Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6577B80A0FA011F09C4888AB762E951A.roa
File: 6577B80A0FA011F09C4888AB762E951A.roa (raw, json)
Hash identifier: MyOiuxCULV95DIchnb7FFbHegXnEtELbYBRnUxLHR2s=
Subject key identifier: 4C:0C:55:6D:9A:1B:56:BE:1E:CF:8C:90:57:02:0D:59:51:E7:F2:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014975
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6577B80A0FA011F09C4888AB762E951A.roa
Signing time: Wed 02 Apr 2025 08:56:42 +0000
ROA not before: Wed 02 Apr 2025 08:56:38 +0000
ROA not after: Fri 11 Apr 2025 08:56:38 +0000
asID: 200373
IP address blocks: 156.228.85.0/24 maxlen: 24
156.228.177.0/24 maxlen: 24
156.228.178.0/24 maxlen: 24
156.228.179.0/24 maxlen: 24
156.228.190.0/24 maxlen: 24
156.233.72.0/24 maxlen: 24
156.233.73.0/24 maxlen: 24
156.233.74.0/24 maxlen: 24
156.233.75.0/24 maxlen: 24
156.233.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84341 (0x14975)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 2 08:56:38 2025 GMT
Not After : Apr 11 08:56:38 2025 GMT
Subject: CN=67ecfbca-a5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a6:8f:5f:31:5c:aa:69:2c:fa:09:7f:bc:51:
bb:bb:7e:59:e9:c5:d1:ce:f7:67:b3:f7:c9:08:76:
f6:9e:a4:82:2c:b5:cf:12:db:08:18:fc:ce:2b:3d:
ba:6e:28:86:4a:38:60:7b:91:6b:6f:7c:af:17:8c:
37:62:85:06:29:08:14:d7:83:47:c3:55:55:bc:71:
1f:1f:97:5a:fb:37:e8:b2:e3:8f:7a:95:70:78:56:
a5:62:75:f4:08:7f:85:11:f5:f4:88:22:79:8b:7f:
f2:59:d4:f3:c2:9c:30:23:5e:99:94:60:cf:6e:a3:
89:a5:45:a5:65:62:b5:60:5f:f4:38:9a:11:35:2f:
0f:f9:fe:fa:56:71:f3:ec:a2:dd:a5:c2:96:ca:3f:
79:cb:9a:2a:ce:5e:00:54:47:a1:99:f1:3d:72:5c:
f6:1b:c4:48:00:5f:b3:9c:0c:af:5a:a6:c6:4b:6a:
bd:00:41:64:1a:f2:d7:6e:e3:36:6c:1b:d6:f1:c4:
a7:40:2e:1d:1c:1d:c4:63:d1:02:dd:80:17:9e:e2:
a4:91:0a:fe:84:aa:82:cc:8e:b6:a7:23:31:5e:4f:
cd:26:eb:cc:bb:98:85:c2:67:92:e9:9c:12:37:1d:
f6:2d:75:9b:9d:2a:ff:c7:d6:76:cd:10:22:8c:d6:
51:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0C:55:6D:9A:1B:56:BE:1E:CF:8C:90:57:02:0D:59:51:E7:F2:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6577B80A0FA011F09C4888AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.85.0/24
156.228.177.0-156.228.179.255
156.228.190.0/24
156.233.72.0/22
156.233.84.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:be:ad:e2:2a:33:03:8f:6b:66:5f:d7:6a:81:bc:78:2c:d2:
cf:ea:01:4e:2b:fe:0a:8d:94:17:1d:57:e9:4a:51:ed:36:6a:
0b:d6:e7:78:d4:b5:b2:ee:61:f8:ca:3b:8f:f3:08:39:ef:23:
28:a0:cd:46:88:e6:69:b6:f2:f7:c4:c7:33:60:d6:81:47:74:
71:a6:0d:9e:5c:3f:a3:82:20:48:96:b4:f1:33:e9:1d:01:d6:
0e:9f:bc:15:43:22:2e:d6:a2:09:05:cb:5c:b2:78:f0:87:be:
aa:df:30:7e:d9:5a:50:c7:a3:fd:b9:74:8a:65:75:f9:f9:c5:
b2:55:b3:d9:ab:b2:ef:b9:51:81:e9:09:c4:4e:d9:b4:e9:56:
97:64:4f:82:be:50:71:b2:6f:81:d7:95:7c:f6:ff:0c:d7:41:
9e:81:9e:59:91:9b:41:cc:0c:18:22:e9:90:55:9f:d1:57:eb:
5d:e3:83:7f:8b:27:64:46:d1:31:03:75:9d:22:2d:e2:8d:67:
f6:a0:88:c4:a5:24:1b:d9:6c:b8:ac:ce:bd:ba:a6:98:77:03:
26:83:df:ff:05:ed:d8:84:e5:b1:be:a5:17:78:28:9b:58:22:
5e:da:5f:9b:49:3b:c7:bb:93:ef:0d:24:30:98:9a:1d:66:b6:
a0:c2:39:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:22 2025 by rpki-client