Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C42FF1A24DF11F09656BAA9DAE4EC9C.roa
File: 6C42FF1A24DF11F09656BAA9DAE4EC9C.roa (raw, json)
Hash identifier: C2hTkR+zMDUgAcJ1Nh5I/YvQ1IpbdtcW9rItumNJPtQ=
Subject key identifier: B9:ED:FE:36:BA:9D:A1:DD:E4:CA:7D:CF:CC:30:8A:15:C0:C8:E6:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015041
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C42FF1A24DF11F09656BAA9DAE4EC9C.roa
Signing time: Tue 29 Apr 2025 09:50:46 +0000
ROA not before: Tue 29 Apr 2025 09:50:41 +0000
ROA not after: Wed 25 Jun 2025 09:50:41 +0000
asID: 63139
IP address blocks: 156.225.112.0/24 maxlen: 24
156.225.113.0/24 maxlen: 24
156.225.114.0/24 maxlen: 24
156.225.115.0/24 maxlen: 24
156.225.116.0/24 maxlen: 24
156.225.117.0/24 maxlen: 24
156.225.118.0/24 maxlen: 24
156.225.119.0/24 maxlen: 24
156.225.120.0/24 maxlen: 24
156.225.122.0/24 maxlen: 24
156.227.200.0/24 maxlen: 24
156.227.201.0/24 maxlen: 24
156.227.202.0/24 maxlen: 24
156.227.203.0/24 maxlen: 24
156.227.226.0/23 maxlen: 24
156.227.228.0/23 maxlen: 24
156.227.230.0/23 maxlen: 24
156.229.40.0/23 maxlen: 24
156.229.42.0/24 maxlen: 24
156.229.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86081 (0x15041)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 09:50:41 2025 GMT
Not After : Jun 25 09:50:41 2025 GMT
Subject: CN=6810a0f6-c4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3e:df:8c:5c:19:f9:f8:f9:af:81:9b:a4:d5:
41:6b:2a:2a:b5:74:3f:77:d8:99:83:8a:ba:97:6a:
6b:d3:88:a8:97:5a:44:c1:47:65:39:db:38:42:d4:
42:cd:5e:f6:ed:2f:5b:64:d1:9f:59:36:24:7a:69:
f2:6b:79:07:2b:47:96:bd:70:0d:2b:cb:ef:98:cd:
00:b1:65:ab:39:b5:07:51:41:b8:a9:42:6a:af:e2:
ae:9f:d0:0a:5d:7b:ec:4d:2a:34:3e:90:10:aa:44:
25:f8:57:78:9c:e0:d7:7e:46:dd:c2:39:1e:c0:e1:
b7:70:06:c6:84:d5:97:ba:08:5b:7e:3f:3e:3c:47:
ef:ec:9b:83:bd:75:66:23:e5:e9:62:63:e9:bf:52:
f6:99:d5:d8:af:7f:11:e1:8d:0e:9c:38:ef:56:ec:
e7:6b:02:8b:83:57:eb:81:a9:ed:7e:14:0e:dc:f8:
64:81:52:a2:77:e0:12:e5:81:be:e1:b9:37:2b:10:
9a:59:df:71:3e:f6:db:47:dc:00:83:d8:fb:47:5a:
a1:68:84:ab:56:16:1a:36:cf:6b:4c:31:d6:df:b4:
fa:ab:df:6f:57:43:fc:90:97:96:6f:f3:d1:46:4a:
36:4a:23:c0:a7:23:3b:19:41:17:c6:8a:fb:a2:17:
01:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:ED:FE:36:BA:9D:A1:DD:E4:CA:7D:CF:CC:30:8A:15:C0:C8:E6:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C42FF1A24DF11F09656BAA9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.112.0-156.225.120.255
156.225.122.0/24
156.227.200.0/22
156.227.226.0-156.227.231.255
156.229.40.0/22
Signature Algorithm: sha256WithRSAEncryption
57:f1:67:9c:e6:e0:43:3d:2b:5f:96:09:86:85:3c:40:2b:cb:
5a:98:28:6f:f9:38:6d:84:40:bc:7d:32:ae:92:84:e5:41:c4:
b2:41:06:91:ac:6a:14:7a:dd:e6:be:9e:db:40:49:96:04:24:
ad:13:0e:5b:15:8e:be:e9:55:78:4f:9d:88:1e:cf:d5:76:0f:
be:50:69:a2:c7:51:aa:02:6b:26:02:0d:d4:ad:e3:ac:32:7e:
27:6a:01:10:b6:07:d4:82:aa:3d:5b:99:2e:7c:67:f9:2c:cb:
90:55:e8:42:92:62:f2:f6:1b:33:2b:dd:a2:86:49:17:96:29:
60:6e:ab:74:ce:d9:e9:63:d5:ee:4c:a4:d9:82:08:25:6e:0d:
f4:45:5a:12:95:b0:59:ca:cf:69:38:f9:70:34:ba:c3:4b:23:
6c:86:c5:4d:68:6f:db:33:d3:12:43:0d:32:17:b2:90:fe:50:
b8:f9:5d:54:c2:0a:1d:53:e7:99:f8:e6:4a:37:ad:fe:78:f3:
02:f6:17:75:73:82:e4:00:16:24:a1:c5:5e:bb:19:48:10:29:
a8:83:b0:40:54:eb:c6:b1:ef:5e:97:ba:1b:b5:50:6b:cc:c1:
0f:d5:75:62:50:59:8a:1a:3a:14:41:f0:ae:80:56:fb:0a:de:
3a:46:87:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:24:23 2025 by rpki-client