Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25A92270108311F0A9362484762E951A.roa
File: 25A92270108311F0A9362484762E951A.roa (raw, json)
Hash identifier: SIpX/AW7hfzotXiVFpfBpAx9BQW9EqcsujCTenjrE4M=
Subject key identifier: F6:9D:CA:3B:49:FF:58:5F:88:88:4A:27:92:6C:23:64:C9:A1:D5:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0149DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25A92270108311F0A9362484762E951A.roa
Signing time: Thu 03 Apr 2025 11:59:51 +0000
ROA not before: Thu 03 Apr 2025 11:59:47 +0000
ROA not after: Mon 14 Apr 2025 11:59:47 +0000
asID: 22773
IP address blocks: 156.237.8.0/21 maxlen: 24
156.238.13.0/24 maxlen: 24
156.238.28.0/22 maxlen: 24
156.238.144.0/20 maxlen: 24
156.239.16.0/21 maxlen: 24
156.239.128.0/21 maxlen: 24
156.239.136.0/22 maxlen: 24
156.242.0.0/23 maxlen: 24
156.242.28.0/22 maxlen: 24
156.246.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84444 (0x149dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 3 11:59:47 2025 GMT
Not After : Apr 14 11:59:47 2025 GMT
Subject: CN=67ee7837-ed89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b2:6e:b8:71:f7:95:77:35:60:f0:66:c4:13:
75:fb:84:c9:45:cf:03:42:6c:ae:88:0b:f6:7d:98:
38:64:85:92:53:75:54:47:cf:11:58:2f:a6:32:54:
42:e8:06:e3:8b:ed:61:b4:5a:62:2d:c8:db:81:c3:
6e:09:73:0e:49:6b:ab:5f:12:8c:34:dc:11:5e:d0:
d9:d9:bb:20:72:dc:bc:ad:4c:1d:80:71:ef:32:8d:
60:bb:ed:72:dc:d2:ba:84:57:8e:db:39:da:7f:b6:
84:ac:93:df:de:05:11:d8:28:c3:be:e4:79:1a:73:
bc:cd:7d:6e:af:c4:bb:ad:db:71:19:52:a1:11:dd:
c5:48:68:2e:52:21:df:2f:eb:17:8a:13:26:13:93:
10:82:a9:18:1e:2d:c0:28:cc:75:da:e5:cf:05:ab:
df:79:32:b5:62:fe:ae:6a:01:50:c4:f7:d5:09:86:
cf:c3:44:2b:1d:b1:23:a7:75:a3:fa:37:c4:55:24:
5f:71:3d:f0:83:cd:be:e1:fc:58:37:dd:dc:94:3a:
f9:33:4e:3e:ad:7a:da:48:f6:2e:fe:2e:be:41:bb:
06:de:5a:04:71:d9:28:95:87:cb:28:b0:24:44:45:
37:5e:00:a3:dc:13:54:a9:d1:f5:80:9d:67:ee:4f:
77:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9D:CA:3B:49:FF:58:5F:88:88:4A:27:92:6C:23:64:C9:A1:D5:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25A92270108311F0A9362484762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.8.0/21
156.238.13.0/24
156.238.28.0/22
156.238.144.0/20
156.239.16.0/21
156.239.128.0-156.239.139.255
156.242.0.0/23
156.242.28.0/22
156.246.64.0/21
Signature Algorithm: sha256WithRSAEncryption
97:43:50:d3:96:42:33:b5:19:67:f8:33:61:10:b5:6a:69:94:
8b:79:0b:a3:8c:04:13:1f:01:a0:fb:02:52:35:2d:69:ec:3e:
e6:bd:c5:8d:4a:13:71:ea:69:6d:b9:70:ce:22:6a:db:9e:05:
96:c8:de:ba:a2:e9:70:ee:f6:b7:09:76:63:f3:e8:d0:62:e9:
90:89:fe:2f:d8:98:65:66:12:03:7d:6e:b8:31:f3:66:65:d3:
3b:cc:5f:d2:63:f1:29:f1:93:67:cb:56:e1:c7:e9:56:d7:d9:
91:51:64:10:57:bc:ea:f4:d9:e1:a6:74:8e:df:a2:e9:d5:83:
71:b3:3b:2a:99:6c:12:04:0a:c3:e2:55:e6:22:bd:92:f0:e8:
6d:93:22:05:34:e7:60:05:8c:d3:e3:80:e6:b5:58:d4:c5:f3:
c0:d2:0f:1d:73:44:b9:fc:be:b9:58:8e:3d:c9:78:75:f1:81:
18:13:a0:39:9a:e3:0f:13:09:37:4d:69:4f:30:b1:d0:e0:25:
fb:87:06:b3:3f:94:08:96:e9:c9:30:c6:09:69:27:34:13:68:
9c:be:ab:65:ca:ff:64:8d:11:04:ce:5f:c3:88:32:4c:c4:d7:
68:42:b5:1d:22:64:de:88:6f:31:74:75:04:9b:6c:c1:a5:42:
9b:29:b0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:33:28 2025 by rpki-client