Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/665083CEF5AB11EF9A19D093762E951A.roa
File: 665083CEF5AB11EF9A19D093762E951A.roa (raw, json)
Hash identifier: oARSis8TuGBwPpWUzUt1ox9tMOVoWv6twI9MHhoujg0=
Subject key identifier: 50:78:E9:ED:EF:24:EF:A0:F5:E1:85:41:4D:8C:19:CB:B3:77:DC:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013C8A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/665083CEF5AB11EF9A19D093762E951A.roa
Signing time: Fri 28 Feb 2025 08:09:58 +0000
ROA not before: Fri 28 Feb 2025 08:09:54 +0000
ROA not after: Thu 19 Feb 2026 08:09:54 +0000
asID: 984
IP address blocks: 156.242.57.0/24 maxlen: 24
156.242.58.0/24 maxlen: 24
156.242.59.0/24 maxlen: 24
156.242.60.0/24 maxlen: 24
156.242.61.0/24 maxlen: 24
156.242.62.0/24 maxlen: 24
156.242.63.0/24 maxlen: 24
156.249.0.0/24 maxlen: 24
156.249.3.0/24 maxlen: 24
156.249.19.0/24 maxlen: 24
156.249.49.0/24 maxlen: 24
156.249.50.0/24 maxlen: 24
156.249.51.0/24 maxlen: 24
156.249.52.0/24 maxlen: 24
156.249.53.0/24 maxlen: 24
156.249.54.0/24 maxlen: 24
156.249.57.0/24 maxlen: 24
156.249.58.0/24 maxlen: 24
156.249.59.0/24 maxlen: 24
156.249.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81034 (0x13c8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 08:09:54 2025 GMT
Not After : Feb 19 08:09:54 2026 GMT
Subject: CN=67c16f56-c7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4b:5f:fa:c6:84:86:7e:9f:18:2e:e1:0a:1f:
cc:2c:2c:79:81:55:a7:60:db:6e:80:b9:d0:7a:bd:
bf:fd:c8:3b:e0:ae:7d:5e:db:10:41:94:b5:ed:8c:
4a:7c:19:d1:3d:df:b7:8c:89:d2:cf:38:66:7c:5a:
0a:3b:9c:f4:ed:76:71:62:35:49:70:c5:08:29:74:
d6:d5:e8:41:51:0e:86:3d:75:09:a7:28:1a:bd:3d:
16:ae:4b:34:47:85:62:2e:a8:90:10:b8:6e:85:9f:
86:b8:08:b1:38:d3:ba:ce:2e:ce:49:fa:94:94:c7:
fa:6f:0f:7c:4e:27:67:ed:5d:7c:5c:55:7a:ab:ac:
2a:3d:e3:d6:e7:34:21:38:f6:2d:6a:03:55:49:a2:
2b:f9:12:c3:5f:84:78:ff:b9:1d:e8:36:94:17:07:
05:73:09:00:af:63:f5:14:49:b1:82:45:8e:91:6f:
d6:ac:3d:70:77:58:cc:f6:e4:a0:9c:56:5d:09:41:
2c:0e:aa:77:f3:6e:87:68:ef:cc:eb:86:00:02:32:
fd:ad:64:09:9b:1a:58:8e:4d:5f:4b:38:33:8a:0d:
95:d2:66:58:70:e1:e3:79:f2:5b:34:89:41:6e:0a:
77:82:04:7e:52:77:f9:c6:6e:4c:d4:77:23:38:92:
37:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:78:E9:ED:EF:24:EF:A0:F5:E1:85:41:4D:8C:19:CB:B3:77:DC:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/665083CEF5AB11EF9A19D093762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.57.0-156.242.63.255
156.249.0.0/24
156.249.3.0/24
156.249.19.0/24
156.249.49.0-156.249.54.255
156.249.57.0-156.249.59.255
156.249.61.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:fa:04:35:48:5d:78:02:97:a0:6b:1e:c7:a1:77:70:d7:39:
93:fc:af:f0:9b:92:84:8c:36:02:9e:ea:66:6f:0f:80:31:17:
fd:dd:ba:11:92:be:6f:28:75:a4:e2:58:cf:13:00:bf:68:aa:
5c:2b:49:5f:26:2a:2f:06:d9:f4:da:93:17:b4:8b:72:34:b0:
dc:e2:25:d0:d5:2b:ad:2a:fb:dd:17:1a:01:7e:38:b5:19:6a:
c2:3b:b3:ac:f2:d8:d6:67:c3:bf:0d:23:c3:a1:a4:92:47:20:
90:42:b6:9f:63:ea:ea:c2:47:bf:54:bd:7e:7d:b7:f4:1b:ee:
ae:c3:72:2d:67:34:50:7b:65:1a:54:7b:63:07:1d:32:bc:79:
38:9b:7c:5e:c0:51:b1:64:a8:82:19:38:10:83:68:e5:cb:98:
94:2e:e0:c2:f1:ad:e9:2b:7d:87:bb:48:6d:7c:9e:a7:4e:4f:
89:49:83:4c:1a:57:cc:0e:ce:4e:4c:5c:6c:14:e8:0a:95:c7:
44:f2:f3:98:eb:2e:9c:b6:8f:cf:70:ea:be:b5:50:59:00:4e:
71:04:1a:d6:c6:e5:e9:52:85:8f:ed:51:7f:be:a9:bd:c9:dd:
ee:06:b4:5f:26:aa:23:ea:b9:af:b3:6c:16:89:88:4c:95:e9:
cf:20:eb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:08 2025 by rpki-client