Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF01FAD60CDE11F0A9906166762E951A.roa
File: AF01FAD60CDE11F0A9906166762E951A.roa (raw, json)
Hash identifier: pEJSqVbT9hoGUyC0QX04IgGWhit+1Uf27QDXQS7U1ls=
Subject key identifier: 31:8C:0A:54:5E:56:A2:CB:C1:FB:EA:B8:ED:11:8C:63:C1:8D:C9:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014925
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF01FAD60CDE11F0A9906166762E951A.roa
Signing time: Sat 29 Mar 2025 20:45:01 +0000
ROA not before: Sat 29 Mar 2025 20:44:57 +0000
ROA not after: Mon 07 Apr 2025 20:44:57 +0000
asID: 135377
IP address blocks: 156.232.92.0/24 maxlen: 24
156.232.93.0/24 maxlen: 24
156.232.94.0/24 maxlen: 24
156.232.95.0/24 maxlen: 24
156.232.96.0/24 maxlen: 24
156.232.97.0/24 maxlen: 24
156.232.98.0/24 maxlen: 24
156.232.99.0/24 maxlen: 24
156.232.100.0/24 maxlen: 24
156.232.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84261 (0x14925)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 29 20:44:57 2025 GMT
Not After : Apr 7 20:44:57 2025 GMT
Subject: CN=67e85bcd-87c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0a:0f:f9:1d:d9:e9:8b:a2:5b:00:73:8f:85:
10:41:56:7c:7d:48:16:37:1e:d4:9e:d4:9f:74:6e:
96:74:f0:ca:8c:78:dc:f9:a9:51:7a:5f:f9:cf:56:
f1:bb:0d:6c:83:24:be:4f:85:63:b8:7f:e1:39:fd:
6c:0d:e1:4f:be:66:4b:57:8f:b8:da:bb:47:f8:8e:
9e:33:b9:70:fb:a8:32:60:ca:58:23:09:52:20:76:
6e:ae:70:c9:8a:30:a8:79:60:0f:3c:8e:57:23:3a:
c7:92:10:51:50:32:56:05:5f:fa:3b:79:24:5b:c2:
2c:10:39:ae:9d:dc:8f:e6:f4:8a:a5:6e:bf:47:0e:
da:b7:0f:31:7d:06:d7:54:8c:3c:51:d5:4a:b2:2a:
d3:ac:c0:6a:6f:55:62:64:61:b9:eb:ee:5f:75:b8:
86:15:4e:4f:c1:41:2c:b5:80:d3:0f:8b:91:2a:e0:
dc:a5:5b:56:e4:12:86:14:d9:9b:89:ab:4e:29:a4:
0b:72:4d:3c:72:f8:a0:82:47:ee:93:ee:34:f6:47:
5c:6f:23:34:df:d4:43:3c:94:9b:4e:51:1a:c8:49:
6b:b4:cb:b1:92:d7:0f:f7:db:7f:58:c0:06:a8:4c:
a1:a4:26:1b:39:d6:c1:67:e1:0e:9c:7d:12:74:4f:
59:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8C:0A:54:5E:56:A2:CB:C1:FB:EA:B8:ED:11:8C:63:C1:8D:C9:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF01FAD60CDE11F0A9906166762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.92.0-156.232.101.255
Signature Algorithm: sha256WithRSAEncryption
0a:cd:f9:c5:80:d6:f6:42:00:61:93:cc:e2:6a:ee:c7:b7:e2:
94:16:e9:eb:30:4a:c0:8a:6e:bc:a4:a9:75:24:b9:c2:ec:9e:
cf:1a:a8:db:52:98:c0:43:8f:f3:3d:09:6a:f9:a5:19:87:8a:
91:6d:a6:f3:d5:bf:4a:09:57:96:c1:6d:ce:c8:bb:bc:76:98:
f2:51:b5:30:1f:ed:ac:33:2d:58:6e:69:d3:2a:90:a3:b9:52:
b2:a5:cc:06:30:d8:0f:10:fd:d1:e3:54:5e:9b:52:e9:e7:d5:
b6:79:3b:de:25:bc:81:26:d8:94:ec:f1:7f:4a:e0:79:bf:55:
b8:db:12:f1:fd:f9:ea:06:e3:81:ef:fe:65:73:2c:08:75:31:
75:ae:2b:00:c9:ca:7f:e4:9b:da:4f:47:62:90:59:fe:42:50:
54:7a:ca:39:83:e2:2f:e3:82:03:0b:8e:82:cb:c8:1f:95:c5:
f1:ea:59:07:c2:1e:96:26:ec:0b:e2:ae:be:4a:42:ba:a8:aa:
c0:50:7d:ef:75:29:a8:31:60:3c:95:93:40:c3:0f:7e:46:61:
89:bd:4d:fd:ed:ac:96:5d:98:df:5f:3c:ec:0e:c4:8f:55:d6:
2f:17:1e:98:fd:73:57:12:87:a1:77:c5:cf:06:5a:e1:ad:bb:
5d:43:f7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:53 2025 by rpki-client