Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6773FB4A4CF511F0844A5FE3DAE4EC9C.roa
File: 6773FB4A4CF511F0844A5FE3DAE4EC9C.roa (raw, json)
Hash identifier: IpFiYTazFM9zvnK97eKH3hYCw82pkrXdbGq5v+svq8c=
Subject key identifier: D7:83:C9:CD:E1:AE:8F:F7:6D:56:EF:DF:B1:FC:A7:9B:91:79:15:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015D28
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6773FB4A4CF511F0844A5FE3DAE4EC9C.roa
Signing time: Thu 19 Jun 2025 10:08:54 +0000
ROA not before: Thu 19 Jun 2025 10:08:49 +0000
ROA not after: Wed 24 Sep 2025 10:08:49 +0000
asID: 16437
IP address blocks: 156.236.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89384 (0x15d28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 19 10:08:49 2025 GMT
Not After : Sep 24 10:08:49 2025 GMT
Subject: CN=6853e1b6-2a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d6:30:24:3e:54:4b:75:39:6b:51:2e:6d:5b:
b0:da:6e:97:84:d6:a8:cc:34:1a:63:d2:0d:20:f2:
df:e0:27:c8:d4:3c:58:92:04:84:71:d5:ea:52:29:
45:dd:59:20:df:9d:a5:62:a8:ab:61:71:58:b5:ea:
8e:7d:f9:7f:40:c3:75:17:07:60:a8:68:21:aa:15:
9e:4a:eb:06:95:1b:e8:a2:43:e6:95:93:75:cb:02:
ce:b8:42:70:97:9d:43:bd:af:df:e6:52:f0:39:50:
3b:65:89:17:30:c8:a2:c1:c7:1b:94:04:b5:1c:0a:
c5:57:da:4e:74:45:ab:fe:cb:d6:88:0b:fc:ce:3d:
2d:7e:85:a1:ca:4a:75:0a:41:cd:c7:95:5b:04:89:
2d:21:7e:4d:14:4a:29:82:a0:97:0d:8c:54:83:b7:
fa:38:52:34:63:b8:64:b7:fd:68:62:ad:7d:cc:b4:
08:39:5e:af:d1:97:59:eb:22:44:36:22:d5:11:36:
ab:80:d9:2a:53:de:11:12:17:15:0b:7b:3f:9c:91:
a2:64:09:16:60:b9:bd:70:91:a6:8e:ef:8c:4e:8d:
7c:61:bb:ab:23:6c:5a:0c:94:68:8f:52:5b:0a:98:
af:5c:46:46:d6:fb:db:ea:27:93:36:37:d1:7e:56:
ce:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:83:C9:CD:E1:AE:8F:F7:6D:56:EF:DF:B1:FC:A7:9B:91:79:15:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6773FB4A4CF511F0844A5FE3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.80.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:8f:ca:18:c9:be:ec:1a:0c:5b:70:2c:4c:a3:15:ab:04:e9:
31:6f:79:e2:54:10:c1:0b:a0:d2:ed:c6:f9:9e:56:cd:dd:b8:
b2:a4:08:e8:73:40:6d:90:94:d1:c3:3d:cd:4d:e3:3c:5b:7c:
40:a4:40:58:56:d5:5e:33:7f:d2:f7:f5:fd:12:70:4f:0d:96:
fd:cc:00:87:d0:8d:87:fc:58:bc:0e:4f:1b:8c:71:2c:80:24:
7b:d3:36:16:41:af:13:55:02:4b:fd:8f:3f:cd:1b:5b:bf:25:
b1:c8:75:c9:19:66:4b:34:1b:67:7d:a3:45:94:2c:5c:b5:9d:
99:5c:38:2c:4d:ca:d9:02:c2:31:bc:36:95:89:26:7c:fc:7c:
a6:49:7f:54:79:8b:da:2b:f2:7f:8f:38:a2:2d:df:7b:b1:a4:
6e:6d:88:da:b6:ed:34:f8:19:6e:e4:91:07:49:c8:42:81:d9:
92:cb:d6:a8:39:14:2f:14:f8:45:72:8f:2d:75:ad:51:9f:24:
ec:aa:4b:58:65:ce:d7:e8:f3:96:35:f5:fa:f5:48:2f:60:be:
d2:a3:23:39:a3:ed:7e:52:11:9c:d0:31:30:bd:5f:53:5e:74:
bf:35:af:f6:5b:21:c5:f0:ce:7c:4d:46:e4:6b:f3:cb:08:2a:
b9:ca:a1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:11:07 2025 by rpki-client