Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/511FFAAE095E11F0AC2D3376762E951A.roa
File: 511FFAAE095E11F0AC2D3376762E951A.roa (raw, json)
Hash identifier: ChRxy31gAmCs5anGIJPtFE0aY5NMl3MC9EGorjSedL4=
Subject key identifier: BD:33:D3:4C:FA:9E:98:E2:0D:36:79:7C:E3:0E:79:19:04:C2:91:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0147FF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/511FFAAE095E11F0AC2D3376762E951A.roa
Signing time: Tue 25 Mar 2025 09:48:34 +0000
ROA not before: Tue 25 Mar 2025 09:48:30 +0000
ROA not after: Sat 17 May 2025 09:48:30 +0000
asID: 138915
IP address blocks: 156.244.23.0/24 maxlen: 24
156.244.24.0/24 maxlen: 24
156.244.31.0/24 maxlen: 24
156.244.32.0/24 maxlen: 24
156.244.34.0/24 maxlen: 24
156.244.35.0/24 maxlen: 24
156.244.37.0/24 maxlen: 24
156.244.39.0/24 maxlen: 24
156.244.40.0/24 maxlen: 24
156.244.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83967 (0x147ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 25 09:48:30 2025 GMT
Not After : May 17 09:48:30 2025 GMT
Subject: CN=67e27bf2-eee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7b:6d:16:85:b8:01:1e:62:67:1b:0e:03:47:
b1:2b:79:54:8e:25:fc:1b:c5:e9:b4:07:69:0d:0a:
6f:c2:a3:ad:8a:fe:2f:03:17:b8:57:56:cc:f0:7e:
14:c7:f4:7a:38:25:51:bd:66:d4:a6:94:18:7d:95:
c0:0d:d4:90:e0:53:8b:a1:05:f0:db:8e:84:d1:e3:
bb:6f:45:95:4f:90:7d:a5:bd:b3:24:31:2b:56:1f:
e0:a2:39:37:4c:a9:4b:4b:08:f5:fb:17:b9:e9:fd:
66:7b:bb:f4:79:54:21:4b:34:35:e0:48:4b:4c:ff:
2c:13:b5:67:f3:7b:fe:ae:8c:0e:34:89:ce:17:ec:
19:6b:ec:32:19:36:9c:24:18:e1:f0:33:c9:95:49:
46:ca:50:e6:9b:54:61:e4:d3:e0:02:35:c0:c7:0a:
ae:e1:ac:67:ff:eb:4f:65:77:d3:e5:1f:84:2e:89:
c4:e7:9e:24:d5:81:bb:f4:93:e9:9e:d5:af:11:24:
20:36:a8:70:6d:ce:a2:f9:72:f1:dc:90:cb:45:97:
a1:41:af:de:ed:6d:ca:da:b4:21:60:72:e0:aa:d1:
b1:cb:4f:0f:81:6e:7b:ae:1a:43:3f:32:8f:69:4a:
fd:b6:c7:61:62:17:95:29:cd:41:6a:d9:f0:f8:0f:
10:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:33:D3:4C:FA:9E:98:E2:0D:36:79:7C:E3:0E:79:19:04:C2:91:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/511FFAAE095E11F0AC2D3376762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.23.0-156.244.24.255
156.244.31.0-156.244.32.255
156.244.34.0/23
156.244.37.0/24
156.244.39.0-156.244.41.255
Signature Algorithm: sha256WithRSAEncryption
15:e6:1e:f0:b4:f3:fc:30:37:dc:a9:45:0b:17:44:3d:cb:3b:
1e:43:37:6d:df:5c:ce:bc:d4:83:4d:2b:c8:34:b5:04:50:10:
ce:5d:29:9e:b7:97:65:a9:df:cc:45:cd:85:64:8e:9b:ba:27:
80:50:92:0c:7e:d1:30:a5:f8:6d:c5:73:5b:2b:0a:e2:e6:e2:
7b:73:03:91:6f:b8:c6:7c:2b:8b:52:d2:ff:15:ca:ce:ce:9d:
3a:12:bd:8d:ad:d0:e8:ed:20:d6:46:ca:d0:76:09:55:f7:12:
7a:2a:ec:b2:56:38:d8:de:39:94:b7:19:15:c0:20:d1:2d:f1:
d7:4e:da:b6:e3:ee:b7:1b:fd:90:12:ca:e9:92:97:f4:f8:9a:
45:a6:7e:ce:d9:4f:4d:78:93:79:4a:91:18:74:ee:26:41:42:
ec:b1:e1:f7:21:6b:5f:72:63:a9:96:ad:0a:78:42:b5:57:81:
9c:ed:bf:b5:5a:bf:d1:61:4f:c7:92:9a:6d:9f:83:48:8a:7e:
b3:b3:96:0e:41:a2:85:b0:ef:79:a3:fa:1e:c0:c2:8e:92:d8:
db:97:b8:28:8b:a0:00:a2:7e:28:fb:95:4f:a4:14:e8:ce:a9:
7a:58:22:f2:7a:5b:06:c3:77:f0:43:15:7e:03:b5:12:40:e4:
cb:33:49:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:32 2025 by rpki-client