Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AEA1CC02B3511F0A46B2190DAE4EC9C.roa
File: 9AEA1CC02B3511F0A46B2190DAE4EC9C.roa (raw, json)
Hash identifier: 2opRNJRDNP7e/ZLHt6LpxGA6h5rhiE4gTJE8jNVvzFI=
Subject key identifier: 6B:74:C1:4E:18:56:DB:24:FB:48:C2:88:EB:ED:0C:1B:DC:EC:EF:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0152B2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AEA1CC02B3511F0A46B2190DAE4EC9C.roa
Signing time: Wed 07 May 2025 11:22:48 +0000
ROA not before: Wed 07 May 2025 11:22:44 +0000
ROA not after: Sat 06 Jun 2026 11:22:44 +0000
asID: 984
IP address blocks: 156.231.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86706 (0x152b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 7 11:22:44 2025 GMT
Not After : Jun 6 11:22:44 2026 GMT
Subject: CN=681b4288-553a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:72:b1:77:0f:c9:6a:a1:13:a4:a1:90:83:9d:
24:e5:ec:15:9c:20:b6:e6:71:48:75:26:51:ec:e9:
8f:e0:12:42:55:0e:84:32:e2:1c:7c:3f:56:a6:26:
e9:2e:89:c2:50:41:6d:10:b8:c3:87:e9:b0:6b:df:
7a:79:f6:be:37:ac:84:6b:33:56:35:ce:bc:54:04:
e4:9f:e3:27:e2:e7:07:a1:cf:b0:89:b7:0e:b6:cc:
aa:0e:a0:5d:43:3f:c7:8a:b3:41:e9:69:98:a0:ed:
c2:63:0f:f4:67:df:d5:31:f0:8c:e9:7a:b3:00:22:
ac:7b:a4:c4:e6:e3:5e:b1:72:3d:f0:65:ab:f7:27:
45:de:6e:74:4b:77:06:2a:88:be:14:66:7f:9d:51:
c4:cb:6c:11:ee:75:3f:96:3a:54:fb:1e:66:62:8c:
1c:60:d4:0e:37:a3:3b:d6:04:b5:a5:fd:1a:d8:c1:
38:1d:b4:ae:15:df:fc:aa:06:2d:91:b7:2c:49:51:
7f:6d:3a:7f:ec:c3:4c:59:e5:9e:63:70:de:e8:26:
ac:22:d4:b4:1a:9b:99:3e:35:aa:27:3a:ea:5a:85:
2b:02:f1:3c:e2:bf:60:61:e1:d4:c6:22:9b:6c:63:
8d:8d:e7:62:a9:4c:0b:63:85:b6:72:c1:e4:76:53:
52:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:74:C1:4E:18:56:DB:24:FB:48:C2:88:EB:ED:0C:1B:DC:EC:EF:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AEA1CC02B3511F0A46B2190DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.51.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:25:43:3d:39:31:47:be:b8:b1:e1:fa:ab:13:2c:3e:01:b3:
32:0c:62:31:89:f9:aa:b4:52:c4:3b:42:fc:4b:41:99:32:c8:
d3:37:ee:38:0b:1d:05:f0:69:ec:b2:34:47:1b:06:83:56:fa:
e4:3e:19:e7:d8:b2:5a:98:41:01:95:34:3c:5b:e4:ef:22:2f:
cb:a1:90:32:a8:c9:75:db:6f:a5:35:3e:c1:fe:22:4e:8c:50:
fa:a0:96:a4:4c:59:63:e6:d0:95:b0:1c:40:ab:d0:ee:10:58:
95:5e:5b:e4:3f:b6:27:3a:72:40:26:88:b3:86:4f:2b:3c:5b:
fa:95:59:0c:bc:1c:73:80:cc:4e:a7:3e:92:0b:2b:ee:26:06:
e9:91:1c:12:c8:6a:7c:15:eb:7e:cd:3a:a9:0d:46:26:c5:d3:
86:d5:0e:b2:3e:51:cb:2e:fd:8a:b9:16:ad:2f:0b:3e:ca:a5:
0f:64:4f:93:15:ea:2d:69:70:92:63:68:dd:ab:e2:fe:b0:dc:
9a:41:10:09:20:1c:51:0f:a8:d8:18:af:44:c3:96:e5:64:b7:
6b:1a:3d:9a:56:fc:eb:ea:89:4b:99:4b:97:34:39:64:69:54:
22:15:e0:80:65:05:f4:77:6c:a6:7c:7f:08:c6:f1:97:8d:b4:
ce:d6:23:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:42:42 2025 by rpki-client