Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F0D9560297E11F08D3F1898DAE4EC9C.roa
File: 4F0D9560297E11F08D3F1898DAE4EC9C.roa (raw, json)
Hash identifier: K6XuZAqTzlpyQUXYmUsiKxDXHslhEFwWqt99s/QvVVM=
Subject key identifier: B1:4E:7B:85:9A:C8:6A:B8:7C:5A:4B:3D:55:0E:DB:69:87:1F:1A:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0151F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F0D9560297E11F08D3F1898DAE4EC9C.roa
Signing time: Mon 05 May 2025 06:58:12 +0000
ROA not before: Mon 05 May 2025 06:58:08 +0000
ROA not after: Mon 09 Jun 2025 06:58:08 +0000
asID: 54801
IP address blocks: 156.240.0.0/19 maxlen: 24
156.240.32.0/20 maxlen: 24
156.240.48.0/21 maxlen: 24
156.242.10.0/23 maxlen: 24
156.242.12.0/22 maxlen: 24
156.246.0.0/20 maxlen: 24
156.246.16.0/23 maxlen: 24
156.249.28.0/22 maxlen: 24
156.255.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86515 (0x151f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 5 06:58:08 2025 GMT
Not After : Jun 9 06:58:08 2025 GMT
Subject: CN=68186184-20d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:52:b1:1c:77:85:88:dd:26:61:26:c9:9b:7f:
73:ca:0b:f7:47:87:d1:f4:74:9d:4e:61:43:15:94:
af:47:cd:c3:f1:78:a0:77:9e:95:9e:47:60:92:44:
55:bd:2a:d7:f8:47:98:77:21:f5:a4:61:ad:cf:6b:
6b:8c:ae:43:9a:19:60:65:cd:37:97:90:b9:e1:dc:
28:37:ca:dc:72:52:d1:3d:aa:43:1d:eb:48:e3:ed:
30:a6:82:21:94:b2:85:78:bf:50:70:25:23:30:e9:
d0:7b:7e:c3:c2:7d:b8:dd:70:dc:d2:9f:ab:82:99:
a9:9a:b9:12:2e:a5:c0:b1:e0:66:c3:37:86:f8:0e:
f8:c9:2a:92:b7:5a:14:4b:db:6e:5a:6e:fc:3e:c3:
39:fa:c8:33:7f:73:24:22:18:af:8e:f9:ab:7e:a0:
25:84:85:75:05:61:a9:af:74:88:6b:aa:36:51:1f:
ca:26:c4:5d:b2:13:50:f1:4e:85:f9:f6:26:04:78:
8a:2e:19:41:56:6b:28:4b:16:fb:8b:17:9e:47:ab:
8a:1e:31:ba:ab:e8:21:7f:98:04:d4:3d:4e:bf:d0:
a7:ec:f3:f7:5c:00:65:3e:be:81:be:7e:20:f8:e8:
66:32:ae:00:70:da:84:71:28:fb:fb:41:82:ec:58:
25:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4E:7B:85:9A:C8:6A:B8:7C:5A:4B:3D:55:0E:DB:69:87:1F:1A:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F0D9560297E11F08D3F1898DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.0.0-156.240.55.255
156.242.10.0-156.242.15.255
156.246.0.0-156.246.17.255
156.249.28.0/22
156.255.0.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:b8:91:a5:6e:4d:d0:d5:f4:d5:c9:a2:1d:2d:7c:c2:68:59:
b5:15:fd:ec:6f:93:d2:d6:ef:9d:20:75:fe:17:2c:c1:02:62:
09:07:aa:71:ab:b4:3f:a4:a8:64:31:04:0f:09:61:0b:c3:aa:
a5:0f:f5:0e:4c:ae:0d:64:50:22:48:54:89:0b:fb:93:41:b7:
9d:e1:7f:7b:0f:07:7a:24:d2:50:b1:59:7a:c1:dc:cf:42:c7:
5f:78:fc:67:ca:a4:4b:15:7c:46:94:d3:24:b8:71:b6:af:b7:
80:60:75:9a:e7:34:11:43:3e:8b:d7:9b:ad:79:43:5a:45:2d:
f3:5f:39:d6:9c:69:9c:2e:08:54:8b:70:cb:f6:61:27:b1:40:
9e:2d:b3:cd:1c:a3:95:16:24:ac:0a:5a:2d:c1:49:44:d7:95:
49:6f:f4:ff:a7:43:db:61:06:20:2d:f2:75:89:a4:99:dd:f9:
df:53:70:56:b6:cb:b7:0f:a6:18:d4:f8:8d:6d:2e:3b:ec:c0:
ef:31:45:24:73:0d:b3:d3:7a:cc:87:1d:06:87:8a:1d:21:8b:
84:8b:76:a2:3c:6c:08:d4:7a:9c:48:d1:8b:54:97:ba:9a:3f:
53:b0:0c:60:3a:e6:e9:78:20:24:5f:b0:79:85:c2:61:85:78:
a6:bf:13:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:35:34 2025 by rpki-client