Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2E877786BAF11F081A68CC9DAE4EC9C.roa
File: E2E877786BAF11F081A68CC9DAE4EC9C.roa (raw, json)
Hash identifier: fwLS6PrCRmywQDstyWTn55DHPXGYCAQUijF9tEn6Omk=
Subject key identifier: DA:85:33:8E:0B:F5:4E:66:F2:FA:FD:E4:66:79:84:0E:70:98:23:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0167FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2E877786BAF11F081A68CC9DAE4EC9C.roa
Signing time: Mon 28 Jul 2025 12:39:22 +0000
ROA not before: Mon 28 Jul 2025 12:39:17 +0000
ROA not after: Thu 04 Sep 2025 12:39:17 +0000
asID: 13335
IP address blocks: 156.224.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 05 Aug 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92156 (0x167fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 28 12:39:17 2025 GMT
Not After : Sep 4 12:39:17 2025 GMT
Subject: CN=68876f7a-eee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:73:d6:ac:ee:28:b9:5e:c7:e3:8d:5a:2c:c9:
dd:bc:e7:6e:95:d2:43:f1:ca:b1:06:de:6a:f8:ad:
51:70:00:be:8d:88:1c:c9:d2:ef:5b:8a:b2:7c:95:
e6:60:45:2e:b1:c3:20:02:1d:78:f0:2d:8b:2d:a4:
c6:6a:7d:51:28:c2:a6:19:26:ab:f7:13:30:68:26:
1b:10:c0:04:70:96:44:a5:e1:40:8d:32:54:1f:65:
c4:9f:fd:d6:ea:2d:ca:46:57:f4:a9:2d:bd:0b:39:
ff:98:6b:77:61:4f:1e:37:76:bc:86:8d:9a:f9:d5:
ad:2d:9e:57:33:63:0a:57:14:78:10:82:ac:cc:fa:
20:b8:5c:dc:18:d3:e0:ce:43:9b:56:b3:e5:7b:f9:
27:91:70:b7:29:f6:0e:94:ba:19:0b:a4:41:e7:8d:
97:91:5c:51:68:2f:41:55:b1:51:5a:8d:9e:93:fd:
24:86:3c:d3:7c:d4:e2:a6:d3:b3:9f:1b:ec:a0:1e:
9e:5a:1d:7a:40:8b:db:63:9b:1a:3f:f0:b7:c1:b8:
8d:30:c0:41:16:d8:d8:a9:7b:bb:5f:1d:d4:c0:62:
cc:cd:dd:29:b9:67:fa:c2:e9:d8:89:af:4b:90:27:
f7:af:23:76:55:3a:13:f6:d3:af:81:e2:38:e0:d4:
88:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:85:33:8E:0B:F5:4E:66:F2:FA:FD:E4:66:79:84:0E:70:98:23:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2E877786BAF11F081A68CC9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.73.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:48:e1:9a:98:f5:95:98:2f:58:f4:bd:ba:f5:fc:a5:70:3b:
a8:be:67:5b:35:68:bf:a0:b1:95:72:d2:00:91:ad:78:8a:3f:
38:cd:06:76:dc:9b:b3:7b:8f:05:cb:98:71:1d:6e:1d:03:d5:
94:7d:40:d3:90:b0:50:1c:08:c2:55:94:b7:99:d5:8a:da:7a:
e3:21:a6:fa:1a:03:cf:a1:91:f7:80:73:41:2f:fc:ec:e5:bf:
45:3d:3b:78:ce:2d:b0:67:e5:82:14:b1:5d:42:7b:ae:f7:e1:
20:5c:1e:3a:f4:97:93:5f:22:e3:8e:03:57:47:87:2f:de:5d:
6e:80:a5:70:2d:30:de:21:02:8e:1a:3c:1a:34:34:ee:14:c8:
e1:94:82:1c:61:4c:30:f3:14:8d:7a:85:72:40:a9:ad:10:b2:
6e:b2:f2:47:48:3c:09:c5:64:33:c7:c2:f7:ca:b2:8f:31:4f:
16:fe:ae:a9:08:4e:4d:38:38:e2:9f:e8:4c:d1:38:2a:ed:c7:
36:12:ce:37:57:e8:e2:65:73:33:ed:64:af:8f:25:73:4b:3c:
60:04:f7:f0:60:44:0f:9d:c6:86:ae:9a:ca:9b:ec:ea:8a:a3:
4e:32:52:79:1c:bb:68:d7:f1:32:54:9c:96:3e:1f:b0:67:20:
db:38:17:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 01:46:07 2025 by rpki-client