Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14619E56356411F0B22A30B0DAE4EC9C.roa
File: 14619E56356411F0B22A30B0DAE4EC9C.roa (raw, json)
Hash identifier: gmMDqrnt/Kwk9TRoikWehYHNQMmODvSKc+Sv2EYH75E=
Subject key identifier: 29:CB:EC:20:73:18:A5:75:6B:AF:02:D5:9C:9B:99:B7:E6:05:38:EF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01562A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14619E56356411F0B22A30B0DAE4EC9C.roa
Signing time: Tue 20 May 2025 10:20:41 +0000
ROA not before: Tue 20 May 2025 10:20:36 +0000
ROA not after: Fri 27 Jun 2025 10:20:36 +0000
asID: 44559
IP address blocks: 156.246.151.0/24 maxlen: 24
156.246.184.0/24 maxlen: 24
156.246.185.0/24 maxlen: 24
156.246.186.0/24 maxlen: 24
156.246.187.0/24 maxlen: 24
156.246.188.0/24 maxlen: 24
156.246.189.0/24 maxlen: 24
156.246.190.0/24 maxlen: 24
156.246.191.0/24 maxlen: 24
156.246.197.0/24 maxlen: 24
156.246.212.0/24 maxlen: 24
156.246.224.0/24 maxlen: 24
156.246.225.0/24 maxlen: 24
156.246.226.0/24 maxlen: 24
156.246.227.0/24 maxlen: 24
156.246.228.0/24 maxlen: 24
156.246.231.0/24 maxlen: 24
156.246.236.0/24 maxlen: 24
156.246.237.0/24 maxlen: 24
156.246.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87594 (0x1562a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 10:20:36 2025 GMT
Not After : Jun 27 10:20:36 2025 GMT
Subject: CN=682c5779-08bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:77:c4:08:08:af:9c:93:18:68:c1:01:0d:93:
f1:59:2e:fc:f8:92:a1:a5:c1:f9:ea:36:13:0b:3e:
d4:89:e9:b3:93:51:9f:e4:28:9f:48:10:8c:12:85:
df:3e:21:f7:b9:69:b8:2a:00:47:29:d3:be:25:6e:
91:30:f2:c3:37:6c:d4:9a:d7:6d:2e:59:61:0c:40:
43:f0:a6:e8:7d:17:cc:d2:d5:62:aa:b4:22:81:ce:
fb:91:54:a9:e9:56:d8:a4:97:bd:00:49:ab:7c:01:
28:ca:f9:72:24:06:44:91:26:e1:a1:88:22:74:8c:
34:3e:e5:62:50:b0:9f:d6:63:eb:b4:87:6a:72:8e:
d0:8d:e6:c2:51:8e:9e:ff:20:90:c3:c5:09:09:c5:
a8:10:3d:dd:ad:2f:8a:2b:12:45:e8:e0:4c:fa:0b:
2e:07:00:46:dd:a8:ff:e8:99:10:6e:22:56:c9:70:
f9:d4:3e:87:85:b3:e2:ba:fc:b6:9e:fb:36:ee:bb:
da:95:40:f2:46:d9:dd:1a:4a:51:af:e5:b5:8e:4f:
fa:15:33:fb:65:9f:d0:5f:5c:aa:93:17:21:42:81:
30:7f:db:b7:a2:97:21:3d:2c:81:2f:18:5b:b7:b2:
45:d5:e9:52:a7:4e:6d:a6:00:67:de:8b:a8:dc:93:
b0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CB:EC:20:73:18:A5:75:6B:AF:02:D5:9C:9B:99:B7:E6:05:38:EF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14619E56356411F0B22A30B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.151.0/24
156.246.184.0/21
156.246.197.0/24
156.246.212.0/24
156.246.224.0-156.246.228.255
156.246.231.0/24
156.246.236.0-156.246.238.255
Signature Algorithm: sha256WithRSAEncryption
06:50:c4:f4:c7:b8:14:ce:d3:39:d0:75:1b:3a:9a:87:5c:34:
ea:fc:d9:0a:3e:8a:be:e4:98:05:52:d7:65:0f:ce:7d:1b:da:
16:23:e0:23:99:59:76:51:10:3e:9e:59:3e:6c:f6:ec:93:be:
e6:04:63:f9:2d:8b:06:32:a2:18:16:40:fc:a5:91:69:eb:30:
2f:2f:5e:ad:7c:f4:cc:01:b2:81:d3:68:70:bb:22:fd:c8:90:
89:47:c3:fb:bc:d4:ae:eb:b9:ae:45:0f:51:ce:44:33:f0:4d:
a4:f2:72:f2:13:32:c0:37:9c:f0:a3:08:06:69:a0:04:c5:04:
e2:09:6a:0e:02:57:2e:0a:15:34:67:36:d4:8f:6a:79:de:93:
1b:c0:eb:2a:38:b5:30:d0:e6:39:50:32:6d:8a:36:be:a3:5e:
97:73:ba:d6:88:80:af:d2:fc:ea:88:d7:ee:6d:46:dd:34:86:
fb:23:af:d2:e9:af:5b:0c:d2:6d:99:13:9f:66:fb:b5:3f:7d:
9f:aa:92:22:71:77:37:26:3e:c1:f6:78:38:c4:7a:9c:bb:0e:
4b:4b:1c:ca:db:01:b3:b8:8f:bc:10:ec:90:c3:83:c9:af:89:
d3:2a:92:b2:cb:90:7c:ce:30:cf:4e:31:a9:c5:8b:ca:b9:8b:
df:29:ef:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:30:13 2025 by rpki-client