Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38884FB4107511F096A5BEB1762E951A.roa
File: 38884FB4107511F096A5BEB1762E951A.roa (raw, json)
Hash identifier: BEY/yypm93zuRc8tSj9wMi0TYyC5r/2ZcF/wWFuLBaQ=
Subject key identifier: 09:83:F5:35:83:36:5B:52:D0:4E:A0:43:25:0D:AC:D9:3E:04:50:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0149BA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38884FB4107511F096A5BEB1762E951A.roa
Signing time: Thu 03 Apr 2025 10:20:09 +0000
ROA not before: Thu 03 Apr 2025 10:20:05 +0000
ROA not after: Mon 14 Apr 2025 10:20:05 +0000
asID: 5065
IP address blocks: 156.239.17.0/24 maxlen: 24
156.239.20.0/24 maxlen: 24
156.239.139.0/24 maxlen: 24
156.239.140.0/24 maxlen: 24
156.239.142.0/24 maxlen: 24
156.239.143.0/24 maxlen: 24
156.246.85.0/24 maxlen: 24
156.246.86.0/24 maxlen: 24
156.246.97.0/24 maxlen: 24
156.246.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84410 (0x149ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 3 10:20:05 2025 GMT
Not After : Apr 14 10:20:05 2025 GMT
Subject: CN=67ee60d9-9b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e8:6c:ef:ab:c9:b1:0c:c5:3e:d6:fd:9f:0f:
e6:f7:5c:8a:56:30:1c:8a:55:f7:e0:cf:ce:d2:62:
90:6f:e6:16:d6:23:b7:f9:ea:b6:05:2f:39:20:d1:
1b:90:ce:50:59:15:a1:ae:f1:da:a6:26:56:57:57:
b9:4d:63:30:f8:10:b8:3f:88:c4:e7:9e:b0:51:3e:
79:23:fc:cf:bc:24:c6:0a:61:d6:7e:e4:da:ef:34:
6d:06:b4:61:28:82:54:05:63:56:03:09:fc:8c:8c:
86:12:6a:c1:e3:87:c8:3a:5a:d8:62:e2:57:8e:8e:
62:29:e3:c6:88:f9:7a:ff:86:57:cc:ca:c8:13:b8:
0f:b5:d1:a1:50:ea:90:37:08:1b:c5:b1:58:54:da:
4e:3c:fa:eb:00:58:6b:02:57:f3:b3:d2:8f:1c:e1:
df:25:8f:8e:46:f9:32:37:1a:1e:72:c8:a5:5c:0c:
ed:7f:48:6a:fa:c7:24:39:31:d2:67:67:6c:5d:b6:
2e:6f:f4:fa:54:f8:a2:51:a4:be:89:af:86:08:24:
25:40:79:77:15:b0:88:4b:79:c7:2d:63:0a:91:13:
4e:74:65:91:b8:4b:df:10:38:0c:ad:b4:90:ea:ce:
39:07:ba:42:4d:44:9a:04:64:a8:c0:8a:41:f2:ed:
95:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:83:F5:35:83:36:5B:52:D0:4E:A0:43:25:0D:AC:D9:3E:04:50:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38884FB4107511F096A5BEB1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.17.0/24
156.239.20.0/24
156.239.139.0-156.239.140.255
156.239.142.0/23
156.246.85.0-156.246.86.255
156.246.97.0/24
156.246.99.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:77:19:a3:14:c9:6c:e0:ac:3c:39:6a:34:14:3a:83:8d:68:
5c:05:95:3d:78:13:b4:16:de:1c:4d:a5:ac:c9:e2:4f:64:3b:
58:ed:1f:bb:eb:af:29:96:89:72:9e:77:73:83:51:a9:c1:e6:
dd:97:ba:64:e2:81:5d:46:cd:67:fe:d6:3f:ab:e1:17:74:d1:
c4:6b:9d:47:91:60:00:fa:c6:22:fb:6d:8e:85:c5:10:49:8c:
9d:6e:1a:d9:a7:3f:11:91:41:a4:b5:39:c4:c6:ff:bf:e9:2b:
95:c6:ee:9b:8d:d1:8a:80:ec:8c:26:a3:cd:80:dc:4d:91:dc:
94:43:e6:cc:a0:9c:38:08:d4:04:89:f7:bf:d0:e7:93:86:cf:
23:f7:64:cb:18:78:d1:0e:f5:ff:32:6c:31:87:9c:e2:f7:7c:
fb:30:4d:3f:18:d6:e7:bf:f1:87:e6:cb:27:4d:6a:c7:2d:de:
1e:28:5d:ee:4a:c6:46:4f:e4:3a:a3:4d:e6:77:99:e0:9d:61:
94:ae:77:36:25:36:65:4e:85:72:71:a4:d0:f5:ef:be:2a:e0:
b7:e0:fb:e6:83:ce:03:25:9a:bb:ec:04:dc:46:38:5f:3d:94:
d8:04:7c:08:45:7e:b2:85:f1:83:8f:bf:7d:b6:45:b9:f5:eb:
6b:3e:ab:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:33:32 2025 by rpki-client