Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECBF09F2543411F082CCF680DAE4EC9C.roa
File: ECBF09F2543411F082CCF680DAE4EC9C.roa (raw, json)
Hash identifier: 3FyDwqHtmS1b2R3mlvt6fjE5iZJD8ZVLcd0eZmWhOpw=
Subject key identifier: 26:44:7A:01:B1:58:FD:B4:D6:AE:52:63:11:98:7F:6F:0C:A1:C9:EC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F47
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECBF09F2543411F082CCF680DAE4EC9C.roa
Signing time: Sat 28 Jun 2025 15:31:14 +0000
ROA not before: Sat 28 Jun 2025 15:31:09 +0000
ROA not after: Sun 03 Aug 2025 15:31:09 +0000
asID: 203020
IP address blocks: 156.228.6.0/24 maxlen: 24
156.253.180.0/23 maxlen: 24
156.253.192.0/23 maxlen: 24
156.253.196.0/23 maxlen: 24
156.253.200.0/23 maxlen: 24
156.253.204.0/23 maxlen: 24
156.253.208.0/23 maxlen: 24
156.253.210.0/23 maxlen: 24
156.253.212.0/23 maxlen: 24
156.253.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89927 (0x15f47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 15:31:09 2025 GMT
Not After : Aug 3 15:31:09 2025 GMT
Subject: CN=68600ac2-06cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5b:5d:d7:df:d7:01:03:b7:74:f9:68:e5:4f:
12:2c:ac:ff:c0:21:fa:f9:61:6e:f9:c0:4e:56:8c:
5c:02:a7:13:94:9b:73:03:d4:b8:96:b5:fa:bd:84:
65:34:e5:03:3c:8c:d0:2b:29:e2:9e:c9:dc:66:2d:
83:3b:77:b4:0a:e2:06:ac:f3:e9:33:f9:aa:53:ec:
e0:25:47:73:c3:0b:2c:d3:1b:6c:9e:e0:1f:3e:9d:
e7:64:a8:78:40:bc:20:57:da:d6:ac:6f:bc:a8:90:
3f:35:4b:11:d4:a6:e9:a8:46:a7:7d:0d:e5:34:bd:
a8:d2:22:1a:61:e8:7e:48:cf:31:6a:d0:c4:f6:d5:
31:55:4d:59:f8:07:35:a7:e6:c7:69:c1:41:64:a0:
c7:fb:98:b7:0d:49:e6:7c:b2:fa:26:c5:35:2f:e7:
6f:d0:83:02:65:61:46:65:e3:50:3e:34:aa:d1:fe:
c4:d3:aa:d9:d5:f2:d6:c3:fb:ad:a7:5d:6a:6e:27:
17:5b:59:18:65:22:0b:07:aa:da:c0:a3:b1:33:b2:
e8:15:cc:86:01:dd:fd:d6:d0:5e:07:f3:ed:e5:e2:
b2:0d:a0:4d:e7:2a:03:75:91:a1:64:99:dc:62:d6:
17:55:94:3a:1e:5e:18:de:01:ab:e7:4f:bf:2e:2f:
aa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:44:7A:01:B1:58:FD:B4:D6:AE:52:63:11:98:7F:6F:0C:A1:C9:EC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECBF09F2543411F082CCF680DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.6.0/24
156.253.180.0/23
156.253.192.0/23
156.253.196.0/23
156.253.200.0/23
156.253.204.0/23
156.253.208.0-156.253.213.255
156.253.216.0/23
Signature Algorithm: sha256WithRSAEncryption
22:0d:27:94:f9:49:0c:75:71:84:49:56:77:88:75:da:ad:38:
a9:46:bb:57:fc:4f:ff:6b:ad:2d:43:40:e3:8d:a3:ae:40:77:
c8:a1:81:cb:7f:9b:68:43:75:dc:ee:e4:11:4b:ed:0f:be:3e:
4b:47:22:a5:19:ae:7c:7a:46:dc:f4:d7:f2:bf:ba:3d:28:1a:
7b:49:97:7b:0f:00:e9:aa:7e:73:eb:d5:fe:41:c9:ed:79:01:
85:52:27:8f:d2:21:fb:73:20:2e:ba:97:1c:37:5d:ee:2a:63:
88:6a:bc:c7:d1:27:85:9c:28:a7:e6:8d:f5:da:30:3f:70:57:
71:4e:d0:78:9d:ea:0f:b0:ab:e0:bf:a1:62:17:b9:27:05:d6:
24:f9:f3:c9:cf:7d:9c:0e:9b:52:ac:23:5d:d1:ad:2f:37:ff:
c2:fc:bb:c1:ac:ed:03:52:01:24:a1:33:c9:9d:df:4a:11:b9:
c3:94:42:50:64:37:96:34:42:e8:8e:ec:35:6b:ae:09:55:0a:
88:33:da:31:e8:d9:23:9d:e9:0e:6c:bb:cb:20:3e:f2:a6:ae:
26:38:66:d9:34:29:36:d8:45:83:d1:d5:9d:58:f3:6f:05:7f:
18:3c:65:42:86:3a:79:19:c7:88:ad:73:74:5e:f2:60:1f:bb:
ba:e5:94:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:38:57 2025 by rpki-client