Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92533168F4F911EFA15F5253762E951A.roa
File: 92533168F4F911EFA15F5253762E951A.roa (raw, json)
Hash identifier: Cuejo4bOv4n2lixh2UNNvRxofDwQd1JKLarsZSuC/Pw=
Subject key identifier: 75:87:97:E9:91:D1:BE:E2:83:98:CE:44:63:39:D3:D7:05:EB:48:09
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0139EE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92533168F4F911EFA15F5253762E951A.roa
Signing time: Thu 27 Feb 2025 10:57:01 +0000
ROA not before: Thu 27 Feb 2025 10:56:57 +0000
ROA not after: Sat 19 Feb 2028 10:56:57 +0000
asID: 17561
IP address blocks: 156.226.133.0/24 maxlen: 24
156.226.135.0/24 maxlen: 24
156.226.136.0/24 maxlen: 24
156.226.137.0/24 maxlen: 24
156.226.138.0/24 maxlen: 24
156.226.140.0/24 maxlen: 24
156.226.141.0/24 maxlen: 24
156.226.143.0/24 maxlen: 24
156.226.145.0/24 maxlen: 24
156.226.147.0/24 maxlen: 24
156.226.150.0/24 maxlen: 24
156.226.152.0/24 maxlen: 24
156.226.153.0/24 maxlen: 24
156.226.162.0/24 maxlen: 24
156.226.163.0/24 maxlen: 24
156.226.166.0/24 maxlen: 24
156.226.186.0/24 maxlen: 24
156.226.187.0/24 maxlen: 24
156.226.188.0/24 maxlen: 24
156.226.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80366 (0x139ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 10:56:57 2025 GMT
Not After : Feb 19 10:56:57 2028 GMT
Subject: CN=67c044fd-c38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f9:5a:ce:9f:8e:b6:db:65:d3:c5:5c:6d:87:
01:ab:6e:4a:53:3d:fc:5f:da:28:63:d1:18:7d:fe:
2b:07:95:9a:93:fe:b4:66:9e:d5:25:7e:88:bc:1f:
60:25:8f:b1:73:20:5f:38:66:b4:b0:58:62:de:8d:
78:42:c5:14:95:8a:7c:86:17:85:84:29:a2:8c:2a:
f5:81:0f:ea:4a:b1:db:e3:63:34:64:73:d8:7e:87:
36:31:c3:f4:43:4a:29:be:6d:cb:49:dd:b8:83:25:
8e:1f:27:d7:c3:a9:8f:b5:4d:c1:d0:09:43:6f:e0:
eb:5c:bf:7a:3c:11:83:9a:c7:1e:d2:0f:8c:50:20:
94:cf:86:dd:f3:04:0b:a5:20:e9:19:4c:c7:db:46:
79:fd:38:bb:b4:cc:1a:95:e2:bb:4c:70:1d:6d:4d:
26:9e:74:52:fa:ee:a7:b6:7c:88:fd:56:77:91:e0:
59:2e:4d:ee:cb:40:e6:95:25:77:7a:e3:0a:ca:3d:
cf:0c:92:a9:56:79:81:d1:bc:69:12:a0:04:d6:d9:
4f:77:73:db:11:17:7c:68:4c:75:19:de:12:59:ac:
5f:94:8c:f1:c4:5a:14:84:82:8c:f7:81:d5:36:3e:
a5:48:39:61:4a:22:fa:79:e2:a1:ab:ff:3d:49:96:
72:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:87:97:E9:91:D1:BE:E2:83:98:CE:44:63:39:D3:D7:05:EB:48:09
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92533168F4F911EFA15F5253762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.133.0/24
156.226.135.0-156.226.138.255
156.226.140.0/23
156.226.143.0/24
156.226.145.0/24
156.226.147.0/24
156.226.150.0/24
156.226.152.0/23
156.226.162.0/23
156.226.166.0/24
156.226.186.0-156.226.188.255
156.226.190.0/24
Signature Algorithm: sha256WithRSAEncryption
88:a4:d7:79:73:7f:98:47:a6:eb:dd:13:81:f8:d2:d5:5b:4c:
db:03:9d:72:42:ef:bd:e2:15:aa:f1:4f:80:0b:58:45:ae:0f:
33:43:51:9b:5c:dd:e0:69:cd:16:1d:de:f7:de:da:eb:2d:16:
ff:bc:a6:f8:ac:a2:ee:51:fe:a0:ca:3e:6c:81:0f:55:71:16:
a2:43:07:eb:58:76:56:68:0f:ab:19:f4:f3:7b:e4:00:22:db:
ba:9e:bd:e2:63:68:6d:e7:f9:b6:c8:f7:3a:fe:1c:b4:bf:4f:
58:c5:f8:b7:63:5b:cb:8e:5b:56:31:bb:29:86:12:21:f6:53:
c3:72:fb:52:78:1f:44:3f:47:90:08:c4:46:cd:76:26:be:a7:
36:dd:f1:49:b1:aa:ae:ac:0b:96:00:14:50:cd:70:2d:24:33:
ee:ef:9e:39:eb:4b:8e:7a:b4:13:3a:cb:41:62:35:ea:ff:6d:
29:7f:63:38:25:a8:f8:ec:13:66:46:1a:f3:c4:02:b2:44:cb:
4b:31:a6:de:f5:7a:a8:00:34:5c:d0:df:15:8b:86:7b:fb:64:
67:42:4f:80:43:bd:bf:15:b0:05:55:1b:49:3b:d0:09:24:86:
4e:42:ed:ef:46:77:b7:d8:f1:a5:bf:25:3d:8c:9c:ff:5d:bc:
b1:f0:80:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:56 2025 by rpki-client