Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75B795E20F9F11F0ACED45A6762E951A.roa
File: 75B795E20F9F11F0ACED45A6762E951A.roa (raw, json)
Hash identifier: 66/528uOJOcXMVYoSWtCyNWuJLi/ZC6yLR9NMIyRDGY=
Subject key identifier: E1:E6:68:27:E5:75:D0:9A:4B:CD:6C:EF:06:CB:92:29:03:D5:E9:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014973
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75B795E20F9F11F0ACED45A6762E951A.roa
Signing time: Wed 02 Apr 2025 08:50:00 +0000
ROA not before: Wed 02 Apr 2025 08:49:56 +0000
ROA not after: Fri 11 Apr 2025 08:49:56 +0000
asID: 200373
IP address blocks: 156.228.76.0/24 maxlen: 24
156.228.88.0/24 maxlen: 24
156.228.89.0/24 maxlen: 24
156.228.91.0/24 maxlen: 24
156.228.92.0/24 maxlen: 24
156.228.93.0/24 maxlen: 24
156.228.94.0/24 maxlen: 24
156.228.95.0/24 maxlen: 24
156.228.100.0/24 maxlen: 24
156.228.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84339 (0x14973)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 2 08:49:56 2025 GMT
Not After : Apr 11 08:49:56 2025 GMT
Subject: CN=67ecfa38-c1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:76:79:ec:6f:89:08:35:0a:04:d9:42:27:50:
6a:c7:90:9f:40:6c:2d:cd:cb:05:89:6e:16:25:4c:
3c:ff:69:37:b8:3f:66:7a:94:9d:fc:f2:7d:42:f7:
fb:b2:f6:d1:51:1c:30:77:74:e5:12:d9:e3:cb:51:
5a:3c:dd:68:5e:6a:d6:26:90:d2:be:cc:a3:76:39:
11:53:ed:7e:3c:4e:6c:4a:fb:be:c2:64:63:52:22:
76:91:e5:58:bd:4b:5d:2c:c9:0f:b9:16:b1:b2:72:
79:d7:ab:2a:6d:19:48:c5:ba:1f:fb:e9:69:75:63:
04:6e:5f:23:0e:12:1a:65:bf:7f:55:b0:df:6d:4b:
be:0f:b1:9b:ea:8d:23:ed:29:2c:08:56:d9:18:7b:
44:f1:8f:a9:59:c8:52:72:2a:af:2d:ff:27:2d:a5:
e3:cb:05:05:bd:e5:37:2f:ac:45:90:39:bd:76:4d:
5d:32:a5:b0:77:83:95:22:5c:e7:3d:e5:9c:2a:5f:
61:77:94:fd:db:7b:4c:46:c4:19:01:10:5d:c6:70:
a1:72:f1:c3:0f:f4:24:1c:1b:a7:1c:6c:52:b3:fa:
b4:ef:b6:04:55:06:d5:65:32:7d:52:c4:06:b6:f6:
04:32:93:c7:8c:21:1f:d2:5c:19:f7:4c:ff:87:9a:
f7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E6:68:27:E5:75:D0:9A:4B:CD:6C:EF:06:CB:92:29:03:D5:E9:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75B795E20F9F11F0ACED45A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.76.0/24
156.228.88.0/23
156.228.91.0-156.228.95.255
156.228.100.0/24
156.228.118.0/24
Signature Algorithm: sha256WithRSAEncryption
10:a5:0b:60:65:8b:05:8e:a3:0e:aa:fa:b4:7b:a7:55:08:af:
17:9e:b5:21:15:3e:9f:2f:91:1f:9e:fc:6b:ef:6e:e5:c1:da:
9c:34:3f:c2:43:4b:cd:c1:93:36:f6:70:c5:7f:26:22:3f:18:
c9:4e:96:a1:e3:75:d3:8a:17:ba:9a:97:de:62:c0:91:8c:29:
d5:be:70:8c:ae:5f:1e:e5:ed:da:b4:b3:1b:42:46:ac:75:58:
58:38:6f:65:60:8a:33:7d:68:0d:59:3d:8e:dc:96:c8:ff:0a:
f1:c4:c9:95:db:90:64:9f:d0:93:21:9a:80:8f:37:0f:52:3f:
e9:9d:18:a4:f2:24:2c:54:7a:03:af:a7:c9:50:04:37:d0:3b:
ae:d6:95:83:da:81:00:27:74:cd:9b:5b:d2:77:d7:ea:6b:59:
76:b1:78:aa:cb:b2:6f:65:54:2f:2c:bd:aa:2a:17:b9:e3:5b:
90:0c:de:e3:59:e9:61:77:f4:a2:31:65:c5:8a:07:23:93:25:
ec:83:ab:5a:4a:4e:24:03:27:f5:de:6e:6c:de:dd:84:16:05:
85:68:ad:d5:db:f8:f4:0c:1d:5a:e8:89:23:64:3f:ba:23:a1:
87:68:9d:c4:c7:c6:b4:f6:77:31:cd:0d:00:49:aa:06:53:a8:
18:3b:fb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:56 2025 by rpki-client