Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/555A6A244E7C11F09DCFFBD5DAE4EC9C.roa
File: 555A6A244E7C11F09DCFFBD5DAE4EC9C.roa (raw, json)
Hash identifier: YG9VPA4MQpIaYn+NNYPf1EW+4pxyY4xwFwd3gSbk7Us=
Subject key identifier: 1C:69:93:0A:E8:35:7A:79:DA:F1:34:87:51:4C:EB:77:BE:49:D4:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015D94
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/555A6A244E7C11F09DCFFBD5DAE4EC9C.roa
Signing time: Sat 21 Jun 2025 08:47:16 +0000
ROA not before: Sat 21 Jun 2025 08:47:12 +0000
ROA not after: Sun 27 Jul 2025 08:47:12 +0000
asID: 44559
IP address blocks: 156.246.196.0/24 maxlen: 24
156.246.198.0/24 maxlen: 24
156.246.199.0/24 maxlen: 24
156.246.200.0/24 maxlen: 24
156.246.201.0/24 maxlen: 24
156.246.202.0/24 maxlen: 24
156.246.203.0/24 maxlen: 24
156.246.204.0/24 maxlen: 24
156.246.205.0/24 maxlen: 24
156.246.240.0/24 maxlen: 24
156.246.241.0/24 maxlen: 24
156.246.242.0/24 maxlen: 24
156.246.243.0/24 maxlen: 24
156.246.244.0/24 maxlen: 24
156.246.245.0/24 maxlen: 24
156.246.246.0/24 maxlen: 24
156.246.247.0/24 maxlen: 24
156.246.248.0/24 maxlen: 24
156.246.249.0/24 maxlen: 24
156.246.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89492 (0x15d94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 21 08:47:12 2025 GMT
Not After : Jul 27 08:47:12 2025 GMT
Subject: CN=68567194-9ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:45:8c:06:26:29:33:07:e7:81:cb:d3:75:15:
62:cf:b4:46:b2:20:52:7d:bd:76:60:e1:93:a9:79:
01:08:04:21:db:3f:84:cd:76:2c:16:58:6a:c7:13:
e7:d1:5d:71:56:02:d1:c3:6b:85:dd:25:f0:56:4a:
e1:1a:ba:79:2f:54:4c:fd:0e:79:47:5e:35:af:0f:
f5:53:cb:7f:17:a4:6b:e2:0b:e9:b1:85:94:ef:81:
e1:3a:ca:fb:a3:1f:da:be:13:ba:ce:88:d7:19:2c:
6d:64:dc:61:8a:21:7f:ea:76:2f:0d:cb:3d:50:d7:
8b:5f:17:97:ab:a9:86:97:b9:27:59:a8:90:0e:d3:
e4:24:61:11:62:ac:1a:58:12:a6:10:31:48:c9:d8:
5f:36:31:df:c9:88:41:62:1d:c3:90:03:dd:c1:b1:
a1:6c:a2:52:88:74:d8:e9:73:43:1d:a0:d8:36:cf:
4e:74:2f:7f:16:c5:4e:51:c4:46:a9:e1:55:7c:bd:
18:c8:ae:dc:48:15:80:f4:16:d7:d3:e7:6f:31:90:
eb:56:ad:4e:09:6b:58:6d:60:5f:8c:fa:38:7f:b3:
35:1b:2a:33:b3:be:a1:c0:9d:f3:f1:4c:cf:0d:1a:
73:b5:08:a5:9a:8a:69:f4:7d:8a:cb:bb:1c:6b:03:
d9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:69:93:0A:E8:35:7A:79:DA:F1:34:87:51:4C:EB:77:BE:49:D4:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/555A6A244E7C11F09DCFFBD5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.196.0/24
156.246.198.0-156.246.205.255
156.246.240.0-156.246.250.255
Signature Algorithm: sha256WithRSAEncryption
8c:b0:61:41:b6:04:28:d5:09:56:63:a3:f9:1e:26:4c:0a:55:
e6:a8:d5:2a:c5:c9:c7:65:77:58:3d:4b:4a:dd:de:c5:a4:ec:
7b:d9:81:75:46:d0:a3:4d:ff:6a:2a:ae:ad:91:ac:88:7b:28:
e9:d2:95:75:8a:be:60:d2:f6:ad:25:70:3b:30:c3:a9:5c:d7:
1a:1b:7a:73:ed:a8:4d:51:f3:43:9d:da:ee:8a:72:8f:ca:b0:
9f:46:3d:1b:ad:f6:36:0d:77:7a:3a:6b:4f:6a:a9:a7:6f:34:
80:2e:8a:fa:aa:24:60:18:d4:16:58:ab:99:d1:97:2c:77:dc:
7c:44:fc:55:c2:06:70:1d:f9:c4:16:42:38:a4:8a:98:e8:1e:
3c:e7:20:db:36:22:3d:c2:72:ba:9e:af:3a:16:56:18:4b:79:
64:64:d8:0a:92:15:fd:53:ba:0f:53:ee:ca:68:5b:65:6a:ed:
e1:f0:a1:e2:c2:77:59:2d:42:0d:4f:c0:4c:29:fe:6f:55:dd:
6b:67:ed:fa:85:c1:3a:61:2d:2b:e1:4c:56:1f:48:3a:18:2b:
ef:38:ae:06:7c:5d:0b:74:53:7f:9f:6e:e5:3f:57:31:a8:50:
51:cb:98:8c:54:57:62:c8:0e:78:e7:a1:aa:63:76:74:86:48:
e3:40:92:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:04:04 2025 by rpki-client