Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24D68196108111F08CABDA79762E951A.roa
File: 24D68196108111F08CABDA79762E951A.roa (raw, json)
Hash identifier: 4y4K7mISTAZMQ+cqyj7wYxofFOIpMl6fesJSvo3PCvU=
Subject key identifier: 5D:1F:FD:B4:AD:77:AC:86:99:39:88:B8:2C:81:29:84:66:07:30:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0149D6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24D68196108111F08CABDA79762E951A.roa
Signing time: Thu 03 Apr 2025 11:45:30 +0000
ROA not before: Thu 03 Apr 2025 11:45:26 +0000
ROA not after: Thu 08 May 2025 11:45:26 +0000
asID: 200373
IP address blocks: 156.228.112.0/24 maxlen: 24
156.228.113.0/24 maxlen: 24
156.228.114.0/24 maxlen: 24
156.228.115.0/24 maxlen: 24
156.228.116.0/24 maxlen: 24
156.228.117.0/24 maxlen: 24
156.228.124.0/24 maxlen: 24
156.228.125.0/24 maxlen: 24
156.228.171.0/24 maxlen: 24
156.228.175.0/24 maxlen: 24
156.228.176.0/24 maxlen: 24
156.228.184.0/24 maxlen: 24
156.228.185.0/24 maxlen: 24
156.228.189.0/24 maxlen: 24
156.253.164.0/24 maxlen: 24
156.253.165.0/24 maxlen: 24
156.253.166.0/24 maxlen: 24
156.253.167.0/24 maxlen: 24
156.253.168.0/24 maxlen: 24
156.253.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84438 (0x149d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 3 11:45:26 2025 GMT
Not After : May 8 11:45:26 2025 GMT
Subject: CN=67ee74da-02cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:52:73:50:ba:88:fc:25:d2:25:b7:49:da:6f:
e2:3c:37:22:05:ea:8f:17:b1:9e:6a:a5:fe:53:66:
f1:c2:31:34:4a:5a:0f:3b:bf:c1:74:e5:88:76:13:
7a:16:05:1f:96:53:e0:21:49:ed:79:12:d1:b3:d7:
0d:77:f3:ff:67:cc:64:37:f7:0d:5f:c3:b1:26:6c:
7c:3d:33:64:3c:9b:26:76:31:78:13:34:9d:66:3b:
1f:5c:c7:96:9f:85:90:61:4b:a3:f6:0d:1b:7c:df:
b5:80:62:4a:8f:39:4b:e1:94:cc:04:65:2d:47:7a:
b3:1f:be:59:dc:15:b7:bf:aa:2a:a4:1a:4a:9c:33:
f3:f7:4c:f5:6d:1a:05:f7:05:2f:f7:85:41:e0:86:
3d:eb:df:79:d5:42:24:6a:7b:4f:af:25:3b:77:88:
dd:f5:0c:6c:93:ee:bd:ae:a3:9e:a5:91:a5:08:ba:
92:3c:45:57:aa:ce:7e:f9:6c:a5:65:7b:a0:f3:02:
45:0d:95:b2:2b:1c:77:6d:aa:f7:79:37:34:21:34:
f0:39:cb:c9:75:5d:50:5e:66:b4:f7:3b:9a:31:90:
90:d3:90:36:6e:e1:50:6f:a6:62:9b:74:18:c6:c1:
33:47:c5:10:63:68:cf:96:7b:27:ff:c3:c6:15:45:
2a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1F:FD:B4:AD:77:AC:86:99:39:88:B8:2C:81:29:84:66:07:30:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24D68196108111F08CABDA79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.112.0-156.228.117.255
156.228.124.0/23
156.228.171.0/24
156.228.175.0-156.228.176.255
156.228.184.0/23
156.228.189.0/24
156.253.164.0-156.253.169.255
Signature Algorithm: sha256WithRSAEncryption
6d:9b:92:25:a5:3c:bd:71:fb:df:59:20:9a:6a:31:33:44:b4:
cf:29:41:ea:ed:c9:f6:56:78:41:1d:52:c9:5b:c4:9d:6d:60:
07:c3:62:f7:cc:59:2f:4e:85:95:24:e8:ed:3a:d0:6b:12:5d:
68:d0:ca:c1:15:00:5a:3c:87:ac:36:52:6c:9a:84:1b:87:2d:
ef:71:63:b1:f8:2e:dc:03:d1:f2:7b:06:c7:53:5e:9d:bc:5b:
cc:a7:b4:b7:9c:0b:40:05:f2:cc:92:b2:59:16:60:b2:94:5e:
1e:82:15:ac:bc:9f:7d:3c:b9:61:29:23:b1:f5:da:9b:c8:f9:
5a:2f:82:e2:f1:1f:b3:ec:b0:bb:04:73:0a:47:e6:28:26:29:
74:24:c3:3b:6c:bb:29:7e:7a:43:55:9e:8e:1e:dc:a2:37:29:
ec:dc:3c:36:fc:50:2a:5b:d4:c2:c7:c7:5d:23:65:07:3e:35:
54:bf:9a:aa:80:e8:27:31:31:a6:3c:b0:25:93:db:1e:5c:2b:
f8:63:8c:90:d9:d1:61:4f:cc:cc:86:aa:58:5f:d7:04:89:3f:
85:13:49:07:bc:1d:60:df:b2:7d:5e:65:bd:b9:cc:53:85:4b:
2a:34:97:33:94:34:43:ed:8a:13:2a:54:70:e3:9b:66:91:fd:
40:80:b6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:53 2025 by rpki-client