Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D583840E0C811EFA280E07B762E951A.roa
File: 5D583840E0C811EFA280E07B762E951A.roa (raw, json)
Hash identifier: 2ojzHbJmQi35h8wxqRfln2Mm+tpeSSVNlbOcAhpofKU=
Subject key identifier: 7B:2E:8C:36:C2:BA:F4:49:E4:77:3F:33:41:6E:AB:BD:2C:1E:37:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01199B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D583840E0C811EFA280E07B762E951A.roa
Signing time: Sat 01 Feb 2025 18:14:24 +0000
ROA not before: Sat 01 Feb 2025 18:12:16 +0000
ROA not after: Sun 01 Feb 2026 18:12:16 +0000
asID: 7018
IP address blocks: 156.226.128.0/24 maxlen: 24
156.226.129.0/24 maxlen: 24
156.243.116.0/24 maxlen: 24
156.243.117.0/24 maxlen: 24
156.243.118.0/24 maxlen: 24
156.243.119.0/24 maxlen: 24
156.247.4.0/24 maxlen: 24
156.247.5.0/24 maxlen: 24
156.247.6.0/24 maxlen: 24
156.247.7.0/24 maxlen: 24
156.252.4.0/24 maxlen: 24
156.252.5.0/24 maxlen: 24
156.252.6.0/24 maxlen: 24
156.252.7.0/24 maxlen: 24
156.255.12.0/24 maxlen: 24
156.255.13.0/24 maxlen: 24
156.255.14.0/24 maxlen: 24
156.255.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72091 (0x1199b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 1 18:12:16 2025 GMT
Not After : Feb 1 18:12:16 2026 GMT
Subject: CN=679e647f-d13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5b:51:8c:91:d3:cf:41:06:cc:a3:bf:3e:41:
25:d3:3b:32:c8:2d:ac:ae:12:6f:60:21:07:37:db:
b5:41:85:e5:b0:36:9c:24:37:eb:ec:d2:9c:00:d0:
e0:30:d5:bd:b5:de:27:23:52:c1:35:3b:5b:a0:fe:
93:d1:f7:47:ff:6b:ac:44:de:f5:8c:a5:6e:92:67:
b2:4a:95:6d:88:05:73:a6:1a:4d:bd:a2:b0:c5:95:
79:5b:27:7a:b5:a6:04:25:85:25:11:01:b4:71:0c:
b4:9e:9b:70:8b:2a:fe:22:89:fa:85:25:c5:09:9f:
ec:e5:f3:b7:e7:4c:62:55:4f:52:9c:1f:94:33:90:
00:56:be:aa:fb:15:b6:d6:03:0b:78:65:d5:aa:7b:
06:ac:46:a4:ed:18:05:49:00:9e:9a:15:91:5d:b2:
70:3b:8f:e2:0a:06:90:be:51:6d:ad:cb:66:a5:c0:
ff:4a:d5:9c:15:30:b7:31:13:a3:68:3e:eb:cb:49:
0b:3a:ed:50:2e:67:ec:16:ec:04:d1:29:a8:45:34:
94:80:04:d4:05:21:6b:d7:13:fb:8e:13:6c:bf:27:
94:f7:20:dd:b2:31:8c:89:1a:ae:f2:27:b4:dd:a9:
ed:6a:c8:47:8f:30:6b:7b:56:25:51:c6:fa:a3:48:
06:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2E:8C:36:C2:BA:F4:49:E4:77:3F:33:41:6E:AB:BD:2C:1E:37:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D583840E0C811EFA280E07B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.128.0/23
156.243.116.0/22
156.247.4.0/22
156.252.4.0/22
156.255.12.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:d6:14:ab:c2:f4:be:00:63:75:5f:a4:8d:3a:68:c5:ae:38:
d3:96:52:33:64:d6:3a:65:34:c7:d9:cc:01:f2:9d:45:4b:01:
d1:10:c8:45:3c:b3:ea:d7:69:10:56:48:cf:b5:db:1a:dd:2d:
b5:76:12:83:c9:6d:8e:ad:9f:e6:f2:32:12:97:bf:b1:28:96:
c2:ab:1c:1f:3f:52:3b:b0:e2:71:8e:ff:2b:2b:72:44:2d:ae:
76:ac:0e:58:6b:95:de:29:6b:62:1c:78:0f:a5:36:a2:7b:ce:
3b:eb:f0:1b:0e:13:c0:77:a8:70:e8:86:87:b2:20:1c:1e:d4:
35:57:96:74:e8:d5:29:d8:3c:f3:49:66:30:f8:69:bc:19:b8:
4b:d6:e8:89:e0:8d:b8:8b:13:7c:6c:62:bf:10:35:c4:14:29:
87:e1:6b:67:e1:99:a2:26:a1:17:b4:ef:94:fb:36:4d:3d:49:
fb:fd:c5:16:69:a2:ef:6a:7d:38:86:36:b7:73:22:00:27:f2:
8b:3b:f6:c9:e2:3d:56:78:14:62:00:39:cc:ef:8c:df:98:43:
1f:6c:73:e0:27:22:e0:c7:6d:85:41:45:a6:d0:d8:c0:f5:d5:
1a:75:ff:ae:3f:cb:4f:f1:f4:cf:16:aa:49:3d:8b:80:0f:b9:
33:b0:9a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:21:54 2025 by rpki-client