Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/118B4454F5A711EF8BD5CC77762E951A.roa
File: 118B4454F5A711EF8BD5CC77762E951A.roa (raw, json)
Hash identifier: kZRJTzR/U//3rMVYmylnw+gNfUImzPOe4j2kxQ2f6E0=
Subject key identifier: 98:E8:1E:6A:F7:6D:E7:94:9F:69:F7:EF:23:6E:FD:67:CF:9C:BE:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013C4C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/118B4454F5A711EF8BD5CC77762E951A.roa
Signing time: Fri 28 Feb 2025 07:38:57 +0000
ROA not before: Fri 28 Feb 2025 07:38:54 +0000
ROA not after: Thu 19 Feb 2026 07:38:54 +0000
asID: 984
IP address blocks: 156.232.34.0/24 maxlen: 24
156.232.61.0/24 maxlen: 24
156.232.62.0/24 maxlen: 24
156.232.63.0/24 maxlen: 24
156.232.64.0/24 maxlen: 24
156.232.89.0/24 maxlen: 24
156.236.10.0/24 maxlen: 24
156.236.25.0/24 maxlen: 24
156.239.80.0/24 maxlen: 24
156.239.81.0/24 maxlen: 24
156.239.82.0/24 maxlen: 24
156.239.83.0/24 maxlen: 24
156.239.84.0/24 maxlen: 24
156.239.85.0/24 maxlen: 24
156.239.86.0/24 maxlen: 24
156.239.87.0/24 maxlen: 24
156.239.88.0/24 maxlen: 24
156.239.89.0/24 maxlen: 24
156.239.90.0/24 maxlen: 24
156.239.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80972 (0x13c4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 07:38:54 2025 GMT
Not After : Feb 19 07:38:54 2026 GMT
Subject: CN=67c16811-2d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c0:fe:20:b7:7c:0e:4c:08:23:2b:46:f0:fc:
4a:16:71:13:4b:e0:7d:f3:93:3c:85:c0:9d:54:1b:
11:12:c4:b1:72:70:d9:32:61:f5:b6:77:63:33:96:
ef:1b:ed:1a:63:1f:96:44:9a:83:46:9e:f5:9b:61:
c8:ff:5d:15:b5:1e:c2:04:42:23:c7:46:6d:c7:52:
2b:d3:0d:a6:be:92:d6:e8:bd:2e:6c:22:1b:da:a5:
cb:11:b4:30:a3:86:84:fc:2b:a6:24:2c:0d:2c:b6:
a0:50:10:c2:68:02:52:f6:b7:04:17:e6:91:f0:7c:
23:d3:59:5c:2c:7f:c0:99:66:50:4a:fb:b4:5d:11:
ce:93:64:21:5b:ff:da:f1:16:88:3f:36:46:1a:bc:
e8:4e:65:7b:db:72:55:6e:b7:68:84:1f:47:61:5e:
84:89:bc:a3:f1:b7:12:cf:f0:22:b9:23:24:56:68:
99:14:a9:6c:07:4e:62:0d:32:d5:4d:37:9f:84:9d:
e9:07:d9:b7:2c:a0:37:1a:19:24:c3:78:b6:e4:2d:
c4:fc:fb:e1:c6:65:7b:7d:a2:73:bc:fc:40:65:86:
dd:cf:ba:b2:64:26:f2:ce:6d:fc:50:af:d2:f1:d4:
32:ce:7a:fe:19:25:ce:a6:82:ab:18:48:98:06:73:
d8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E8:1E:6A:F7:6D:E7:94:9F:69:F7:EF:23:6E:FD:67:CF:9C:BE:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/118B4454F5A711EF8BD5CC77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.34.0/24
156.232.61.0-156.232.64.255
156.232.89.0/24
156.236.10.0/24
156.236.25.0/24
156.239.80.0-156.239.91.255
Signature Algorithm: sha256WithRSAEncryption
6b:26:40:f0:1d:62:6b:67:53:98:96:08:3e:d1:d0:7f:02:49:
ac:b3:23:9c:01:85:5f:20:a1:52:84:bf:72:ee:12:75:d4:82:
e8:16:b4:11:de:3c:05:63:7e:18:7c:b5:18:1f:68:13:b8:4b:
68:15:23:a4:d2:19:7d:55:51:00:ca:7e:05:a8:fa:d6:c1:76:
04:a1:84:f4:0d:06:f6:42:4d:9b:bf:c7:9b:4d:16:20:d9:6c:
5a:d7:fa:40:aa:6f:33:84:4d:8f:8f:2a:31:a3:d4:61:fa:eb:
7e:68:27:0a:de:eb:be:56:19:c2:8b:e4:d9:e0:36:22:ee:9d:
88:2f:d4:cb:f8:22:a9:22:8b:51:16:25:5e:75:e8:ad:4b:d5:
10:ec:fc:22:8d:eb:32:cb:b0:2b:f8:36:38:d2:28:70:26:a3:
20:cb:79:87:d1:f8:55:62:21:0a:b7:97:6a:6e:29:70:5f:a8:
f1:8e:00:4e:4b:5b:48:eb:d5:86:7b:f8:f0:07:4b:45:68:91:
df:73:d7:e4:b6:f3:93:46:e6:93:f5:7a:13:2e:5d:c6:e0:7f:
47:d0:81:40:2f:1a:28:be:91:d7:d2:d5:31:c9:3b:fd:92:ba:
d3:9d:fe:62:eb:0a:70:d5:39:46:35:4b:69:b2:62:cf:46:7d:
59:16:08:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:56 2025 by rpki-client