Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4B6953427F111F0A89D4DBBDAE4EC9C.roa
File: C4B6953427F111F0A89D4DBBDAE4EC9C.roa (raw, json)
Hash identifier: xsV8Ql+DwukBzDx7EKUX1lDb4sf260Hc3aVFIouxD1Q=
Subject key identifier: 86:A7:FC:87:DA:81:63:40:27:0A:AF:85:42:FC:76:D7:06:E6:8D:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015194
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4B6953427F111F0A89D4DBBDAE4EC9C.roa
Signing time: Sat 03 May 2025 07:39:39 +0000
ROA not before: Sat 03 May 2025 07:39:35 +0000
ROA not after: Mon 09 Jun 2025 07:39:35 +0000
asID: 213690
IP address blocks: 156.249.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86420 (0x15194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 3 07:39:35 2025 GMT
Not After : Jun 9 07:39:35 2025 GMT
Subject: CN=6815c83b-048e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3d:87:2b:11:cb:59:fc:d7:8a:fe:62:c3:25:
4c:5d:57:84:dd:64:a5:27:6e:20:be:10:02:5a:53:
ad:84:21:d6:17:ef:33:23:6c:48:9b:51:6a:94:6a:
b5:5e:17:81:87:a7:44:c9:5a:e1:f5:aa:08:83:94:
a3:fe:d8:20:1c:f2:b2:57:c4:a5:e5:ee:30:b3:e1:
fc:26:be:63:46:26:05:0b:21:42:38:f6:33:d9:dd:
91:29:6f:7d:97:72:a3:30:29:bd:74:f6:c5:ff:35:
0d:4b:e6:a2:f3:51:d7:3e:0e:bd:16:c0:c3:8f:47:
05:3b:c3:38:d7:9e:f4:35:ef:b0:3a:63:18:83:1d:
62:5b:71:1e:ad:17:b3:8d:60:98:60:9c:ac:b8:aa:
20:90:4b:2d:1b:b2:5d:c2:38:cf:57:cc:86:7a:58:
53:7d:fb:e6:a2:f6:b3:9f:78:77:1f:fc:52:76:f6:
d8:36:22:56:b6:b8:17:a0:ed:56:90:ae:68:21:74:
a1:79:70:cf:43:40:0b:63:99:6c:4b:52:f5:fb:62:
c7:c4:d9:28:ac:42:56:24:9e:b1:a8:3d:af:96:9b:
68:2e:45:7e:ab:6c:89:c4:ef:bf:04:4a:c3:b8:03:
a6:58:36:b7:5d:5b:1e:df:31:05:3e:25:6e:75:f5:
cc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A7:FC:87:DA:81:63:40:27:0A:AF:85:42:FC:76:D7:06:E6:8D:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4B6953427F111F0A89D4DBBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.64.0/22
Signature Algorithm: sha256WithRSAEncryption
90:2b:5f:b3:99:2a:53:8b:1f:1f:f8:d1:6a:bd:28:71:81:dd:
f9:b5:3f:c8:f1:b3:8b:87:77:21:2e:42:ab:3e:07:a1:8d:df:
d9:4e:69:79:7e:2b:1c:09:b9:1e:65:c3:c7:64:48:48:c1:6f:
1e:86:9b:00:15:a0:4f:a7:68:68:b0:87:47:06:6a:ab:a1:0a:
12:58:e5:cc:63:3d:92:3d:19:93:ba:d8:68:2b:2d:76:bf:21:
00:30:03:3a:0c:1b:f0:5e:82:41:c3:a6:4b:cb:a6:5c:d2:04:
9d:74:a1:3d:b1:58:93:c0:01:44:35:f3:be:a6:62:73:80:a3:
11:dc:7e:1a:b7:54:a2:27:b6:02:4a:4a:db:2f:a0:ab:40:fb:
23:e7:38:a7:83:24:e9:24:39:d8:15:b7:c1:10:d7:43:81:b2:
55:df:15:49:b6:6e:2e:c2:b8:da:2f:d1:5d:26:2e:4f:07:e8:
0f:27:7e:4c:c0:92:85:e5:2d:18:47:b7:40:78:85:ee:3a:01:
ab:41:67:79:6e:8b:a6:0f:d2:90:76:d5:dd:91:5c:1f:1f:fa:
b8:4a:0a:09:13:55:08:f7:53:c4:5b:83:2f:82:ca:95:0f:ac:
29:1d:eb:0b:f0:20:33:de:48:cb:a6:6c:63:51:95:14:c6:ab:
05:8f:5b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:36:29 2025 by rpki-client