Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1D797120CB511F08297706F762E951A.roa
File: B1D797120CB511F08297706F762E951A.roa (raw, json)
Hash identifier: ZTpD7X7VWPZoPTWGO97cu7YRARjG8V23lSRXTbPZh+A=
Subject key identifier: B2:5E:03:33:FC:8C:A9:C1:F9:B1:47:06:15:93:E4:1C:A6:E2:61:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01489E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1D797120CB511F08297706F762E951A.roa
Signing time: Sat 29 Mar 2025 15:51:36 +0000
ROA not before: Sat 29 Mar 2025 15:51:32 +0000
ROA not after: Sun 04 May 2025 15:51:32 +0000
asID: 203020
IP address blocks: 156.228.6.0/24 maxlen: 24
156.228.19.0/24 maxlen: 24
156.228.251.0/24 maxlen: 24
156.243.235.0/24 maxlen: 24
156.253.200.0/23 maxlen: 24
156.253.202.0/23 maxlen: 24
156.253.208.0/23 maxlen: 24
156.253.210.0/23 maxlen: 24
156.253.212.0/23 maxlen: 24
156.253.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84126 (0x1489e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 29 15:51:32 2025 GMT
Not After : May 4 15:51:32 2025 GMT
Subject: CN=67e81708-c2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0c:4d:11:f6:06:ca:72:6d:7b:91:9d:a6:48:
6d:63:d7:c1:b9:3b:66:bd:9f:45:3e:ff:2f:e3:2a:
8c:bf:c8:bd:80:71:86:3a:29:ce:a9:de:27:e4:20:
3d:2e:41:ef:98:02:95:3d:90:38:b7:e4:bd:ed:f2:
f7:9d:f5:49:5d:ec:4d:7a:1c:7f:ab:df:88:6d:86:
d8:93:92:01:ba:a1:42:8e:26:67:49:05:71:c8:6a:
f0:69:99:e2:c0:d7:27:50:66:4d:98:8c:4a:12:4c:
28:b2:7e:71:e5:f9:ae:1a:98:97:9d:08:86:6f:18:
be:5d:6a:fd:ed:59:95:ca:b5:45:e4:9e:9c:6f:a2:
7f:54:ed:80:1a:f8:9f:48:b3:4f:fe:5c:cc:b2:99:
62:c8:15:5d:13:6d:45:2d:e5:69:06:c4:f6:54:61:
ef:58:64:05:10:2d:c5:9d:63:d2:42:d1:8f:dd:30:
26:8f:82:cd:19:3b:7a:fb:f8:dd:c1:fd:c5:fd:fb:
3d:c9:33:57:62:e0:58:d5:8e:18:bc:72:cc:69:bd:
f3:0f:b4:e2:b9:5d:57:43:7a:3f:e7:69:31:21:dc:
c8:54:5e:9c:72:3e:cf:4d:5f:aa:08:95:10:c4:5c:
2b:c5:db:d7:7f:19:9b:51:20:6d:0a:c6:f5:e9:7a:
08:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5E:03:33:FC:8C:A9:C1:F9:B1:47:06:15:93:E4:1C:A6:E2:61:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1D797120CB511F08297706F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.6.0/24
156.228.19.0/24
156.228.251.0/24
156.243.235.0/24
156.253.200.0/22
156.253.208.0-156.253.213.255
156.253.216.0/23
Signature Algorithm: sha256WithRSAEncryption
68:30:ec:d4:f0:38:9c:86:ce:df:9d:2a:c3:53:db:39:f3:19:
38:51:69:a6:1b:ff:4c:25:0b:29:bc:e4:73:8d:97:d4:ae:3d:
0d:6a:14:83:2c:c3:29:7a:d6:e7:1e:ff:ba:f7:f0:b0:13:4d:
2c:00:2b:b2:6b:cf:63:fb:e8:59:28:d4:c4:11:fe:27:49:83:
13:10:ca:8f:5c:27:b8:d1:7f:69:6b:6e:11:20:6b:09:f5:be:
51:d9:b8:92:39:77:72:a1:f2:97:ca:d6:1f:42:3d:31:b5:2e:
97:6b:41:61:48:ec:83:fb:6e:78:72:14:09:58:73:4a:f4:80:
ca:c0:6a:db:e9:57:e5:27:e4:d2:98:34:ae:ce:27:3c:65:b0:
c0:09:ac:fb:47:ee:db:3f:d4:cb:5e:7d:e4:8e:44:8e:c8:9c:
41:a0:8e:61:78:a2:a6:69:aa:de:27:54:6b:08:25:ba:46:f9:
16:9a:21:45:45:bb:ec:1a:b9:74:80:92:83:3e:4c:96:ba:fc:
71:dc:1d:51:9f:2f:76:a8:b9:b8:ef:10:a2:fd:92:8a:34:bb:
dc:e2:62:25:6f:bf:35:5f:ca:e7:13:8e:97:85:7e:f5:9d:ca:
75:2a:3d:7b:83:e5:82:f4:e2:16:7a:1a:d2:f6:f0:e8:c1:d0:
d7:72:52:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:32:30 2025 by rpki-client