Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25B38F2E0A1311F0ADA25749762E951A.roa
File: 25B38F2E0A1311F0ADA25749762E951A.roa (raw, json)
Hash identifier: reGoQ3K4yX9WJoOBRsd+ymkf/wveGRaamB23UeRBMKc=
Subject key identifier: C4:E2:29:98:B3:8D:9A:A2:9C:BA:FF:7D:43:D6:11:6A:B3:60:99:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014829
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25B38F2E0A1311F0ADA25749762E951A.roa
Signing time: Wed 26 Mar 2025 07:23:00 +0000
ROA not before: Wed 26 Mar 2025 07:22:56 +0000
ROA not after: Fri 03 Apr 2026 07:22:56 +0000
asID: 984
IP address blocks: 156.228.208.0/24 maxlen: 24
156.228.209.0/24 maxlen: 24
156.233.69.0/24 maxlen: 24
156.233.70.0/24 maxlen: 24
156.233.71.0/24 maxlen: 24
156.242.81.0/24 maxlen: 24
156.242.82.0/24 maxlen: 24
156.242.84.0/24 maxlen: 24
156.242.91.0/24 maxlen: 24
156.245.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84009 (0x14829)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 26 07:22:56 2025 GMT
Not After : Apr 3 07:22:56 2026 GMT
Subject: CN=67e3ab54-6284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:25:7d:c5:fb:47:09:8c:f3:25:b0:e1:ce:
3f:84:8b:ae:93:ff:d0:28:6c:71:87:08:78:5f:51:
bf:0b:f5:bb:0d:6f:66:82:61:28:dc:cb:6c:aa:0e:
03:11:ff:33:3b:ae:51:07:8a:b1:ac:49:16:15:cb:
d4:38:d1:b1:d3:aa:cf:81:14:f0:11:88:20:e5:94:
cf:76:af:39:88:39:15:ac:dd:a2:cd:0f:87:22:f1:
0d:55:e2:d4:48:1c:12:df:64:86:01:4d:4a:3b:89:
db:35:a4:c7:0c:7e:52:1b:60:2a:c2:49:00:41:89:
73:aa:42:d6:dd:a8:66:9e:1e:af:81:bb:7b:e3:f6:
f5:48:39:9c:ec:51:de:07:53:3d:1d:0b:fc:e9:c6:
e0:bc:f7:cb:73:7b:8d:f0:48:07:16:08:ae:d8:45:
7b:bc:8b:8a:cb:b2:fe:2c:b8:0c:5e:aa:6b:02:77:
b5:a1:fc:86:7b:c6:2a:d1:30:ec:43:61:95:43:6d:
fb:91:5b:9f:aa:86:1e:94:89:3f:7b:32:0e:50:a5:
1b:e1:ba:a6:0d:ff:e7:2e:22:86:24:b6:fb:17:be:
fa:21:e0:9c:3f:2b:46:47:75:0f:85:9d:24:b2:1a:
bd:40:ee:67:e3:46:ff:db:51:90:a3:81:75:2a:9f:
18:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E2:29:98:B3:8D:9A:A2:9C:BA:FF:7D:43:D6:11:6A:B3:60:99:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25B38F2E0A1311F0ADA25749762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.208.0/23
156.233.69.0-156.233.71.255
156.242.81.0-156.242.82.255
156.242.84.0/24
156.242.91.0/24
156.245.211.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:e7:40:8c:69:ba:90:31:86:53:8b:0b:15:16:2b:a4:ba:75:
5b:01:d2:66:5e:d2:a1:11:cc:f9:57:de:8a:04:4b:d6:08:93:
35:82:1a:67:f5:d5:fd:71:bf:7b:0e:1e:18:b0:25:a3:ad:a3:
fe:3a:06:24:f9:e4:02:a9:39:6e:0f:e5:11:7e:04:3c:a9:f5:
48:c4:79:ac:42:e3:76:33:0b:13:9f:14:71:36:55:1a:51:23:
eb:80:06:4a:b2:a5:16:7c:90:ab:e4:af:87:1d:f7:6c:12:b4:
b6:e8:3b:93:c1:1e:48:0c:4f:8a:0e:fe:eb:29:31:f4:c5:7b:
3e:0a:24:72:a8:de:66:9b:25:14:16:60:23:1f:3a:fd:ec:07:
c4:55:26:d8:16:6b:72:e7:dd:8f:11:53:35:78:5f:2c:69:1c:
a1:a9:8a:18:d7:9b:30:40:8c:6e:a9:3d:ac:cc:ce:12:82:7c:
ca:95:83:e1:61:24:9e:8e:5a:3a:4d:e3:42:96:7c:c4:d8:d4:
d1:99:3f:8f:63:4b:e7:81:79:53:3e:67:e5:f6:6e:7a:7b:cb:
36:a0:a2:39:9d:87:ed:77:07:57:7d:d9:8f:d9:85:37:d0:76:
42:4a:8f:7d:bc:a9:46:c5:83:d5:61:e7:ca:18:fb:0f:00:8a:
e4:3c:18:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:33:34 2025 by rpki-client