Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF0F84B8490911F09D407BD0DAE4EC9C.roa
File: BF0F84B8490911F09D407BD0DAE4EC9C.roa (raw, json)
Hash identifier: SsX7Nzi+Ct4qeoE9/uJO2Y6Vv+5v2ez6igAATbSW280=
Subject key identifier: 39:54:E1:A6:7C:64:51:C7:F8:14:22:D5:14:58:59:81:6D:F9:BB:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015C0F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF0F84B8490911F09D407BD0DAE4EC9C.roa
Signing time: Sat 14 Jun 2025 10:24:26 +0000
ROA not before: Sat 14 Jun 2025 10:24:21 +0000
ROA not after: Fri 25 Jul 2025 10:24:21 +0000
asID: 61112
IP address blocks: 156.231.139.0/24 maxlen: 24
156.246.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89103 (0x15c0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 14 10:24:21 2025 GMT
Not After : Jul 25 10:24:21 2025 GMT
Subject: CN=684d4dda-64d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f6:46:7a:03:73:7b:e9:0c:44:7a:41:77:6f:
27:d0:7c:8a:f0:b0:19:7c:bd:c8:fe:6e:d3:ca:fb:
6a:71:c8:f7:76:a9:d6:fe:88:4d:7d:62:50:42:d5:
c5:08:f7:e5:35:fb:f4:8e:f0:e6:10:d4:ac:f5:e9:
42:3b:07:99:c4:14:cf:bd:7d:27:e9:ca:16:8a:24:
0e:34:f9:38:24:e9:eb:78:b8:85:d2:da:29:9f:2d:
c4:48:59:fb:5f:cf:92:f5:63:f4:0d:9b:dd:3a:4b:
47:b5:1e:9f:d1:9b:63:64:39:52:8a:a0:23:b4:ba:
e9:c8:a6:98:a8:78:15:b5:c7:53:28:2e:98:72:7c:
09:93:33:17:d8:c5:ba:cc:a0:b6:bf:6a:ec:4f:64:
19:1c:f7:25:08:e3:bc:57:92:42:dd:d5:db:bc:88:
82:7d:f7:41:2e:41:55:e7:e0:a3:de:50:f1:01:1e:
a2:59:91:12:b4:65:2c:f0:fb:ac:07:53:59:79:6f:
47:95:f8:98:38:e5:5d:2f:34:10:a7:87:80:1f:86:
7f:8e:86:c0:cc:8d:bd:c4:28:9f:66:66:c5:c8:d7:
90:c3:81:6f:e5:6e:e4:b0:34:47:f9:9e:58:17:4c:
e6:f0:c4:bc:3e:26:81:fc:8d:27:df:65:f8:d5:c0:
15:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:54:E1:A6:7C:64:51:C7:F8:14:22:D5:14:58:59:81:6D:F9:BB:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF0F84B8490911F09D407BD0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.139.0/24
156.246.88.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:99:8a:cc:6c:d5:7b:cf:42:3c:df:43:77:f2:ab:39:07:b2:
ad:2b:59:b7:02:35:ce:69:12:74:c0:17:c0:5d:75:8f:72:31:
af:b0:0f:b5:47:ef:44:86:5f:19:f0:9f:e5:54:f1:6a:f0:14:
9e:c6:52:86:9c:0d:d7:14:ca:df:6d:f8:0f:8e:48:b5:d3:35:
b9:e8:f6:b4:cb:da:af:27:6c:2b:a1:90:42:78:28:4e:b6:9f:
16:dd:74:7a:68:40:e8:1f:60:31:5b:03:af:c9:82:70:a2:53:
8f:45:ab:c7:41:10:17:b6:53:aa:b9:05:54:b5:be:70:45:a8:
2a:85:a4:33:8c:3e:86:5a:9b:3c:e1:c8:75:67:05:77:70:88:
78:79:f5:96:b5:a8:1c:e4:f7:72:1b:de:3b:f5:6c:c1:92:89:
fd:c7:1d:90:b5:7c:9d:2a:b9:37:4f:37:18:c1:e2:50:22:6f:
cc:8b:43:d7:cf:30:28:b7:6b:22:ce:54:7b:fe:85:e8:f1:64:
ec:f6:19:5c:82:f7:5c:41:17:97:2a:6f:42:e2:1b:24:29:41:
61:c8:55:57:8f:b1:5b:c8:fe:8e:39:49:39:25:ad:91:97:7f:
96:77:b4:19:72:f9:7a:06:42:48:b5:e0:0f:e4:5b:91:ee:09:
3d:75:9b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:07:35 2025 by rpki-client