Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3667AF450E911F096F95D99DAE4EC9C.roa
File: F3667AF450E911F096F95D99DAE4EC9C.roa (raw, json)
Hash identifier: FfPz+A793D0a2U+3LoIFqPTL3gvvD5rgDbCy6O5mbCk=
Subject key identifier: 4B:D4:63:11:2E:4D:44:42:2A:FE:77:CA:B0:19:36:40:F2:6B:BE:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015E5A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3667AF450E911F096F95D99DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 10:56:59 +0000
ROA not before: Tue 24 Jun 2025 10:56:55 +0000
ROA not after: Wed 30 Jul 2025 10:56:55 +0000
asID: 18013
IP address blocks: 156.245.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89690 (0x15e5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 10:56:55 2025 GMT
Not After : Jul 30 10:56:55 2025 GMT
Subject: CN=685a847b-67f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:73:07:a7:e1:ba:0c:da:e6:87:da:e1:1c:c6:
63:81:f7:84:30:5b:1b:03:c9:60:85:54:a7:8b:7a:
97:f8:b5:f4:dd:1d:6f:59:8a:35:04:c7:64:bb:a7:
88:93:6a:4f:2c:a3:e4:9f:d4:9c:cb:ee:21:3f:e2:
36:e2:32:21:29:21:4b:dd:4b:0b:5d:c3:1a:b6:50:
2e:18:4a:4f:34:dd:35:91:39:81:5e:c9:41:ca:4f:
54:9a:f7:d2:dc:b6:06:c9:ec:da:ed:7a:a7:fa:c5:
de:95:dc:1f:29:91:1b:8b:25:08:28:61:a2:4e:c7:
84:98:0f:ad:35:a3:7a:47:71:31:5a:9a:e8:46:ed:
5e:28:62:5c:15:12:64:19:38:ec:1d:d1:5e:60:be:
db:97:3f:05:37:5d:a1:22:4e:c6:a3:86:e1:5b:36:
39:79:3d:c5:2d:54:59:4c:ff:c7:09:ca:82:9e:9f:
28:cc:1e:35:24:de:61:eb:74:39:b0:9c:b0:38:45:
71:b1:2a:e3:65:1b:63:22:8c:30:da:99:5e:93:4f:
db:f7:4d:f5:b6:0e:48:a6:d0:47:62:d2:86:77:0e:
5c:da:36:90:69:fd:bb:92:ab:6b:e6:47:b8:f2:69:
c7:ee:44:29:13:a3:dc:8f:d7:75:84:c2:13:6b:96:
f2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D4:63:11:2E:4D:44:42:2A:FE:77:CA:B0:19:36:40:F2:6B:BE:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3667AF450E911F096F95D99DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.200.0/22
Signature Algorithm: sha256WithRSAEncryption
19:41:31:9d:0a:04:39:69:05:ef:27:2e:41:65:30:df:1a:3b:
7e:ea:b0:b9:2a:99:98:33:3f:9b:f5:8a:09:78:19:c8:6c:e7:
db:91:7c:fd:eb:a2:00:13:4d:79:17:14:67:ff:72:34:10:51:
f8:e4:59:2c:a3:f3:c8:23:46:ff:05:f7:a7:a6:f3:bf:57:2f:
95:38:3e:d9:8b:ce:6c:16:4c:86:75:b7:05:67:7e:a8:e5:2a:
6e:17:ab:50:73:6f:14:49:aa:87:bc:3e:57:9c:41:87:4f:20:
76:ee:45:8d:1b:3c:06:e2:c9:bf:82:c4:41:c6:18:c8:35:ab:
ea:fc:ac:95:96:c6:1c:20:c2:96:2f:a8:94:81:8b:24:0e:2e:
7a:ca:48:0f:21:50:b0:b8:fb:fe:8e:80:db:76:e9:73:de:a1:
85:33:48:52:c3:40:fd:ed:b0:4d:00:0e:3f:6a:da:56:ea:c1:
ce:50:db:0e:ba:2a:f3:6d:7a:d4:ef:43:20:9a:d5:ec:12:30:
93:2b:fd:c3:ab:b4:8e:62:8d:ab:23:c5:24:44:2e:3d:62:97:
e8:a8:2b:5d:3f:e4:2d:3b:a9:e3:b1:4b:77:89:bb:9c:ae:58:
ed:16:cd:4d:4c:18:43:51:b0:dc:01:53:62:76:69:48:be:79:
40:52:60:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:23:45 2025 by rpki-client