Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44A0A89AF4FB11EFB1EB125D762E951A.roa
File: 44A0A89AF4FB11EFB1EB125D762E951A.roa (raw, json)
Hash identifier: 7nr7ftPHKQFfXzgy57oWOZ9dSJEkrvkHXGDepnBluas=
Subject key identifier: 78:06:77:6B:3D:29:A9:DD:4E:F2:6F:4C:08:5C:FE:99:8C:E6:93:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0139FD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44A0A89AF4FB11EFB1EB125D762E951A.roa
Signing time: Thu 27 Feb 2025 11:09:10 +0000
ROA not before: Thu 27 Feb 2025 11:09:06 +0000
ROA not after: Sat 19 Feb 2028 11:09:06 +0000
asID: 17561
IP address blocks: 156.227.61.0/24 maxlen: 24
156.227.62.0/24 maxlen: 24
156.227.63.0/24 maxlen: 24
156.227.146.0/24 maxlen: 24
156.227.149.0/24 maxlen: 24
156.227.150.0/24 maxlen: 24
156.227.151.0/24 maxlen: 24
156.227.152.0/24 maxlen: 24
156.227.153.0/24 maxlen: 24
156.227.156.0/24 maxlen: 24
156.227.160.0/24 maxlen: 24
156.227.161.0/24 maxlen: 24
156.227.162.0/24 maxlen: 24
156.227.163.0/24 maxlen: 24
156.227.164.0/24 maxlen: 24
156.227.165.0/24 maxlen: 24
156.227.166.0/24 maxlen: 24
156.227.167.0/24 maxlen: 24
156.227.168.0/24 maxlen: 24
156.227.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80381 (0x139fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 11:09:06 2025 GMT
Not After : Feb 19 11:09:06 2028 GMT
Subject: CN=67c047d6-163b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0a:08:5d:d4:e5:0d:95:12:8c:98:6e:a6:90:
b4:62:9d:de:19:f7:a8:65:10:1d:34:d4:35:37:f5:
3c:c1:82:90:56:b8:2b:2f:9c:0e:fc:aa:17:d6:34:
81:56:3f:1c:d1:94:93:45:6e:67:a4:14:a8:b5:84:
86:b8:db:32:83:3c:bc:21:14:f4:f1:e9:7d:78:bf:
a4:d9:0c:19:bc:18:6d:d9:ae:bf:b3:41:05:3f:e1:
4c:1a:87:13:40:fa:27:fb:98:0f:7e:cf:63:2e:8f:
36:23:a6:52:6b:ea:11:19:74:f6:a2:68:d0:d0:d5:
d5:4f:2f:d0:f4:94:42:38:36:4a:3b:1a:26:98:bc:
51:d9:2b:cc:8b:ae:19:92:7b:6d:d7:7c:1d:33:83:
f5:d9:40:72:85:1a:d0:6d:20:24:13:db:bd:10:a1:
e2:80:83:f4:56:0d:fb:e6:2a:82:20:ff:f7:f8:fe:
0d:59:60:80:82:ff:72:b2:fc:da:59:c3:4d:71:0c:
45:95:2b:5b:c3:c6:44:7b:1c:9e:95:0c:72:10:f6:
2d:99:75:a1:90:e9:5f:b6:c8:76:43:00:a7:aa:0e:
1f:10:ad:32:30:cf:59:45:f9:81:57:f0:51:89:7e:
49:2a:15:98:99:8a:8e:25:bf:23:23:e0:c5:3b:08:
d3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:06:77:6B:3D:29:A9:DD:4E:F2:6F:4C:08:5C:FE:99:8C:E6:93:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44A0A89AF4FB11EFB1EB125D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.61.0-156.227.63.255
156.227.146.0/24
156.227.149.0-156.227.153.255
156.227.156.0/24
156.227.160.0-156.227.169.255
Signature Algorithm: sha256WithRSAEncryption
19:ed:f6:67:71:a2:54:a8:01:f2:a7:7f:20:3b:06:07:16:a5:
02:70:94:cc:93:c9:fb:2c:ce:97:79:60:a0:f1:bd:f9:ae:70:
e9:af:6b:33:0b:95:6a:ea:96:c6:ad:b9:c5:70:8c:e3:ac:f4:
36:21:5c:4a:09:17:55:7c:d8:a6:da:82:7e:03:9b:61:4b:29:
cd:12:c2:c9:ee:c0:c9:38:d3:06:9c:2e:c3:43:8a:15:93:b6:
f6:6f:91:eb:02:b7:20:ea:57:5b:fb:cf:d9:ca:13:ea:d5:f1:
66:26:c4:ee:cd:ab:08:d6:eb:57:95:27:61:47:a0:91:cf:44:
a6:90:7b:63:be:75:c6:5d:04:15:27:6a:ad:49:3c:a9:09:34:
f9:c4:b2:81:e7:76:24:3f:a7:09:90:14:4a:8f:c3:13:e5:39:
e0:5c:2f:4c:cc:de:03:31:03:a3:3d:1a:51:f0:fd:c9:ff:ae:
43:39:10:e3:8e:0f:73:fd:c2:c6:53:e7:5c:eb:f4:6e:07:b9:
76:08:df:27:ab:2d:17:6f:93:f3:5f:ca:a8:c5:11:a9:b9:72:
e8:15:75:5d:bf:28:4b:dd:e0:12:e2:6a:04:16:73:1b:66:e5:
07:28:14:bf:cd:16:65:a9:50:a6:e1:88:54:ed:6d:df:69:8b:
12:62:e7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:31 2025 by rpki-client