Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/642B5EC2243E11F0A32263EBDAE4EC9C.roa
File: 642B5EC2243E11F0A32263EBDAE4EC9C.roa (raw, json)
Hash identifier: b8Li92SWLidbsdvczMfpx3eN+kpmMlqG8HoE7hrErhc=
Subject key identifier: 7C:5E:53:85:BF:3F:B3:78:7D:B3:4D:7C:16:B8:98:DA:EB:4F:51:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014F76
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/642B5EC2243E11F0A32263EBDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 14:38:04 +0000
ROA not before: Mon 28 Apr 2025 14:37:59 +0000
ROA not after: Sun 26 Apr 2026 14:37:59 +0000
asID: 984
IP address blocks: 156.232.87.0/24 maxlen: 24
156.235.20.0/24 maxlen: 24
156.235.48.0/24 maxlen: 24
156.235.56.0/24 maxlen: 24
156.235.62.0/24 maxlen: 24
156.235.85.0/24 maxlen: 24
156.238.1.0/24 maxlen: 24
156.238.13.0/24 maxlen: 24
156.238.29.0/24 maxlen: 24
156.238.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 07 May 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85878 (0x14f76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 14:37:59 2025 GMT
Not After : Apr 26 14:37:59 2026 GMT
Subject: CN=680f92cc-d10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:39:71:54:05:de:ab:df:4f:f7:71:a0:97:26:
cc:3e:da:2a:32:4f:b1:bf:53:73:a1:39:2f:4d:13:
14:9c:86:d4:85:e1:f5:81:e2:b8:90:cc:4f:9d:07:
19:81:b6:ce:41:5a:fc:32:3a:d6:e7:6b:6f:9d:28:
b5:67:7e:b8:76:ed:c1:2f:1e:e1:ba:b4:1d:95:38:
28:c5:2e:50:96:84:e8:9e:60:5e:6e:5a:18:46:24:
fd:ff:dd:34:1f:14:d7:f4:af:f0:0f:5a:58:0e:0f:
1a:c0:f4:05:08:76:41:2d:82:ca:dc:2b:26:73:65:
e7:83:0c:0b:02:87:65:dc:18:18:96:97:f2:df:7b:
6d:f5:5d:ca:ce:24:c8:64:db:7a:95:60:ee:ef:09:
f2:3f:cf:a8:f5:5f:36:21:a9:eb:19:a3:7b:9f:a7:
4d:35:99:62:8c:4c:1a:12:3d:07:56:f2:e0:83:aa:
b0:ac:ba:45:87:5c:b0:e3:4c:84:df:d6:67:f2:4d:
2f:c3:aa:55:ed:4b:3f:ce:87:32:e3:26:99:5c:08:
ac:52:05:f7:5b:95:ca:69:91:fe:f9:75:d7:81:4d:
50:99:32:7d:2e:67:ea:60:34:fa:a4:ed:65:68:61:
4a:0a:f3:fc:94:16:ed:fc:a4:29:6d:bb:64:1b:30:
57:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5E:53:85:BF:3F:B3:78:7D:B3:4D:7C:16:B8:98:DA:EB:4F:51:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/642B5EC2243E11F0A32263EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.87.0/24
156.235.20.0/24
156.235.48.0/24
156.235.56.0/24
156.235.62.0/24
156.235.85.0/24
156.238.1.0/24
156.238.13.0/24
156.238.29.0/24
156.238.44.0/24
Signature Algorithm: sha256WithRSAEncryption
45:cf:55:b4:f9:84:9e:60:5a:36:db:8e:b5:e6:50:04:60:e1:
40:e0:df:8b:6e:ea:a3:7d:dd:47:b0:88:3b:a6:87:17:aa:51:
be:21:af:ee:96:48:b6:03:c0:e4:61:60:86:6d:b7:1c:4f:a5:
90:a0:0d:bd:f7:1a:6d:41:c1:b4:16:91:88:9f:dc:41:ca:53:
4f:8b:ad:4d:46:6a:d2:fa:52:af:10:57:be:21:15:7b:5a:91:
43:1e:23:8f:d9:da:b0:3f:d9:d4:f0:98:a3:fc:be:a9:82:f8:
e1:4e:50:49:5f:ef:83:3e:74:27:2d:22:13:c2:1d:fc:2b:f4:
30:52:a1:a1:64:30:40:3c:0d:92:92:54:61:4b:59:a3:26:14:
c8:a7:a9:c1:0d:d9:68:45:78:e7:f1:bc:1f:d4:56:0c:3e:91:
c3:4c:d0:82:1c:07:b9:76:f0:bc:72:39:ad:61:bd:3c:92:ed:
b5:64:dc:72:04:9b:2c:c9:52:33:06:75:91:a4:9d:34:84:93:
41:4c:0c:b7:85:b6:ab:a9:b4:e9:2c:4d:a0:3c:55:fb:9e:9b:
48:01:51:19:9e:32:43:66:55:86:f1:0b:11:0c:49:01:7f:74:
74:b4:83:3d:eb:46:67:ea:01:81:ee:99:42:e0:6f:17:ad:f3:
ed:94:2a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:02:58 2025 by rpki-client