Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CB64922F5AD11EF8AE030A1762E951A.roa
File: 1CB64922F5AD11EF8AE030A1762E951A.roa (raw, json)
Hash identifier: CKBJwmG+ZwWU2UGQBnAqOutYswORaQKgFL/RzMv2jI8=
Subject key identifier: 24:59:AA:8B:E0:D9:1C:B2:23:FA:22:EA:A4:72:D1:6F:3C:C1:B2:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013C95
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CB64922F5AD11EF8AE030A1762E951A.roa
Signing time: Fri 28 Feb 2025 08:22:13 +0000
ROA not before: Fri 28 Feb 2025 08:22:09 +0000
ROA not after: Thu 19 Feb 2026 08:22:09 +0000
asID: 984
IP address blocks: 156.244.135.0/24 maxlen: 24
156.244.136.0/24 maxlen: 24
156.244.138.0/24 maxlen: 24
156.244.141.0/24 maxlen: 24
156.244.142.0/24 maxlen: 24
156.244.143.0/24 maxlen: 24
156.244.144.0/24 maxlen: 24
156.244.146.0/24 maxlen: 24
156.244.149.0/24 maxlen: 24
156.244.151.0/24 maxlen: 24
156.244.153.0/24 maxlen: 24
156.244.155.0/24 maxlen: 24
156.244.156.0/24 maxlen: 24
156.244.157.0/24 maxlen: 24
156.244.161.0/24 maxlen: 24
156.244.164.0/24 maxlen: 24
156.244.168.0/24 maxlen: 24
156.244.169.0/24 maxlen: 24
156.244.174.0/24 maxlen: 24
156.244.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81045 (0x13c95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 08:22:09 2025 GMT
Not After : Feb 19 08:22:09 2026 GMT
Subject: CN=67c17235-9f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a6:04:00:27:b4:f3:49:10:71:54:c7:3a:47:
2b:1f:f0:53:1b:86:e8:be:c2:81:7e:eb:f1:15:43:
d2:7a:96:b2:9c:7e:b3:fb:ad:f9:f3:19:5d:26:c7:
39:91:88:06:88:a5:24:fd:56:7d:e5:d3:a5:8d:18:
db:2c:61:da:10:1a:f8:13:9c:5d:9c:9e:b2:8f:05:
1b:c8:90:c7:04:96:da:b4:b0:7f:eb:09:6d:28:1e:
57:d1:74:db:e3:7e:6f:4d:8b:06:3e:36:c7:0c:14:
23:c4:6a:67:28:d3:0b:eb:79:32:a1:ed:57:9c:64:
58:ee:39:b0:79:89:b9:c1:fb:bb:6f:6b:46:4b:2e:
bb:4d:82:be:98:6e:f0:76:e1:1a:ba:11:71:51:2e:
8e:34:bd:57:1e:ea:09:87:78:52:bb:aa:73:d1:0f:
1e:09:ba:f3:b0:a9:fa:50:b4:13:1c:02:b1:98:a1:
e5:1e:58:5a:d3:ce:1a:c6:fe:31:0a:ff:b8:9b:dc:
1f:5c:9f:d3:fc:dc:1c:c2:92:aa:27:bc:ef:54:a6:
8b:4a:b6:93:67:84:ff:f7:17:d5:6e:51:4f:50:39:
02:01:82:4d:6c:cc:f6:3a:10:59:2c:68:86:b7:94:
9a:02:42:47:4c:0e:40:65:4f:c7:42:97:c9:d5:1d:
81:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:59:AA:8B:E0:D9:1C:B2:23:FA:22:EA:A4:72:D1:6F:3C:C1:B2:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CB64922F5AD11EF8AE030A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.135.0-156.244.136.255
156.244.138.0/24
156.244.141.0-156.244.144.255
156.244.146.0/24
156.244.149.0/24
156.244.151.0/24
156.244.153.0/24
156.244.155.0-156.244.157.255
156.244.161.0/24
156.244.164.0/24
156.244.168.0/23
156.244.174.0/24
156.244.176.0/24
Signature Algorithm: sha256WithRSAEncryption
39:bd:28:92:ab:11:ea:2c:f0:d6:f3:63:4e:41:f6:2f:44:90:
08:e3:13:aa:ba:1f:01:5b:2b:a5:1c:c5:f7:b1:a0:b8:3b:c5:
0d:e8:fd:88:d0:e3:f6:05:8e:3a:c0:d2:c8:9f:60:1c:16:6a:
66:01:45:6c:cb:0f:ae:39:17:fa:bf:37:50:fc:ef:60:9a:43:
45:b1:0a:56:88:8f:63:90:37:28:5d:15:19:85:0d:e8:41:aa:
35:9c:46:3d:6d:94:47:7a:d1:81:90:04:57:2a:d9:91:b6:ac:
10:1c:0b:60:9b:41:c2:ae:1d:00:d6:90:93:3d:c8:25:70:f3:
f0:b0:3b:d1:22:f7:dc:3b:35:6f:5f:35:04:7c:0b:6a:83:06:
6a:bb:8c:b4:25:45:a1:29:b0:40:51:66:b6:8e:93:98:47:1e:
f7:0d:4b:55:fb:18:21:fe:d3:48:5a:26:e3:1c:9b:6b:60:e8:
15:67:7d:52:63:6e:c5:bf:ee:1e:04:73:28:6b:61:b1:c4:18:
d1:4d:28:96:bc:ff:0a:e1:ef:63:27:4c:72:69:13:e7:18:1d:
24:4f:ef:3e:13:d2:90:ec:e3:5e:ea:4d:35:88:2e:f5:7b:9a:
0c:af:4e:2a:e7:49:0f:58:ee:83:6d:65:dc:8b:e6:64:f3:2a:
17:21:77:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:53 2025 by rpki-client