Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B25D13BEF64A11EFB712555D762E951A.roa
File: B25D13BEF64A11EFB712555D762E951A.roa (raw, json)
Hash identifier: GLjYnzm/UhovimteaSTycsPgx3bEpj1sDy9PNUrixmM=
Subject key identifier: FD:49:FD:B8:E0:B7:9B:7E:B6:A9:E7:3F:03:12:F4:42:11:7A:0D:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013F7E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B25D13BEF64A11EFB712555D762E951A.roa
Signing time: Sat 01 Mar 2025 03:10:15 +0000
ROA not before: Sat 01 Mar 2025 03:10:11 +0000
ROA not after: Sat 19 Feb 2028 03:10:11 +0000
asID: 17561
IP address blocks: 156.248.32.0/24 maxlen: 24
156.248.33.0/24 maxlen: 24
156.248.34.0/24 maxlen: 24
156.248.35.0/24 maxlen: 24
156.248.36.0/24 maxlen: 24
156.248.37.0/24 maxlen: 24
156.248.38.0/24 maxlen: 24
156.248.39.0/24 maxlen: 24
156.248.40.0/24 maxlen: 24
156.248.41.0/24 maxlen: 24
156.248.42.0/24 maxlen: 24
156.248.43.0/24 maxlen: 24
156.248.44.0/24 maxlen: 24
156.248.45.0/24 maxlen: 24
156.248.46.0/24 maxlen: 24
156.248.47.0/24 maxlen: 24
156.248.48.0/24 maxlen: 24
156.248.49.0/24 maxlen: 24
156.248.50.0/24 maxlen: 24
156.248.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81790 (0x13f7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 1 03:10:11 2025 GMT
Not After : Feb 19 03:10:11 2028 GMT
Subject: CN=67c27a97-f3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:91:72:08:71:53:1e:19:fe:df:b0:c4:31:82:
da:5a:cf:15:da:a3:64:c6:6e:4a:ec:50:7b:79:25:
58:0b:2d:3d:ec:f3:e1:26:8c:8a:a6:ce:55:0f:51:
8f:fb:ca:c1:8c:f6:56:cc:77:4d:92:69:fc:8f:eb:
a6:56:5a:d4:30:26:8f:9d:76:73:1e:87:a7:b8:a9:
0d:92:76:cb:f3:f3:3b:4d:72:54:ba:17:58:29:b2:
64:61:c4:d1:bc:5e:87:7e:62:ed:a9:cc:5b:7b:46:
89:a6:1b:ee:f5:b3:54:56:1a:5a:48:a9:42:35:b4:
9a:3d:bd:79:9e:d2:51:f0:48:47:5a:d9:00:64:a2:
de:58:25:24:d4:ea:4c:a9:b0:bb:89:80:0d:5c:42:
17:8d:c4:34:c3:87:ef:69:06:6d:90:b3:fa:31:71:
0a:12:59:6d:e0:11:b0:eb:d3:e3:43:85:c0:93:f7:
40:0a:5f:cf:4f:19:41:17:b4:1c:41:38:c0:b2:4e:
03:66:3d:b2:13:81:db:ca:35:60:f7:83:46:db:54:
1e:92:7c:cf:48:5c:88:e2:ed:99:d0:f9:fc:2c:35:
ad:3b:35:59:25:3c:80:01:1e:15:10:1d:67:29:2b:
12:6f:49:6c:5d:2d:5d:77:50:70:b6:98:74:4c:9d:
cb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:49:FD:B8:E0:B7:9B:7E:B6:A9:E7:3F:03:12:F4:42:11:7A:0D:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B25D13BEF64A11EFB712555D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.32.0-156.248.51.255
Signature Algorithm: sha256WithRSAEncryption
7f:58:0b:b1:8c:ed:a9:b8:ee:d2:f5:3b:d0:80:e3:ea:20:df:
a1:f0:2e:f3:3b:69:fc:21:00:0c:9c:5e:42:96:28:c2:05:ff:
4a:b6:25:ba:ba:fe:a8:50:a0:05:c2:be:80:ca:10:e7:f1:a6:
5e:ca:8f:4c:2e:4a:a1:c7:2e:f9:46:3a:cb:f5:fa:29:3f:f4:
87:93:34:7e:8d:70:bd:e9:92:5d:70:9f:db:16:9a:4b:94:e9:
0d:66:c5:72:39:68:74:95:81:ab:0d:86:e5:d7:bb:e6:82:60:
a4:1d:3d:e3:b9:f5:d3:bb:16:54:21:2b:88:d8:ed:93:7e:53:
ac:57:ff:5e:03:16:60:2c:4c:a1:e2:e9:00:3b:d2:a1:da:c9:
cb:77:62:40:04:0a:6d:67:86:55:60:ac:ed:1d:cd:4d:b8:a0:
32:21:ed:fd:77:73:3e:0e:5d:ba:16:c8:d1:fa:70:ea:1a:cc:
26:9d:da:e7:b4:c1:ac:80:8e:d4:fe:ee:11:7d:14:67:a1:b3:
76:a7:32:8e:3a:f3:b8:96:81:f0:6e:73:86:d9:5d:ff:44:7d:
84:78:98:13:3b:11:b5:76:76:20:14:86:b1:0b:b3:05:c4:39:
9f:ad:10:db:c3:d1:ee:9e:ca:3d:ee:75:9d:b0:49:6c:fc:7d:
70:fd:98:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:02 2025 by rpki-client