Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E02A960095F11F08F4C487E762E951A.roa
File: 4E02A960095F11F08F4C487E762E951A.roa (raw, json)
Hash identifier: qikZFCR0w8eDmKu9JvCTAvaS9Y1aWwH5MtLN3Ry76Ms=
Subject key identifier: 36:BF:29:B3:60:B6:95:35:28:14:07:A8:E6:DC:23:41:1F:29:26:34
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014801
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E02A960095F11F08F4C487E762E951A.roa
Signing time: Tue 25 Mar 2025 09:55:38 +0000
ROA not before: Tue 25 Mar 2025 09:55:35 +0000
ROA not after: Sat 17 May 2025 09:55:35 +0000
asID: 138915
IP address blocks: 156.244.18.0/24 maxlen: 24
156.244.19.0/24 maxlen: 24
156.244.20.0/24 maxlen: 24
156.244.21.0/24 maxlen: 24
156.244.22.0/24 maxlen: 24
156.244.25.0/24 maxlen: 24
156.244.26.0/24 maxlen: 24
156.244.27.0/24 maxlen: 24
156.244.28.0/24 maxlen: 24
156.244.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83969 (0x14801)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 25 09:55:35 2025 GMT
Not After : May 17 09:55:35 2025 GMT
Subject: CN=67e27d9a-ea9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d8:b7:57:75:fd:02:e6:54:97:58:25:0a:a4:
2e:c0:1c:40:fa:e2:ce:d6:58:f8:7f:73:e2:92:ae:
6c:fe:85:78:e3:af:d6:90:b8:d5:98:50:8f:2c:76:
8a:5a:82:5e:15:fc:d2:dc:89:ac:fe:a2:c0:1a:01:
15:ea:53:e6:fb:c0:ef:61:70:cd:b2:88:22:4f:32:
2a:82:a7:27:8e:9b:1d:54:7f:e2:01:ce:3d:a7:2b:
2a:ed:f4:8f:02:b0:e0:a9:95:6e:ef:df:b1:d8:3b:
80:5f:53:63:17:f6:08:36:b0:6a:2b:c3:71:76:f7:
d0:cd:55:f7:2a:c2:95:ad:e8:61:93:78:99:70:10:
b5:6c:dc:3b:c3:89:4e:5f:b4:61:94:0f:5f:be:23:
f0:3f:6d:00:bf:97:e8:63:49:90:36:07:a3:5f:e0:
22:46:cc:5d:d0:f6:53:2e:bc:20:3b:56:fd:cb:35:
b2:e6:18:94:b4:a4:87:58:2b:c6:c7:68:47:23:8c:
d9:ad:8a:64:92:fe:d6:a6:c5:7b:61:8e:ff:fc:03:
bd:99:ab:55:fd:f0:1c:22:ad:a7:84:aa:38:12:19:
01:8d:ed:1a:6e:b3:d9:94:6b:12:33:16:27:0b:d2:
45:c3:35:83:f7:7c:64:2e:ee:09:60:5a:55:5e:8f:
2c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BF:29:B3:60:B6:95:35:28:14:07:A8:E6:DC:23:41:1F:29:26:34
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E02A960095F11F08F4C487E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.18.0-156.244.22.255
156.244.25.0-156.244.28.255
156.244.30.0/24
Signature Algorithm: sha256WithRSAEncryption
45:7b:c8:98:42:ce:25:0f:58:89:39:a4:eb:18:d5:cf:28:6d:
b1:b6:9e:57:9a:fb:b5:bb:57:47:dd:41:75:6e:11:79:cb:60:
73:26:64:80:0f:99:b8:6a:5e:8b:c4:79:a9:31:ec:8e:81:d3:
bb:a8:25:3b:c0:f4:45:d3:43:8a:22:85:f0:27:3d:34:11:4f:
96:98:53:17:d2:69:db:21:01:49:c4:c7:6c:10:b2:85:c1:0d:
81:14:2a:da:5e:74:db:0e:06:39:a0:8d:5a:af:d7:f2:57:dd:
b7:82:7c:15:3b:5a:73:22:0b:17:a4:25:fd:91:d6:67:73:58:
52:c6:a8:8e:1a:db:16:b2:a9:5f:05:55:db:77:ac:d9:fb:1a:
1f:b7:1a:ec:41:21:0d:60:8c:3a:de:d0:ac:b0:e8:3a:12:fe:
13:a8:83:6c:28:59:54:91:79:69:da:c9:14:df:62:dc:8d:44:
0d:5c:b3:3e:21:9f:b6:69:88:c2:ef:cf:65:42:68:fa:e9:d4:
e7:d5:d9:e4:ee:20:32:4f:7b:3b:08:15:55:78:0e:51:d0:32:
b8:c1:ac:f0:7e:ba:56:db:ed:c8:79:6a:f1:3a:ea:20:37:d8:
2f:dc:51:be:86:a8:26:46:46:45:af:c1:68:97:7c:cd:3d:82:
a0:63:29:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:05 2025 by rpki-client