Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFB6FB12356811F0B17D0ACDDAE4EC9C.roa
File: BFB6FB12356811F0B17D0ACDDAE4EC9C.roa (raw, json)
Hash identifier: FB/9eUPA4HOgFZhyhWrwWJdGn1uPv/gv4Y6GV0TRut8=
Subject key identifier: 39:C7:26:9C:00:B6:EC:1D:19:37:6A:A1:A9:DC:BF:AC:86:59:85:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015636
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFB6FB12356811F0B17D0ACDDAE4EC9C.roa
Signing time: Tue 20 May 2025 10:54:06 +0000
ROA not before: Tue 20 May 2025 10:54:01 +0000
ROA not after: Fri 27 Jun 2025 10:54:01 +0000
asID: 44559
IP address blocks: 156.246.169.0/24 maxlen: 24
156.246.170.0/24 maxlen: 24
156.246.171.0/24 maxlen: 24
156.246.172.0/24 maxlen: 24
156.246.173.0/24 maxlen: 24
156.246.175.0/24 maxlen: 24
156.246.181.0/24 maxlen: 24
156.246.183.0/24 maxlen: 24
156.246.193.0/24 maxlen: 24
156.246.194.0/24 maxlen: 24
156.246.213.0/24 maxlen: 24
156.246.215.0/24 maxlen: 24
156.246.216.0/24 maxlen: 24
156.246.217.0/24 maxlen: 24
156.246.218.0/24 maxlen: 24
156.246.230.0/24 maxlen: 24
156.246.233.0/24 maxlen: 24
156.246.234.0/24 maxlen: 24
156.246.235.0/24 maxlen: 24
156.246.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87606 (0x15636)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 10:54:01 2025 GMT
Not After : Jun 27 10:54:01 2025 GMT
Subject: CN=682c5f4e-4e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9b:7e:56:ec:c2:38:43:ee:90:c0:3b:cc:a3:
72:76:a2:10:69:2e:7a:fa:15:1b:04:79:ed:5c:84:
ce:e6:4f:22:af:68:69:92:68:91:60:4e:14:c8:f9:
ab:0e:73:c8:b7:45:c8:eb:fb:fb:d7:30:c0:b9:77:
8b:c7:b5:c3:cb:9e:f9:8c:90:98:42:f0:9b:10:94:
fa:5d:8e:36:ab:f0:32:d7:d9:eb:e9:c3:6c:92:12:
44:99:94:d9:0d:67:09:98:58:5b:06:7b:ea:52:4f:
a0:fd:91:79:af:f7:82:05:2a:c5:64:81:4e:12:d2:
80:96:25:9d:5d:76:4e:c5:9e:95:dd:75:81:c6:35:
04:c7:83:90:5f:bf:54:e1:fe:62:81:f8:0c:5c:35:
49:1c:66:3c:fa:22:22:fc:59:60:75:25:87:cc:93:
e2:77:f1:55:a0:51:15:85:b1:43:c6:94:49:b1:b0:
90:bd:5c:bb:73:a4:65:58:c9:ae:20:29:82:58:3b:
23:9e:5f:3b:46:e9:9b:69:ca:9f:b3:d3:8c:fd:d2:
28:ee:7e:3c:e2:98:b7:73:b5:8c:5d:4e:36:65:36:
f7:7d:64:3f:3d:f7:74:f5:a7:31:77:57:6b:92:4f:
18:92:e6:8c:03:52:54:c7:8c:70:77:9d:31:5e:1f:
ea:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C7:26:9C:00:B6:EC:1D:19:37:6A:A1:A9:DC:BF:AC:86:59:85:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFB6FB12356811F0B17D0ACDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.169.0-156.246.173.255
156.246.175.0/24
156.246.181.0/24
156.246.183.0/24
156.246.193.0-156.246.194.255
156.246.213.0/24
156.246.215.0-156.246.218.255
156.246.230.0/24
156.246.233.0-156.246.235.255
156.246.255.0/24
Signature Algorithm: sha256WithRSAEncryption
35:a0:54:a2:29:76:00:87:af:69:09:cd:a4:85:75:07:8d:24:
19:e9:5a:35:32:f6:b7:5f:6b:4d:d4:4d:c3:60:91:ad:4e:1e:
d6:34:e3:c2:9d:3f:d4:a3:0a:67:9e:9c:66:8f:e1:af:c1:0e:
f7:93:30:85:ee:52:04:56:27:10:75:35:70:e9:b0:3d:ae:a7:
ae:af:b5:08:67:3d:ed:24:ad:c2:41:29:e1:85:c9:83:b9:0e:
07:c8:73:2c:3a:54:b3:cb:d0:0b:63:4d:6f:af:3d:76:5c:90:
f6:7b:a3:6d:94:cb:6b:02:24:04:77:c9:6d:37:33:2d:9c:0b:
32:d1:7d:f6:b9:50:52:0e:df:b2:45:da:e2:36:53:c0:9d:c6:
ab:fe:5f:1a:e1:5a:88:a1:40:bb:08:5f:d5:13:5e:6b:b8:06:
6b:82:f9:73:05:24:0f:51:8b:d9:7d:91:e6:14:e4:77:19:8a:
65:05:34:ca:80:ca:b0:ff:3b:37:c8:37:58:4a:8e:19:4b:7a:
ef:3a:13:5d:2f:88:5e:83:6b:73:11:03:f5:63:b6:0c:d5:56:
35:c4:5a:7a:c6:ce:7e:b3:b7:d3:1a:62:84:aa:48:85:15:b2:
ab:c7:7e:82:1c:05:1a:c5:ed:50:2d:89:b4:bc:0c:b0:54:c5:
c3:44:fa:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:35:12 2025 by rpki-client