Jun 2025 12:14:58 +0000
ROA not after: Sun 31 Aug 2025 12:14:58 +0000
asID: 399077
IP address blocks: 156.240.195.0/24 maxlen: 24
156.240.196.0/24 maxlen: 24
156.240.197.0/24 maxlen: 24
156.240.198.0/24 maxlen: 24
156.240.199.0/24 maxlen: 24
156.240.200.0/24 maxlen: 24
156.240.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88578 (0x15a02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 6 12:14:58 2025 GMT
Not After : Aug 31 12:14:58 2025 GMT
Subject: CN=6842dbc7-f140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e4:13:76:13:dd:dc:fa:56:ca:06:79:12:2f:
ce:aa:46:94:71:ba:44:86:52:22:0b:b9:af:aa:cb:
89:3a:81:58:8e:ee:ac:5b:c1:cc:2d:39:17:8c:c9:
01:ba:c0:c0:71:4e:dd:64:41:52:c8:b7:38:3f:2e:
54:d7:89:68:d4:58:61:fb:bc:1d:2c:49:dd:9f:d2:
e7:47:d6:49:f5:35:d1:f7:b7:c7:67:b3:a7:89:8e:
82:58:74:28:b9:6e:f7:57:85:c6:7f:81:25:77:4b:
e6:fc:44:bb:f9:ac:06:f5:97:cb:4a:6e:ae:d5:a5:
25:f0:8d:7f:cb:04:12:ab:94:bd:16:37:df:86:51:
fb:66:9f:d8:53:07:1b:aa:d1:81:ee:65:71:c4:fb:
1c:06:26:4d:59:1c:9e:b8:f9:45:ea:a7:3e:d8:1f:
0e:ed:12:5a:8e:0d:f3:16:2c:1e:67:b9:65:7d:7e:
2c:02:42:2c:12:65:a7:14:1b:ac:6f:0a:d7:06:03:
79:f4:71:df:4d:bd:bc:c9:40:a0:d7:a3:a6:09:06:
a7:9d:29:74:97:bd:08:ac:1a:c7:df:e9:2f:a0:9b:
c8:90:40:35:5e:9a:e2:6c:4a:67:98:26:72:9e:f3:
a0:1b:60:eb:5f:86:be:ee:e8:9e:3c:d3:06:be:cc:
da:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B5:45:99:CD:80:51:EB:C4:83:C0:16:B7:E6:1A:9A:90:8A:51:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFCD037842CF11F0BD852CC2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.195.0-156.240.201.255
Signature Algorithm: sha256WithRSAEncryption
79:a9:8e:df:3d:e6:c4:b1:7a:1a:68:98:28:87:68:8e:f6:3c:
8a:f0:c3:e6:84:db:f3:3f:82:24:a0:eb:5f:c6:e2:c9:6a:b8:
fa:36:6b:7a:d2:84:ad:86:89:b9:c1:a0:8a:77:8e:25:f1:5a:
9e:b6:a1:cf:ca:e5:99:8a:a3:1f:1b:15:b7:e7:ea:17:fb:6f:
32:bf:ff:59:f3:81:a2:4d:31:4e:9a:28:56:01:40:42:b5:61:
d1:e2:b9:9c:78:bd:9f:32:a8:cc:24:db:9f:7d:d6:d8:fb:6d:
11:1d:b0:4c:3a:fc:4a:15:ad:d3:d5:cb:ab:5d:5d:23:57:02:
cf:1d:8a:02:54:a4:b5:dc:27:6b:41:12:a3:c1:45:c0:26:c3:
e7:a7:44:30:34:22:31:70:e5:0c:3a:4b:f2:b9:ea:63:72:13:
aa:00:e4:21:59:6c:8f:cc:66:4a:e3:77:24:b7:32:06:e7:52:
7a:ce:b0:67:84:66:b6:99:59:8f:ce:6d:ac:1d:98:be:3b:24:
fa:50:1f:9d:20:5f:6d:5a:ef:0e:0c:51:fe:5f:90:81:e5:47:
c1:e7:d8:43:7b:35:1c:5d:53:74:d8:6d:6c:74:88:63:a1:8e:
78:dc:e0:02:8f:24:03:ab:a7:2c:c7:ed:e3:89:84:a2:6b:ff:
ba:3b:40:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:23:01 2025 by rpki-client