Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2444E3A66D411F09E1038ABDAE4EC9C.roa
File: E2444E3A66D411F09E1038ABDAE4EC9C.roa (raw, json)
Hash identifier: emBxvDAKYMIGzd5qYFyZi9i+5SchSq42VJlW66QT7sc=
Subject key identifier: B2:C9:D8:D2:80:ED:47:6B:52:9A:BE:85:EC:00:D0:72:8E:03:87:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016689
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2444E3A66D411F09E1038ABDAE4EC9C.roa
Signing time: Tue 22 Jul 2025 08:21:37 +0000
ROA not before: Tue 22 Jul 2025 08:21:32 +0000
ROA not after: Fri 29 Aug 2025 08:21:32 +0000
asID: 401254
IP address blocks: 156.224.84.0/22 maxlen: 24
156.224.92.0/22 maxlen: 24
156.224.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91785 (0x16689)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 08:21:32 2025 GMT
Not After : Aug 29 08:21:32 2025 GMT
Subject: CN=687f4a11-8063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:79:33:01:4d:0f:9f:1e:e5:6f:e9:bb:07:d3:
fd:1a:55:d0:91:0b:17:70:a2:8c:fd:23:58:26:d2:
fc:a1:ec:5c:e4:af:30:98:83:93:52:de:02:b6:08:
00:74:6f:8b:17:06:7e:c5:24:6a:61:73:6d:82:b3:
d4:17:7a:22:e6:e3:89:f5:df:ac:4a:d2:b7:c3:6d:
14:19:30:e7:9a:2c:d7:9a:dc:a8:22:0a:5a:d8:82:
59:41:5e:41:25:9a:b7:21:8d:c7:ab:fd:3c:ca:a1:
41:f9:a6:2d:ac:42:72:70:fd:38:15:35:9f:05:17:
ad:89:99:73:1d:d0:60:1f:3f:77:e1:13:e3:30:a4:
c1:4b:04:de:65:5a:ac:38:a3:03:34:2b:83:c7:f3:
1b:40:91:5e:ee:52:10:25:ff:f6:c9:54:69:d1:b3:
6e:91:c8:b6:82:59:ba:05:1f:be:ac:9a:b0:fc:44:
4c:13:93:5b:7e:c9:06:8c:90:2e:bf:6b:82:78:9d:
9d:33:6f:15:66:3d:d3:59:f6:f7:50:4a:c7:a1:f0:
ef:ee:52:da:c5:a8:0b:11:4b:4a:d7:a2:c9:13:fe:
4d:20:da:57:73:cf:d5:b5:72:34:34:86:4f:16:1f:
56:b1:34:72:1c:0b:ef:b1:ab:e8:f5:90:37:5c:87:
a8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C9:D8:D2:80:ED:47:6B:52:9A:BE:85:EC:00:D0:72:8E:03:87:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2444E3A66D411F09E1038ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.84.0/22
156.224.92.0-156.224.127.255
Signature Algorithm: sha256WithRSAEncryption
12:79:e8:05:08:7c:54:89:77:07:d3:37:74:78:17:47:d1:77:
66:98:fa:32:14:69:c2:16:16:a3:05:f9:86:1c:6e:0c:1b:21:
bc:29:9e:9b:e1:12:82:9f:e0:2d:d3:14:00:0a:ea:54:80:be:
19:79:c6:b5:04:8d:48:c3:4c:9a:fc:fc:da:fa:ca:b7:20:21:
9e:34:f1:d4:9e:e9:eb:7f:a7:36:16:33:7b:ea:57:60:8e:f7:
25:12:0b:c4:a9:89:fc:3f:1d:ab:d8:8e:7b:fb:55:3c:9f:1e:
ac:61:d7:93:e0:e9:61:97:e4:19:85:32:cc:6b:fb:cd:6b:aa:
42:78:5f:47:9c:b7:74:f0:21:12:5f:b9:80:60:ce:fd:0d:7e:
4b:da:6a:9a:1a:6e:cf:19:16:5a:aa:57:ee:01:6f:56:4e:20:
3e:ee:44:2f:4c:fe:26:ca:0c:af:ba:18:99:c8:d8:1a:a6:1b:
0d:6b:6c:74:a4:c6:0a:8e:18:d0:b4:51:34:9a:75:b5:b4:60:
f5:47:4e:01:19:f6:0a:cc:1a:11:ba:04:23:86:b6:42:e1:2e:
8d:03:10:d2:57:f6:68:ff:86:8a:19:8c:6c:aa:58:e1:76:82:
eb:37:76:d5:20:8d:fe:60:2b:61:14:61:07:d2:e4:07:e1:db:
62:9d:8b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:21:24 2025 by rpki-client