Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/362898EC50E811F0AA7FF88FDAE4EC9C.roa
File: 362898EC50E811F0AA7FF88FDAE4EC9C.roa (raw, json)
Hash identifier: dVB37u+5ILm6SuqEuUH3bXmFZqykYcCiHLdiKxzuDK4=
Subject key identifier: 84:A8:95:0D:E0:25:3D:96:D6:BF:7D:BE:87:1C:1F:E2:10:96:C3:EF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015E56
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/362898EC50E811F0AA7FF88FDAE4EC9C.roa
Signing time: Tue 24 Jun 2025 10:44:32 +0000
ROA not before: Tue 24 Jun 2025 10:44:27 +0000
ROA not after: Thu 31 Jul 2025 10:44:27 +0000
asID: 61112
IP address blocks: 156.226.168.0/23 maxlen: 24
156.226.170.0/23 maxlen: 24
156.226.172.0/23 maxlen: 24
156.226.174.0/23 maxlen: 24
156.229.160.0/21 maxlen: 24
156.231.111.0/24 maxlen: 24
156.231.112.0/22 maxlen: 24
156.231.116.0/23 maxlen: 24
156.243.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89686 (0x15e56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 10:44:27 2025 GMT
Not After : Jul 31 10:44:27 2025 GMT
Subject: CN=685a8190-493d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c4:c8:09:35:1f:b9:45:55:09:7a:48:c2:92:
40:d7:5d:67:53:bc:74:a2:02:6e:cb:81:59:7b:13:
0a:f8:a8:fc:40:ba:eb:cc:7b:7b:3a:4d:e4:82:3b:
f7:b7:b6:52:83:0c:f8:32:3b:46:e9:b3:05:07:58:
05:bc:fa:e8:03:2b:57:eb:b3:a8:3c:25:42:9f:21:
d2:b9:69:dd:d8:b8:48:40:46:dc:51:e5:f6:3d:a6:
8d:d4:ad:8f:44:7d:45:62:e4:64:cd:35:40:4e:f6:
48:df:f6:bf:62:22:e5:78:c2:f8:70:f4:38:b2:03:
0a:1b:62:86:1a:17:01:8b:db:b8:c2:f1:f5:d1:30:
6c:fb:9b:6d:bc:cd:80:26:42:f4:ba:62:7d:71:4d:
d5:aa:13:3d:44:8d:a8:ae:06:f2:58:13:d3:e9:29:
ff:f0:18:0a:ca:e9:e6:6b:3a:b5:3f:63:4e:f8:c6:
7a:ba:ce:fc:f1:55:a0:52:d3:3e:8e:18:8c:02:a3:
f0:42:6e:8b:aa:94:6f:8f:84:48:63:4a:9e:de:31:
c3:c4:00:a4:37:cb:dc:9d:31:ab:b3:08:f5:00:17:
6a:3c:e8:50:07:7d:32:18:3b:bc:ab:37:dc:39:15:
ff:6e:ca:a7:ba:e0:e0:62:d2:0e:95:5c:ea:b6:45:
02:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A8:95:0D:E0:25:3D:96:D6:BF:7D:BE:87:1C:1F:E2:10:96:C3:EF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/362898EC50E811F0AA7FF88FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.168.0/21
156.229.160.0/21
156.231.111.0-156.231.117.255
156.243.244.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:72:18:07:1d:82:58:31:d3:04:29:59:84:88:d6:25:62:03:
d1:ee:ac:76:ba:fe:68:e0:8c:60:53:1a:7f:54:3e:9b:af:3a:
94:69:0f:c0:30:be:53:2f:d9:dd:2b:24:98:44:8d:44:e1:38:
48:21:03:e0:64:6d:b7:bd:20:58:f2:0c:9b:b9:62:0b:e4:fc:
89:41:71:6a:2a:74:e3:bb:af:aa:68:b2:ae:78:f9:16:b6:40:
ce:3e:46:bb:47:07:01:68:c7:c9:b8:2f:40:37:b6:53:6c:82:
76:6f:6c:02:d5:d6:e9:11:eb:98:a6:45:36:9d:76:c9:4d:46:
e6:0a:28:e4:24:40:31:cf:fd:58:a1:1e:a0:90:2b:30:d6:f8:
53:9d:87:3a:75:36:f6:e4:2e:7b:66:08:16:6e:22:50:32:4d:
f3:75:21:8d:af:c5:8e:4b:3c:65:d3:93:06:8e:10:2b:ba:42:
59:91:e0:fc:2b:5d:d3:e9:8e:18:da:66:cc:9b:9d:22:68:2c:
88:19:c5:22:17:80:44:1d:3c:fb:cf:f1:08:4c:d4:71:32:46:
00:95:01:bb:a8:0a:76:fc:8e:78:b7:93:71:7c:3a:6a:bc:8b:
e3:e7:27:5e:77:1a:79:b7:70:a5:fb:4b:e2:40:85:97:1b:fc:
3a:2a:cb:a2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 1 17:09:34 2025 by rpki-client