Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FFC55040F9B11F09ECF038D762E951A.roa
File: 3FFC55040F9B11F09ECF038D762E951A.roa (raw, json)
Hash identifier: qYsL8uPGQczvgGFmZlRw1Z4ih4l5Ahjl3edu1awW6D8=
Subject key identifier: F7:B4:D7:BC:80:55:9A:AF:6F:AC:28:A3:0B:3C:63:1C:47:FD:2F:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014961
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FFC55040F9B11F09ECF038D762E951A.roa
Signing time: Wed 02 Apr 2025 08:19:52 +0000
ROA not before: Wed 02 Apr 2025 08:19:48 +0000
ROA not after: Fri 09 May 2025 08:19:48 +0000
asID: 141883
IP address blocks: 156.240.0.0/19 maxlen: 24
156.240.32.0/20 maxlen: 24
156.240.48.0/21 maxlen: 24
156.242.10.0/23 maxlen: 24
156.242.12.0/22 maxlen: 24
156.246.0.0/20 maxlen: 24
156.246.16.0/23 maxlen: 24
156.249.28.0/22 maxlen: 24
156.255.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84321 (0x14961)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 2 08:19:48 2025 GMT
Not After : May 9 08:19:48 2025 GMT
Subject: CN=67ecf328-f9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4b:34:14:b2:7e:f5:fa:a2:dc:65:ee:85:12:
4c:ab:e2:46:9e:6f:1a:80:d5:97:70:0a:0a:02:e8:
4b:c5:b2:eb:ec:08:1e:8c:eb:1e:4f:38:2c:9a:60:
f5:68:fe:af:92:5e:f1:ca:d7:3f:bb:5c:67:14:be:
01:61:6a:b6:44:2f:3b:3f:eb:01:93:65:da:97:5b:
72:56:ed:7d:be:06:56:9b:81:1b:56:34:30:48:8c:
de:b9:52:b9:15:96:92:70:9c:e8:fb:80:29:94:89:
f0:c9:b1:47:13:4c:e0:98:0b:50:f7:1c:e4:c9:52:
77:b4:72:c5:05:01:2f:ef:26:7f:f6:8c:04:5d:45:
b8:06:dc:69:89:c7:bb:39:14:ba:b2:dc:0e:74:bd:
96:9d:8b:5b:fe:70:32:5c:e3:14:5b:d4:c8:6f:ac:
b6:2a:21:3b:b0:97:9b:03:6b:95:c1:2e:37:25:60:
d6:25:cd:c0:0c:60:0c:11:79:97:72:22:e9:0e:40:
a4:69:fa:88:df:7c:f4:d8:1a:57:41:f2:8d:c3:5f:
26:5f:d2:6f:1a:44:09:d5:7e:8e:0a:5e:1e:ce:a0:
c6:4d:2d:e5:b8:5a:9d:bc:97:55:ed:58:6f:95:38:
90:5b:ef:fc:b1:0e:56:23:5d:c8:ab:e8:73:a3:e6:
6f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B4:D7:BC:80:55:9A:AF:6F:AC:28:A3:0B:3C:63:1C:47:FD:2F:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FFC55040F9B11F09ECF038D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.0.0-156.240.55.255
156.242.10.0-156.242.15.255
156.246.0.0-156.246.17.255
156.249.28.0/22
156.255.0.0/24
Signature Algorithm: sha256WithRSAEncryption
45:c0:a2:3c:e7:2a:c5:11:02:f4:ae:8f:c5:91:31:27:14:3b:
f0:78:a3:cc:ff:69:47:05:71:cc:c1:9b:9f:ec:9d:77:5c:9b:
c0:04:3e:f9:e7:66:ea:ab:70:e3:99:cd:a5:bb:f1:5d:e7:d9:
ab:39:c8:f1:cc:3f:21:52:e6:59:0f:e8:c3:4e:49:f0:25:e2:
40:d7:10:03:62:83:b1:76:b6:e9:18:0e:57:d9:d6:9f:df:0b:
16:c4:6f:6d:74:ed:a3:5e:8c:04:04:bf:1e:81:5d:da:b3:2f:
25:b5:86:31:8c:53:d0:69:69:32:b2:1d:a9:39:16:e3:a0:c5:
0a:18:f2:1c:65:86:53:7b:65:ed:e2:a5:72:82:b6:34:f1:87:
cc:3a:4f:1c:93:ff:16:fc:3f:9c:52:19:d0:6c:98:5f:75:e0:
f8:6b:d4:89:7b:f0:f7:c9:a2:eb:11:d2:61:3e:02:91:f9:90:
2c:c0:92:b9:28:5c:5a:b7:57:54:e5:f4:36:bd:bd:e3:92:78:
af:13:0a:c0:b2:e5:7e:10:55:9b:6f:e8:c5:3a:05:4d:ca:f3:
cd:9b:f6:65:f0:8f:41:f4:20:8a:7f:c4:e2:e1:da:3a:08:6a:
2d:01:44:e1:fd:fd:45:69:d9:f4:0a:98:c8:1c:09:a2:45:be:
ad:9e:40:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:52 2025 by rpki-client