Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F72ECFEF64B11EFBAA96062762E951A.roa
File: 5F72ECFEF64B11EFBAA96062762E951A.roa (raw, json)
Hash identifier: iRc2ySllCHdy5l3owyWhu1loesZdmyQBZYY2qHTQ/Uc=
Subject key identifier: 12:82:E5:50:90:FA:57:A4:EC:BC:49:19:6E:06:39:E0:87:B1:8A:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013F80
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F72ECFEF64B11EFBAA96062762E951A.roa
Signing time: Sat 01 Mar 2025 03:15:06 +0000
ROA not before: Sat 01 Mar 2025 03:15:02 +0000
ROA not after: Sun 20 Feb 2028 03:15:02 +0000
asID: 17561
IP address blocks: 156.238.174.0/24 maxlen: 24
156.238.175.0/24 maxlen: 24
156.248.52.0/24 maxlen: 24
156.248.53.0/24 maxlen: 24
156.248.54.0/24 maxlen: 24
156.248.55.0/24 maxlen: 24
156.248.56.0/24 maxlen: 24
156.248.57.0/24 maxlen: 24
156.248.58.0/24 maxlen: 24
156.248.59.0/24 maxlen: 24
156.248.60.0/24 maxlen: 24
156.248.61.0/24 maxlen: 24
156.248.62.0/24 maxlen: 24
156.248.63.0/24 maxlen: 24
156.248.66.0/24 maxlen: 24
156.248.70.0/24 maxlen: 24
156.248.86.0/24 maxlen: 24
156.248.96.0/24 maxlen: 24
156.253.7.0/24 maxlen: 24
156.253.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81792 (0x13f80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 1 03:15:02 2025 GMT
Not After : Feb 20 03:15:02 2028 GMT
Subject: CN=67c27bb9-f44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cc:d8:e4:93:ee:f8:2f:82:05:63:72:4b:99:
3a:14:f7:e0:72:00:1a:bb:9f:a3:66:0a:3c:f0:d0:
9e:1b:fd:42:bd:37:6b:da:1b:e4:bf:0d:4f:09:3a:
38:32:e9:bc:6a:f3:b1:69:eb:35:ee:f3:47:2b:b1:
46:d0:03:39:b7:49:96:47:e7:84:ba:4c:d3:68:c8:
52:c9:b9:37:35:42:58:92:46:40:ed:29:be:ee:c0:
96:32:04:bc:db:cc:bf:6b:60:b6:7a:4a:7c:e7:0b:
5b:55:62:ab:e3:98:16:bc:dd:22:73:a5:b0:08:27:
29:ad:a4:e5:0e:77:b4:38:26:fa:7b:52:f8:07:a3:
d3:a9:8b:fd:34:27:73:70:41:03:8f:f1:23:40:2c:
73:d0:1a:cb:0f:47:69:d2:06:99:54:e3:7c:b7:d9:
8d:fd:d0:df:85:9b:5f:8d:ff:0b:0c:2c:e4:62:35:
d8:b0:19:56:bf:5c:4d:91:1c:a7:f2:a6:00:d7:a1:
a9:cf:ef:3a:9e:29:1d:ca:86:52:08:37:17:76:b3:
1f:9f:3d:d6:84:fc:4b:d5:c4:f4:e7:0e:54:bc:1b:
e1:35:72:cb:ac:02:54:3b:cb:f3:d6:5e:60:5a:88:
5a:87:ac:27:4a:63:5f:50:81:4d:19:43:8c:8f:1c:
07:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:82:E5:50:90:FA:57:A4:EC:BC:49:19:6E:06:39:E0:87:B1:8A:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F72ECFEF64B11EFBAA96062762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.174.0/23
156.248.52.0-156.248.63.255
156.248.66.0/24
156.248.70.0/24
156.248.86.0/24
156.248.96.0/24
156.253.7.0/24
156.253.34.0/24
Signature Algorithm: sha256WithRSAEncryption
06:6d:e9:76:a4:b0:4d:c7:78:44:73:bc:80:66:89:5d:4e:bb:
6b:a0:37:c6:e4:c3:a5:d3:b1:db:61:fe:58:bf:71:a6:1c:15:
10:11:3f:73:76:78:53:1f:da:d7:55:44:e3:b8:d7:b9:36:ba:
5e:51:5c:d7:dc:7b:c2:89:cb:c6:0f:70:df:91:a2:bf:8f:80:
a9:cf:89:96:17:15:74:7c:75:26:b0:4b:34:23:ca:70:5c:58:
f5:41:c1:af:f6:9d:9f:23:06:05:26:f6:1e:0a:43:21:b3:58:
ae:12:e6:c8:20:89:9f:9c:4f:0b:dd:ff:4e:3d:24:ab:e8:b4:
02:83:ee:d8:2f:ca:cd:54:19:7a:e0:09:a9:03:3e:e1:f5:e3:
4b:5a:c2:9d:c3:6c:3a:5c:a4:48:af:91:0c:5d:b2:1d:13:d0:
28:8f:32:6c:cb:c3:88:1d:aa:9d:eb:27:ab:46:69:b1:2e:83:
92:aa:ed:75:1d:b4:02:5e:53:08:c7:dd:d6:1a:ad:13:b2:a3:
88:12:f2:c1:49:9a:b5:99:78:00:90:8b:83:fd:1e:dc:c1:4c:
f2:25:8a:3d:39:6a:18:c9:16:b3:e1:04:c1:c4:3b:48:ca:23:
ff:2b:fa:69:65:bd:af:98:8a:b4:39:63:c7:53:73:ed:7c:ed:
3e:e5:14:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:58 2025 by rpki-client