Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33DAAD24F66511EF94B86D91762E951A.roa
File: 33DAAD24F66511EF94B86D91762E951A.roa (raw, json)
Hash identifier: AXgAoizAdkXi3JbUiL1mYZnws/YNjvpjK8K7NzH7xCs=
Subject key identifier: 51:E2:38:13:44:BF:E1:86:B4:82:57:8B:6B:FD:DB:72:4C:2E:01:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013F94
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33DAAD24F66511EF94B86D91762E951A.roa
Signing time: Sat 01 Mar 2025 06:19:59 +0000
ROA not before: Sat 01 Mar 2025 06:19:55 +0000
ROA not after: Thu 19 Feb 2026 06:19:55 +0000
asID: 328608
IP address blocks: 156.253.137.0/24 maxlen: 24
156.253.138.0/24 maxlen: 24
156.253.139.0/24 maxlen: 24
156.253.140.0/24 maxlen: 24
156.253.142.0/24 maxlen: 24
156.253.143.0/24 maxlen: 24
156.253.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81812 (0x13f94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 1 06:19:55 2025 GMT
Not After : Feb 19 06:19:55 2026 GMT
Subject: CN=67c2a70f-fa09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:58:08:c3:43:d8:da:4c:68:e4:f1:49:a5:
0c:d9:4c:bd:f4:44:36:53:07:4a:94:1f:52:87:64:
a2:53:f7:ed:9a:41:82:67:c1:fa:78:5a:40:b4:05:
57:85:58:76:65:09:c1:30:3f:b8:be:bc:1f:8e:85:
9a:f7:0e:a2:0b:45:d5:79:75:91:cf:a0:c3:f2:18:
24:cd:85:a1:88:f4:97:ec:42:6b:16:7a:ac:f5:19:
f1:1c:43:ba:b4:9d:40:6e:7b:29:cf:23:6c:fb:c5:
a6:69:63:19:f7:9c:41:d8:bf:21:76:a6:be:5a:2d:
a4:da:94:65:ba:6e:45:8a:59:da:c9:6b:ab:0b:7a:
42:3d:06:cd:ca:97:a3:c5:18:a7:5f:7b:aa:f7:36:
04:be:07:a7:11:5d:3b:3f:3c:7a:bc:b4:76:3b:67:
81:21:9a:a9:40:d2:f0:e0:3f:9e:67:67:20:7a:75:
7b:4b:ec:13:3a:07:b5:ad:6e:7a:87:d3:81:76:d0:
cf:3e:44:fc:b7:46:55:67:34:4b:eb:3f:dd:d6:3e:
71:13:f9:5c:81:16:36:54:f3:fa:0a:62:f5:b4:a3:
d7:6c:b3:98:aa:e2:70:7e:82:ed:e9:ea:1f:d4:7b:
9c:28:0d:84:d7:0b:51:b1:62:91:0a:d1:d1:66:72:
68:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E2:38:13:44:BF:E1:86:B4:82:57:8B:6B:FD:DB:72:4C:2E:01:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33DAAD24F66511EF94B86D91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.137.0-156.253.140.255
156.253.142.0-156.253.144.255
Signature Algorithm: sha256WithRSAEncryption
08:49:00:7a:03:df:cb:62:f5:5f:7d:cd:70:82:be:c6:fb:ed:
51:6d:f4:5f:53:a9:98:df:94:8a:d1:f8:42:6b:a1:ab:a9:4b:
53:f8:91:3a:6f:1d:9a:4c:9f:ee:f6:36:58:d1:65:35:72:8d:
bb:f9:ed:29:f7:2d:5a:a9:0a:27:38:b9:54:ae:4b:78:99:7e:
d8:cd:d5:2a:db:55:7a:fd:96:3b:11:d7:97:5f:19:ab:4f:d0:
b5:9e:52:d6:53:5c:0d:e7:59:b4:14:1a:ba:32:5d:7b:57:01:
d0:c4:80:9a:84:9a:4c:0d:14:70:0a:6c:17:5a:dc:e6:d1:91:
84:50:ed:23:3a:92:02:af:c5:ea:90:37:4d:90:e6:4a:6a:8c:
85:c3:cc:2b:9d:63:67:ad:97:6f:ed:5b:e1:7e:64:75:c4:41:
1b:ab:f8:64:b3:88:a4:d3:fa:9c:69:db:2e:9c:68:ca:70:04:
81:22:e0:5c:a4:10:d8:a5:0f:1a:b4:c3:e9:7d:6a:e2:93:ec:
81:76:0e:bc:20:1c:4b:32:d7:04:16:fe:76:46:85:dc:6f:c5:
4c:44:cb:33:1e:38:14:e3:44:34:83:c7:bb:49:ed:7d:ad:84:
bd:46:6c:53:d2:6c:02:2e:fd:70:bd:08:58:8c:85:af:86:d4:
44:87:4f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:45 2025 by rpki-client