Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/541039BA439511F08292B7C5DAE4EC9C.roa
File: 541039BA439511F08292B7C5DAE4EC9C.roa (raw, json)
Hash identifier: o4gofMncCa+MvAYsl3xBTFRdgnSIBULPOuuPamkEHXw=
Subject key identifier: D2:EC:90:B5:F5:E2:B9:11:1E:4A:81:C2:72:7D:9A:4C:D1:04:12:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015A47
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/541039BA439511F08292B7C5DAE4EC9C.roa
Signing time: Sat 07 Jun 2025 11:48:29 +0000
ROA not before: Sat 07 Jun 2025 11:48:24 +0000
ROA not after: Sun 31 Aug 2025 11:48:24 +0000
asID: 134548
IP address blocks: 156.240.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88647 (0x15a47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 7 11:48:24 2025 GMT
Not After : Aug 31 11:48:24 2025 GMT
Subject: CN=6844270d-d5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f8:6e:80:29:1f:cc:67:2b:98:a5:08:5c:25:
d2:55:63:4f:fa:26:55:22:3f:85:66:74:37:5a:9d:
fd:d4:65:46:50:19:a5:72:df:eb:8c:c7:a6:9f:39:
67:66:68:a3:36:d5:87:8f:ad:09:2c:26:55:09:3f:
11:ac:d7:48:a6:65:bf:8a:2f:e6:1c:25:05:71:00:
00:e9:89:e3:5f:22:19:a9:8a:34:f4:ce:24:0c:5f:
a3:dc:b2:1b:0b:c3:aa:fa:9d:a0:d1:57:4a:ff:c3:
1a:20:0e:a3:5d:d4:71:97:87:f1:bb:3c:bf:bb:bf:
41:ff:6a:5c:ee:57:63:e3:56:08:f3:81:21:c4:4e:
00:c6:95:2a:1c:28:b2:ac:cc:20:36:1c:26:26:ec:
31:bc:76:11:81:31:c4:0e:7e:79:44:f7:4e:07:29:
ca:83:b6:fe:97:21:2b:fe:66:ae:69:1b:75:40:2d:
09:25:74:5a:5b:2a:d4:d4:72:6a:53:9b:d1:01:d9:
d4:04:03:59:1d:52:fe:04:a6:94:ba:8a:bd:8e:2e:
48:e1:16:be:7e:66:af:62:66:a2:8e:63:97:59:85:
e3:72:fb:6d:d2:97:9a:74:d4:19:53:6c:f8:57:7b:
3d:60:75:e1:7c:4e:5d:ac:d8:66:2e:0a:3f:03:16:
83:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EC:90:B5:F5:E2:B9:11:1E:4A:81:C2:72:7D:9A:4C:D1:04:12:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/541039BA439511F08292B7C5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.255.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:c8:e3:5a:33:3a:4e:98:8c:f2:a5:fb:1a:14:84:99:46:92:
20:d3:72:a5:91:44:f0:48:10:1a:6b:bb:9d:e4:5a:10:73:8b:
08:d0:3a:3e:92:7f:eb:ca:b4:b0:d4:e6:e8:21:0d:9a:15:0f:
4f:71:c9:c0:a4:69:af:7b:cf:d5:ff:58:6d:6b:bd:6b:83:65:
ed:48:85:a9:34:75:21:55:70:89:fc:9d:7b:60:e2:20:30:df:
29:a4:ba:aa:a8:eb:bc:97:0e:2a:ea:f6:03:3f:72:e2:b9:36:
54:fc:7a:f1:97:ff:33:a0:fe:b7:4c:bc:05:73:c9:5b:60:cc:
53:15:be:b9:0c:3d:ce:57:13:dc:56:bf:8d:93:99:3d:42:19:
1f:4c:d3:89:7a:fe:2c:8f:fb:ab:32:a3:73:43:d1:29:37:95:
07:01:17:d9:bd:f3:b1:ed:0f:25:80:51:1b:02:b4:e2:5e:eb:
1a:3b:19:14:d6:d3:ff:49:6a:9c:4f:1e:00:88:58:0b:7c:ff:
3f:fe:e3:fb:5b:23:af:d9:38:9b:b3:f1:01:1a:5b:5a:d9:0f:
77:af:6c:db:dc:28:df:15:94:f7:ba:57:c4:f2:d6:1c:a1:b2:
de:13:9a:34:da:b3:6d:49:83:42:33:47:96:7d:0b:d0:72:50:
e8:b0:08:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:08:50 2025 by rpki-client