Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DEAC719C07B311F09D1E5050762E951A.roa
File: DEAC719C07B311F09D1E5050762E951A.roa (raw, json)
Hash identifier: l7Sebw29//x5ZC7K2vyCGQ9OIlblm2XgmuSFgD0VHHA=
Subject key identifier: DD:18:23:34:60:69:F0:D1:2E:B8:03:6C:4C:DB:A4:14:E0:1F:31:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0147B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DEAC719C07B311F09D1E5050762E951A.roa
Signing time: Sun 23 Mar 2025 06:55:57 +0000
ROA not before: Sun 23 Mar 2025 06:55:53 +0000
ROA not after: Sun 04 May 2025 06:55:53 +0000
asID: 203020
IP address blocks: 156.225.6.0/24 maxlen: 24
156.225.69.0/24 maxlen: 24
156.226.7.0/24 maxlen: 24
156.230.63.0/24 maxlen: 24
156.232.4.0/24 maxlen: 24
156.232.5.0/24 maxlen: 24
156.232.108.0/22 maxlen: 24
156.232.112.0/20 maxlen: 24
156.233.2.0/23 maxlen: 24
156.233.4.0/22 maxlen: 24
156.233.24.0/22 maxlen: 24
156.235.0.0/24 maxlen: 24
156.235.24.0/22 maxlen: 24
156.235.30.0/23 maxlen: 24
156.235.32.0/20 maxlen: 24
156.235.64.0/22 maxlen: 24
156.235.68.0/23 maxlen: 24
156.252.224.0/22 maxlen: 24
156.252.228.0/22 maxlen: 24
156.252.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83896 (0x147b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 23 06:55:53 2025 GMT
Not After : May 4 06:55:53 2025 GMT
Subject: CN=67dfb07c-42e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c1:75:63:cf:b2:63:4d:2e:e2:31:c7:67:f1:
81:76:fb:f9:0d:bd:3f:e4:c1:4f:a3:36:ea:66:36:
e2:b0:fd:68:d7:7a:97:a4:96:da:36:a6:d6:1d:de:
fd:a5:ba:9e:26:79:e9:43:51:b7:54:4e:1f:cc:7b:
21:a2:7a:c0:3c:df:5c:b5:eb:12:9d:87:0d:6a:30:
ae:bd:fa:a5:02:d7:25:96:2d:51:90:72:b1:f7:49:
c3:aa:35:c8:7a:f4:c5:cd:18:77:fd:51:25:bb:34:
74:d6:36:31:48:98:ba:c6:68:4e:35:1c:2e:73:f1:
72:63:17:4f:2e:a9:b1:47:b9:ce:85:3f:ad:8c:f7:
f4:ed:5f:6c:c4:0e:47:9d:3f:35:86:fc:a2:40:a6:
29:9c:99:24:53:a9:da:49:dd:9a:a8:91:22:73:e6:
d9:d4:c0:cb:07:94:7a:13:8e:ce:e9:c3:ad:b4:f6:
24:ea:6a:05:eb:b1:88:2d:b0:58:26:dd:ae:91:7e:
74:cb:e1:9e:e0:d1:56:cb:62:f0:e5:f0:c0:3e:4c:
36:f1:8f:35:f8:72:f4:41:1e:cb:d7:2b:15:88:79:
02:69:c4:44:ad:33:41:99:2b:96:98:7c:b3:37:ce:
f9:98:91:e7:12:6d:c1:b8:fd:97:96:cf:fd:43:fa:
40:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:18:23:34:60:69:F0:D1:2E:B8:03:6C:4C:DB:A4:14:E0:1F:31:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DEAC719C07B311F09D1E5050762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.6.0/24
156.225.69.0/24
156.226.7.0/24
156.230.63.0/24
156.232.4.0/23
156.232.108.0-156.232.127.255
156.233.2.0-156.233.7.255
156.233.24.0/22
156.235.0.0/24
156.235.24.0/22
156.235.30.0-156.235.47.255
156.235.64.0-156.235.69.255
156.252.224.0/20
Signature Algorithm: sha256WithRSAEncryption
92:82:ab:8e:37:ac:c8:82:5c:d8:d7:b9:c3:44:ac:dc:08:34:
51:d0:52:40:09:53:38:54:fd:e2:09:95:a6:0c:d4:39:e6:6b:
4f:7d:51:77:aa:6f:23:9a:70:45:43:ab:7b:1f:0c:04:00:51:
ec:bb:0b:0c:3f:d5:d8:7a:e6:a6:4a:a2:08:78:3c:9e:92:87:
d3:a7:30:29:54:d0:a6:5c:d1:8a:36:24:a6:4a:1e:46:27:d7:
90:e2:51:64:a3:b3:cc:fa:e1:8b:8b:c6:fe:8d:c2:92:5f:cd:
0a:a4:b8:c4:9a:9a:90:45:d5:9f:cc:77:9e:74:68:1d:d7:a6:
4d:d1:76:cc:0c:e1:63:15:59:fe:c5:54:7f:2b:30:47:8b:db:
c1:e9:5e:71:2d:f3:2f:23:3e:33:9e:12:25:bd:a1:55:dd:23:
a2:58:78:de:9c:1a:b3:d3:7d:11:69:2d:23:e0:f4:cc:e8:ac:
84:aa:3a:8d:07:4c:34:ff:c6:a1:71:46:2d:21:d3:23:5d:6d:
e4:32:25:06:20:ab:f1:cb:d3:9a:c6:e9:32:74:88:35:4d:5a:
48:f5:17:25:81:43:ca:27:a0:1e:98:35:63:85:e8:49:93:34:
4b:73:a3:21:56:d0:0c:e2:e2:ea:7e:34:29:ae:93:39:5f:d8:
d3:30:0d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:34 2025 by rpki-client