Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19B19FF4107611F08AB5CEB5762E951A.roa
File: 19B19FF4107611F08AB5CEB5762E951A.roa (raw, json)
Hash identifier: rN9gsBl5XtFzpchtrGGYWfDSkQ14La8Sqsb4Np9OZho=
Subject key identifier: 69:70:64:F8:93:89:93:30:99:23:77:D5:B8:F0:A9:CA:C2:44:AE:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0149BC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19B19FF4107611F08AB5CEB5762E951A.roa
Signing time: Thu 03 Apr 2025 10:26:27 +0000
ROA not before: Thu 03 Apr 2025 10:26:23 +0000
ROA not after: Mon 14 Apr 2025 10:26:23 +0000
asID: 5065
IP address blocks: 156.238.0.0/24 maxlen: 24
156.239.138.0/24 maxlen: 24
156.243.0.0/24 maxlen: 24
156.246.100.0/24 maxlen: 24
156.246.101.0/24 maxlen: 24
156.246.102.0/24 maxlen: 24
156.246.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84412 (0x149bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 3 10:26:23 2025 GMT
Not After : Apr 14 10:26:23 2025 GMT
Subject: CN=67ee6253-fcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:43:74:98:c5:2a:ec:84:e7:f0:b7:54:9a:8b:
a4:3c:d6:2d:ca:b6:1a:e1:41:46:bd:aa:58:5e:f6:
79:ca:39:ad:bc:05:c3:e1:9b:78:fe:0b:2c:bc:8e:
0b:6e:c6:85:64:f1:a6:9e:c6:ea:14:b5:30:ff:ee:
f9:04:c4:1a:50:f3:0c:8d:89:58:40:74:c2:c4:88:
91:65:2d:fb:74:35:d3:d8:90:30:11:10:d9:42:be:
77:15:58:cb:9a:d1:58:2b:78:ba:db:f5:77:31:33:
01:48:40:e6:52:db:f0:bc:52:a6:c3:52:b8:61:e0:
94:6e:35:62:ea:2b:23:29:78:fa:27:17:79:bc:bc:
e1:bb:71:c9:9a:e9:79:70:9d:fa:5f:d9:5b:fb:c8:
a5:c1:e0:a8:90:b5:4c:01:55:87:53:76:64:f6:f9:
e4:b8:57:da:3d:99:70:73:48:ee:f4:07:31:c0:19:
fb:34:ef:a4:f3:98:0a:f2:6f:a5:9b:1a:71:c9:69:
27:b7:aa:e8:8c:41:2e:be:f3:31:dd:c5:59:9b:24:
c0:a8:ea:fa:1c:58:a5:f0:d5:58:08:70:f6:11:95:
a5:b4:85:59:3c:21:f3:4a:da:ae:b7:23:10:24:f7:
23:5e:84:c7:7d:40:ab:04:e6:dc:eb:be:36:76:c5:
e6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:70:64:F8:93:89:93:30:99:23:77:D5:B8:F0:A9:CA:C2:44:AE:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19B19FF4107611F08AB5CEB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.0.0/24
156.239.138.0/24
156.243.0.0/24
156.246.100.0/22
Signature Algorithm: sha256WithRSAEncryption
22:65:ce:09:27:ec:08:98:f5:d3:74:65:07:b9:e8:e5:47:82:
d9:1d:89:4f:14:83:2c:fb:b0:d3:91:1d:bc:8c:47:32:af:0a:
47:d9:41:55:cd:ee:90:0e:62:cd:d9:3b:3d:87:53:e4:44:25:
7f:1d:db:4f:48:56:9c:ee:27:e9:93:4a:4f:8f:80:eb:7c:de:
1c:f0:7c:7b:62:5a:2b:a9:3c:41:f1:fc:30:05:c9:ff:1e:76:
1f:04:de:31:92:ae:6e:c2:d6:f5:0e:83:4c:3c:0a:6e:4b:65:
4a:9b:19:bf:a1:f3:d1:48:d3:fb:fc:d6:ad:ba:fe:dc:f4:21:
e6:1e:74:67:4e:db:8c:46:b1:32:3b:0f:4c:4b:18:d1:0b:36:
71:80:4d:2b:87:a6:72:65:eb:38:09:2d:ff:92:b2:26:16:04:
af:ed:84:67:d5:61:18:44:11:07:df:b1:1d:9d:bf:7a:10:59:
01:36:66:91:1c:c3:13:c1:50:f1:f5:a4:b2:dd:71:d7:c4:c0:
a4:1e:e5:2c:40:3a:18:16:20:1b:b1:fe:70:4a:e4:5d:29:dc:
32:a6:8a:60:af:71:66:c1:ee:71:85:e3:20:c2:dd:9e:cb:7b:
b2:23:67:b3:8f:e3:6e:41:4a:35:e9:69:d6:ac:51:22:5d:bc:
7e:c3:4a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:08:56 2025 by rpki-client