Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DE09E34356511F0ACE893B6DAE4EC9C.roa
File: 3DE09E34356511F0ACE893B6DAE4EC9C.roa (raw, json)
Hash identifier: 7VBZlzHjFYm8wUCCsrBZpVpneo4eceC5G4XvMTexG/M=
Subject key identifier: 62:79:FF:E5:99:26:74:3B:63:8D:30:E2:1C:1A:55:4B:82:DF:FE:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01562C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DE09E34356511F0ACE893B6DAE4EC9C.roa
Signing time: Tue 20 May 2025 10:29:00 +0000
ROA not before: Tue 20 May 2025 10:28:55 +0000
ROA not after: Fri 27 Jun 2025 10:28:55 +0000
asID: 44559
IP address blocks: 156.246.174.0/24 maxlen: 24
156.246.176.0/24 maxlen: 24
156.246.177.0/24 maxlen: 24
156.246.178.0/24 maxlen: 24
156.246.179.0/24 maxlen: 24
156.246.207.0/24 maxlen: 24
156.246.208.0/24 maxlen: 24
156.246.209.0/24 maxlen: 24
156.246.210.0/24 maxlen: 24
156.246.211.0/24 maxlen: 24
156.246.214.0/24 maxlen: 24
156.246.220.0/24 maxlen: 24
156.246.221.0/24 maxlen: 24
156.246.222.0/24 maxlen: 24
156.246.223.0/24 maxlen: 24
156.246.229.0/24 maxlen: 24
156.246.239.0/24 maxlen: 24
156.246.240.0/24 maxlen: 24
156.246.241.0/24 maxlen: 24
156.246.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87596 (0x1562c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 10:28:55 2025 GMT
Not After : Jun 27 10:28:55 2025 GMT
Subject: CN=682c596c-17cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:45:69:f3:c7:0f:d8:75:ac:8e:fa:e3:79:7e:
ce:82:ff:47:ea:0e:81:38:77:06:4e:bd:c3:da:12:
7f:0a:d0:04:ec:ca:aa:1b:a5:cc:15:a9:57:43:ed:
b7:7e:03:80:91:1e:a5:c9:32:9f:08:81:84:a8:54:
f0:ab:c7:df:a7:52:09:08:ab:9a:59:8b:f9:f5:ce:
57:7b:63:73:1e:1d:c6:4f:8b:bb:99:76:46:ac:54:
65:61:dc:55:92:91:5c:bf:bc:f3:e4:a2:94:29:a3:
09:3d:22:5d:20:2a:9f:ef:fb:d9:75:57:82:7b:f9:
ef:24:33:4a:72:5e:62:ae:d7:ba:c4:9b:59:3f:6a:
e3:70:a4:85:96:14:be:41:f5:5d:92:a7:2b:4f:40:
a0:32:f8:43:be:76:c4:8b:a5:29:c9:77:25:47:33:
a2:6d:ac:0d:ca:40:b8:74:21:14:19:e7:a7:84:e8:
d1:0e:f3:07:6b:82:37:cc:23:78:0f:dd:cc:ad:0c:
a1:2e:4d:36:66:f1:7e:92:ea:53:e9:41:eb:96:57:
a7:51:af:b5:99:03:e7:52:8a:44:9f:cc:13:fd:6b:
05:16:08:5a:6e:9b:9f:03:23:54:8e:92:d7:0d:82:
26:ac:2c:8c:ab:ff:0d:4d:f1:0b:ab:37:93:2b:0d:
fb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:79:FF:E5:99:26:74:3B:63:8D:30:E2:1C:1A:55:4B:82:DF:FE:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DE09E34356511F0ACE893B6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.174.0/24
156.246.176.0/22
156.246.207.0-156.246.211.255
156.246.214.0/24
156.246.220.0/22
156.246.229.0/24
156.246.239.0-156.246.242.255
Signature Algorithm: sha256WithRSAEncryption
01:3c:28:86:48:cb:07:3e:db:a0:a5:d8:ee:ab:2f:e0:2d:db:
25:8b:4f:49:0b:ab:58:d4:f4:55:66:47:a9:2c:8b:0a:9c:5c:
e6:2b:e0:a0:ba:5d:19:ab:ec:3f:aa:cb:7a:68:de:4f:c7:37:
4d:70:4a:9c:46:de:b9:fb:5a:74:72:c2:5e:e8:b1:fe:89:c9:
7d:6d:73:59:70:fe:4d:5b:c7:92:4f:04:75:c1:1b:9a:ea:25:
38:52:28:97:41:cc:22:94:94:33:a9:3b:26:47:6f:a7:45:fa:
41:77:58:2e:7b:6e:0b:29:19:e6:5c:68:d1:8c:c4:45:a2:2e:
c6:6d:7e:f7:11:b9:d9:27:72:5d:b4:5a:d9:88:10:1a:ab:82:
4d:64:3b:28:f2:3c:46:cc:76:da:a7:84:cd:d7:3a:56:4e:7e:
f4:b1:4a:44:22:d5:26:b0:d0:40:d3:67:68:23:6c:83:b7:6e:
2b:d3:ba:f1:fc:8e:53:dc:a5:39:34:b1:31:ad:ae:56:91:af:
2b:97:5a:1a:d5:e6:da:7a:16:66:79:00:bf:c6:05:48:da:51:
20:60:77:cb:ac:66:a6:33:c4:80:8c:fb:56:a6:cf:e6:65:43:
77:13:0e:01:63:80:da:4a:c9:69:9c:17:53:fd:fa:bd:f8:29:
20:e1:9b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:45:03 2025 by rpki-client