Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2ED5ECDA108211F0A44F0D7E762E951A.roa
File: 2ED5ECDA108211F0A44F0D7E762E951A.roa (raw, json)
Hash identifier: zNb/WfmGchvjTlSXpKbTfnWAlIKChbIrSGrjhhcvoiQ=
Subject key identifier: 4D:D7:C1:AB:E0:9A:60:A6:8C:EE:41:45:D4:32:A7:A2:1E:B9:25:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0149D8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2ED5ECDA108211F0A44F0D7E762E951A.roa
Signing time: Thu 03 Apr 2025 11:52:57 +0000
ROA not before: Thu 03 Apr 2025 11:52:52 +0000
ROA not after: Mon 14 Apr 2025 11:52:52 +0000
asID: 22773
IP address blocks: 156.229.0.0/24 maxlen: 24
156.229.4.0/22 maxlen: 24
156.232.0.0/23 maxlen: 24
156.235.16.0/22 maxlen: 24
156.235.48.0/24 maxlen: 24
156.235.54.0/24 maxlen: 24
156.235.56.0/21 maxlen: 24
156.236.0.0/23 maxlen: 24
156.237.0.0/24 maxlen: 24
156.237.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84440 (0x149d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 3 11:52:52 2025 GMT
Not After : Apr 14 11:52:52 2025 GMT
Subject: CN=67ee7698-8026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:7e:56:72:0f:9d:47:75:4b:d3:90:c6:1b:
7d:a5:fb:96:19:ef:da:c8:d4:a8:9d:e8:8c:e3:1f:
53:8f:6c:27:96:42:3c:c5:7d:be:11:6b:a5:e2:24:
04:cc:9c:2f:a2:15:f7:78:2a:20:62:09:5e:a7:a1:
a9:d3:3f:b5:a5:03:65:87:bf:e3:3f:1a:34:a5:fb:
a2:bb:fe:95:a2:a0:87:f0:88:af:c9:42:10:08:97:
81:ef:dc:f8:c0:a8:c8:f0:3f:38:73:68:8f:d3:c3:
77:0a:61:04:85:89:6d:ff:6b:09:ad:15:0d:53:62:
4b:ca:8f:23:15:e3:7c:17:fc:5b:68:22:31:84:c0:
9e:43:e9:80:ba:07:e0:59:5e:a8:b8:c1:96:b5:ed:
6a:51:1b:10:31:59:50:cc:f2:58:7e:45:65:60:d2:
ed:84:ab:42:29:50:b8:04:51:40:32:45:f6:d6:d9:
fd:73:9a:8d:2d:2f:ff:51:47:25:a0:c1:62:81:9a:
e4:31:b6:04:b4:76:eb:f8:d5:da:15:71:dd:f7:ed:
cc:4c:9f:da:a5:93:12:e7:d0:fd:d4:2e:cb:e6:75:
88:bc:3d:3f:17:9c:0e:c6:bf:f2:22:0b:d7:57:6e:
ee:e2:fa:f6:27:6c:fe:bb:4f:0c:92:5f:67:74:26:
1c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D7:C1:AB:E0:9A:60:A6:8C:EE:41:45:D4:32:A7:A2:1E:B9:25:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2ED5ECDA108211F0A44F0D7E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.0.0/24
156.229.4.0/22
156.232.0.0/23
156.235.16.0/22
156.235.48.0/24
156.235.54.0/24
156.235.56.0/21
156.236.0.0/23
156.237.0.0/24
156.237.6.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:22:73:a0:b0:67:42:fa:7d:d5:8b:8e:73:45:ce:3a:8c:02:
f0:d5:ca:fb:09:5b:13:d8:8a:37:b4:46:37:26:09:78:d3:c7:
b3:99:a4:b7:ed:70:58:e5:a0:8f:68:cf:80:d5:42:f3:aa:c4:
42:20:29:90:9a:fe:9b:af:cf:12:01:86:96:7e:3c:d0:94:4f:
f9:85:6d:6f:b5:cf:0b:1a:12:df:b5:08:ac:88:cb:1c:54:51:
2a:fb:00:00:74:3c:24:c5:34:40:2f:4d:d2:f5:c8:31:aa:92:
f7:8d:60:d1:30:e3:23:e2:81:76:d0:6e:52:69:11:89:ef:4f:
08:d8:12:3c:ce:5c:78:2d:f0:3a:1c:74:08:cc:fd:a1:af:f5:
07:61:e1:25:25:1d:bd:96:86:20:71:50:1f:bf:4d:97:99:94:
55:00:c3:0e:09:23:04:8c:3d:80:6c:26:f6:91:6e:0c:73:36:
29:0d:ae:0c:b0:94:55:1b:6d:82:17:47:2f:72:07:81:3d:32:
0c:9d:4c:55:d4:9d:c1:32:dc:a2:f9:f6:2a:23:29:07:9f:d3:
df:21:d0:9a:6d:27:d5:c6:55:1e:07:46:dd:69:44:43:6d:ab:
cb:86:95:a2:67:a8:28:0a:64:12:a6:85:55:30:15:c9:f2:85:
4a:d5:f9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:57 2025 by rpki-client