Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0A3068C4C4911F093F54D84DAE4EC9C.roa
File: B0A3068C4C4911F093F54D84DAE4EC9C.roa (raw, json)
Hash identifier: sorarGo1QqxrvrfL7f6C2QSLW64ZbVffVeofJhy37P0=
Subject key identifier: EC:C6:E0:C0:DF:B3:F7:9D:F2:CE:B9:A8:F0:0B:95:A1:FE:32:22:34
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015CD2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0A3068C4C4911F093F54D84DAE4EC9C.roa
Signing time: Wed 18 Jun 2025 13:39:43 +0000
ROA not before: Wed 18 Jun 2025 13:39:38 +0000
ROA not after: Thu 24 Jul 2025 13:39:38 +0000
asID: 54801
IP address blocks: 156.229.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89298 (0x15cd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 18 13:39:38 2025 GMT
Not After : Jul 24 13:39:38 2025 GMT
Subject: CN=6852c19f-9e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:53:04:e0:bb:fd:93:8e:92:5b:1e:99:7d:
e0:28:33:e3:e6:d2:eb:46:c7:90:15:40:db:44:bd:
76:00:f2:30:4a:b3:e5:e2:b0:ad:4a:3f:45:94:d5:
9a:e4:6b:86:f5:eb:50:db:81:d0:a4:13:69:3a:49:
91:e7:10:a6:8b:36:4a:46:08:07:76:b0:5b:e5:f6:
5d:11:36:b5:d5:55:25:2d:07:ce:ba:b6:59:55:d7:
99:a3:d5:47:c0:e5:ff:9a:eb:ba:3b:c7:62:8d:ab:
95:bc:62:49:c6:c6:1d:84:cd:1d:05:d5:2d:e5:6b:
9b:25:dd:07:14:5b:d5:3a:8a:0e:f0:ce:7d:d9:5e:
79:0b:a7:2c:02:92:9e:d5:89:df:48:c5:64:ca:da:
3c:a9:ba:cd:98:e7:da:ea:ca:9e:34:dc:2e:ed:48:
32:fd:5a:19:41:15:62:e5:b9:fe:47:8a:9f:bb:8c:
af:79:ae:11:83:24:5d:7c:b9:89:cf:88:5b:f4:f8:
ac:c9:dc:d5:4f:ee:c7:59:0b:d8:2a:32:2c:9d:55:
0f:44:fa:16:e2:5e:e1:96:69:38:4b:f1:75:67:bb:
2f:1b:da:cb:2b:45:67:f4:11:ba:a0:59:45:49:49:
94:ed:82:bd:7e:42:d0:9c:92:ab:ff:c3:f0:d2:82:
37:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C6:E0:C0:DF:B3:F7:9D:F2:CE:B9:A8:F0:0B:95:A1:FE:32:22:34
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0A3068C4C4911F093F54D84DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.128.0/19
Signature Algorithm: sha256WithRSAEncryption
15:cf:11:d2:a8:63:c4:49:b2:e5:4e:55:c0:44:05:2b:62:22:
5e:06:bd:be:1b:24:7e:d3:a7:f2:3d:74:7f:ae:e4:7c:ab:a2:
05:6b:3b:86:b7:33:85:29:a7:c2:e2:1f:e8:fb:a4:b7:58:40:
bc:e6:7c:2f:9b:85:f8:d6:64:6a:7d:4f:4d:43:57:56:fb:6e:
59:f0:6f:60:62:45:46:e7:6d:7b:50:df:e7:9b:b2:98:d2:9e:
78:3d:8c:ff:39:e9:78:c1:78:62:e3:31:b9:b3:aa:21:d0:cc:
9d:34:e9:9b:1e:0b:31:47:a6:e4:fa:26:e1:d8:59:f0:13:4d:
e9:bd:d4:e2:7f:27:b2:e6:f2:ce:60:da:d2:0f:77:2a:5a:89:
13:5b:93:61:21:e2:82:39:ef:30:c2:94:bc:e7:aa:f2:c2:f5:
f8:0c:05:20:a5:2c:a8:6d:4b:1b:9e:64:e0:44:3e:28:63:d7:
c9:7e:5e:41:d6:e6:ba:b6:44:cc:49:0e:56:8d:a6:ac:39:04:
33:c3:c4:a6:9e:1e:4e:cf:cd:03:98:8c:aa:ee:c6:8a:66:26:
1b:d8:4e:68:98:3f:83:05:cc:44:a5:ee:0f:19:08:60:d6:f5:
65:a1:51:79:c2:c0:b3:6c:bb:86:f1:5b:5b:54:08:0b:1b:7c:
8f:4f:64:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:43:03 2025 by rpki-client