Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/092171DE502011F095D2F57DDAE4EC9C.roa
File: 092171DE502011F095D2F57DDAE4EC9C.roa (raw, json)
Hash identifier: GxQlUKBoz+bDmSPKvUfOrJ/+HxH8OxcOo5VO57eKBik=
Subject key identifier: 4E:CE:BD:39:3C:FC:A5:BC:D6:57:4B:01:1C:B3:F2:B6:71:0E:A7:93
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015DEA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/092171DE502011F095D2F57DDAE4EC9C.roa
Signing time: Mon 23 Jun 2025 10:51:37 +0000
ROA not before: Mon 23 Jun 2025 10:51:33 +0000
ROA not after: Mon 28 Jul 2025 10:51:33 +0000
asID: 59187
IP address blocks: 156.238.97.0/24 maxlen: 24
156.238.98.0/24 maxlen: 24
156.238.99.0/24 maxlen: 24
156.238.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89578 (0x15dea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 23 10:51:33 2025 GMT
Not After : Jul 28 10:51:33 2025 GMT
Subject: CN=685931b9-2125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fd:e3:ae:eb:8a:43:6a:e9:6a:88:a9:f6:91:
c3:34:3d:36:44:76:7b:a8:18:de:79:0f:a1:90:76:
20:22:07:f4:6c:6c:f3:0c:27:bd:4d:8b:85:bc:79:
a0:8d:15:55:cc:6f:60:75:4a:5f:24:51:62:d3:0a:
d1:46:18:2c:f4:36:d0:79:02:23:17:f7:c8:21:54:
93:9b:cf:81:86:11:a5:2b:59:72:f5:a0:06:a3:26:
6a:d9:45:a1:0f:e3:db:99:34:a2:f9:81:f3:a7:2e:
2b:7c:53:a7:6b:66:2b:aa:de:33:ee:a7:ce:e7:b3:
c6:ff:95:0f:1c:22:84:08:a8:f7:f7:cb:e3:1f:d4:
20:ca:58:85:3f:cc:fb:4f:43:ce:f3:20:0f:a5:2a:
0e:b6:46:83:e7:7f:31:b8:2a:0f:a3:34:e1:91:33:
89:e0:00:da:81:e3:ef:60:57:75:3a:f8:4b:35:d0:
e0:61:b9:48:4f:89:39:ee:6e:a3:eb:e5:af:76:30:
cb:97:0b:a9:b0:57:65:15:f1:f4:54:e5:0b:69:a5:
87:cb:44:9e:85:27:43:67:e1:56:8f:5f:18:60:94:
3f:63:ba:a4:11:8a:ea:ba:43:66:ab:3d:cc:03:58:
fa:be:67:76:77:f3:39:12:2d:e4:61:ad:20:f4:fb:
34:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CE:BD:39:3C:FC:A5:BC:D6:57:4B:01:1C:B3:F2:B6:71:0E:A7:93
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/092171DE502011F095D2F57DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.97.0-156.238.100.255
Signature Algorithm: sha256WithRSAEncryption
5f:58:0b:ae:1d:1a:f8:d4:69:94:5f:36:a3:da:43:09:db:ac:
3d:ba:c9:c9:87:50:91:f2:de:f0:bf:33:91:b9:f2:f4:0b:53:
28:14:81:34:fd:bc:d7:44:b8:4f:00:96:1c:4d:fe:8e:24:82:
bb:b6:c6:b8:95:c3:42:5f:5e:94:8c:42:52:0d:0b:e2:1f:38:
3c:10:f5:42:65:ea:fb:a0:2c:e6:40:78:30:8e:98:aa:51:81:
f2:84:3e:80:20:56:16:ed:46:db:5f:54:b9:dc:e7:ef:6f:77:
ca:3c:c7:e8:38:f2:b2:38:c7:6d:ff:7f:fb:52:4c:3e:a3:8b:
a4:87:49:19:e7:f2:88:53:b5:cd:4e:8d:90:ab:54:86:bd:34:
b5:e2:c9:f2:0b:0b:56:2f:e6:2d:ec:e9:e5:cf:ab:88:e4:3a:
8d:fb:49:2f:3d:be:32:42:2f:20:2b:c0:f2:c4:03:29:a8:eb:
69:9f:75:66:69:1e:ba:48:64:5d:75:c1:6b:91:ee:82:f4:81:
af:6a:1a:8e:cb:02:77:19:67:9e:c4:8a:ea:84:94:40:c6:f8:
28:fe:17:5a:14:f0:ac:bb:a4:91:88:96:41:0c:14:73:58:a0:
0e:b4:9d:e3:53:58:bd:67:1b:47:98:5f:88:75:ff:61:a6:ce:
4f:dd:41:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:42:57 2025 by rpki-client