Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/358FDCDE0F9C11F0B37E0D93762E951A.roa
File: 358FDCDE0F9C11F0B37E0D93762E951A.roa (raw, json)
Hash identifier: hnwpW9m/ToDHhUWL5SbjR9l3LGNSJhoZO3VyxqLmbU4=
Subject key identifier: 58:ED:99:27:FF:34:2B:2B:A8:19:5A:14:97:DC:8F:AC:A9:F3:EB:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014965
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/358FDCDE0F9C11F0B37E0D93762E951A.roa
Signing time: Wed 02 Apr 2025 08:26:44 +0000
ROA not before: Wed 02 Apr 2025 08:26:39 +0000
ROA not after: Fri 09 May 2025 08:26:39 +0000
asID: 139646
IP address blocks: 156.240.0.0/19 maxlen: 24
156.240.32.0/20 maxlen: 24
156.240.48.0/21 maxlen: 24
156.242.10.0/23 maxlen: 24
156.242.12.0/22 maxlen: 24
156.246.0.0/20 maxlen: 24
156.246.16.0/23 maxlen: 24
156.249.28.0/22 maxlen: 24
156.255.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84325 (0x14965)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 2 08:26:39 2025 GMT
Not After : May 9 08:26:39 2025 GMT
Subject: CN=67ecf4c4-3707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8d:e2:49:1d:d1:89:3d:fe:05:92:f8:ff:63:
78:24:65:b3:0b:c9:29:3c:ee:1b:68:9d:83:ad:cb:
09:72:f6:ce:bc:d6:5f:ef:88:34:e4:74:bd:03:6e:
5a:31:18:52:0f:4e:9c:da:03:52:3e:8a:ec:32:cd:
e8:35:e4:c4:9a:76:23:e6:c6:f0:5b:ed:4d:c6:31:
00:72:b9:db:75:fe:9d:be:c3:4d:ff:3c:ad:1b:a0:
b1:85:75:68:d2:61:f8:c0:08:47:c6:c4:c2:9b:80:
9a:5a:bc:86:6f:cd:71:cb:68:12:77:fd:b3:f5:3f:
0d:72:ea:2b:f7:17:0f:29:4b:ae:2c:b7:ef:72:66:
92:6c:94:31:d0:f6:9c:06:0b:9e:fd:47:f2:5d:7d:
d6:51:70:38:a5:3f:4b:06:11:52:fa:ff:26:d2:b0:
a3:c0:9a:8f:dd:75:61:6f:84:3b:48:75:cf:8d:46:
b8:11:cd:ea:22:d0:e8:52:d1:8f:4e:2f:5c:b0:7a:
f9:51:21:c0:18:43:cf:35:3c:5e:56:64:f5:a4:b8:
b3:f8:16:be:49:80:ea:0d:aa:78:30:dd:e0:8c:57:
aa:08:3e:1a:a8:03:02:3f:da:a1:12:87:12:25:94:
54:71:46:4a:fd:6d:ce:f0:dd:28:cb:d8:2f:0b:33:
e3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:ED:99:27:FF:34:2B:2B:A8:19:5A:14:97:DC:8F:AC:A9:F3:EB:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/358FDCDE0F9C11F0B37E0D93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.0.0-156.240.55.255
156.242.10.0-156.242.15.255
156.246.0.0-156.246.17.255
156.249.28.0/22
156.255.0.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e4:04:f3:39:d0:eb:e1:4a:c0:57:62:00:52:85:5c:ca:3f:
20:e7:ed:f7:76:d0:3f:a9:9a:61:59:3e:8d:05:ff:7d:bf:f7:
0a:d5:50:fc:1c:8b:69:82:79:f1:36:d7:78:a9:1f:83:52:28:
0a:67:2e:21:8a:ea:ae:b4:4e:d7:8d:ee:bb:0f:33:73:35:50:
bb:63:6b:83:ab:e7:b5:7c:93:c3:2b:3c:02:bf:d0:d9:00:20:
83:6c:83:c7:97:46:59:6d:54:a4:88:c2:ea:fb:bf:03:bf:da:
05:23:fe:56:8b:c9:3d:04:97:47:b9:78:ee:5b:fc:2c:63:78:
90:39:12:c0:35:ae:6f:a5:50:9a:f3:6a:8b:5e:9e:f0:46:6e:
9d:c3:58:b0:e6:09:a0:e4:96:c1:71:5c:ff:06:30:fe:1b:66:
d2:f0:a8:ad:fd:c1:53:64:99:53:83:16:a9:b1:09:1b:f1:be:
75:a8:47:ad:c4:8c:b4:43:6f:07:00:6e:8d:d6:64:0a:e4:f6:
33:10:d0:c2:94:20:f5:36:f8:2e:33:0e:09:7e:5d:86:54:0d:
d8:09:2b:3c:e0:ef:c3:f5:f1:ea:39:6d:8b:7f:bf:b1:61:5d:
50:7a:26:fa:d9:21:f1:a5:95:aa:88:00:a8:d5:ed:65:67:75:
07:5b:c1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:32 2025 by rpki-client