Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4D3988CF4F011EF8E4A2994762E951A.roa
File: E4D3988CF4F011EF8E4A2994762E951A.roa (raw, json)
Hash identifier: cwfOw4k11nyblcZvdsdwhqTlrvMPSlmUawsAzKbpk3E=
Subject key identifier: 0B:EF:58:6C:AD:BB:AD:72:FB:8F:F4:18:46:25:AF:93:5A:C9:98:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0139DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4D3988CF4F011EF8E4A2994762E951A.roa
Signing time: Thu 27 Feb 2025 09:54:54 +0000
ROA not before: Thu 27 Feb 2025 09:54:49 +0000
ROA not after: Thu 19 Feb 2026 09:54:49 +0000
asID: 984
IP address blocks: 156.236.28.0/24 maxlen: 24
156.236.30.0/24 maxlen: 24
156.236.32.0/24 maxlen: 24
156.236.33.0/24 maxlen: 24
156.236.34.0/24 maxlen: 24
156.236.35.0/24 maxlen: 24
156.236.36.0/24 maxlen: 24
156.236.37.0/24 maxlen: 24
156.236.38.0/24 maxlen: 24
156.236.39.0/24 maxlen: 24
156.236.40.0/24 maxlen: 24
156.236.41.0/24 maxlen: 24
156.236.42.0/24 maxlen: 24
156.236.43.0/24 maxlen: 24
156.247.61.0/24 maxlen: 24
156.247.62.0/24 maxlen: 24
156.247.63.0/24 maxlen: 24
156.247.69.0/24 maxlen: 24
156.247.92.0/24 maxlen: 24
156.247.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80348 (0x139dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 09:54:49 2025 GMT
Not After : Feb 19 09:54:49 2026 GMT
Subject: CN=67c0366e-341f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a8:e4:19:9c:67:6e:19:02:b3:5a:59:e7:d9:
89:91:82:90:df:d2:0a:1a:1b:07:a1:cb:e8:72:1c:
6d:9c:9b:83:44:08:4e:03:6a:4b:48:67:7c:58:9f:
37:6a:70:ef:66:bc:8f:fe:87:73:5d:07:57:23:e7:
0c:a2:aa:a4:7a:18:40:75:42:56:b9:ba:0e:fe:f9:
af:5c:5b:9f:e4:5e:34:35:da:fe:20:a8:43:22:6e:
04:40:0c:9e:98:73:eb:58:c4:08:3b:99:25:3e:59:
3d:84:01:df:75:1f:c5:7e:bc:eb:59:36:c6:b6:22:
fa:d3:ae:a5:41:01:1d:74:48:83:5e:65:12:56:54:
7b:d8:23:a1:f9:1d:99:13:a9:0d:0b:ed:c5:ff:b1:
46:16:65:ef:02:1b:ee:ac:d9:fe:85:71:aa:f5:54:
b3:da:55:40:7c:d1:ed:ed:a2:09:f7:b9:dc:8a:06:
f3:44:42:44:ef:e4:4c:40:b8:a0:f7:67:39:67:76:
f8:45:32:0b:d2:12:5b:19:0d:e9:ec:6b:78:b4:1f:
1d:d8:13:07:25:1a:f0:ea:0a:65:f7:46:71:86:06:
07:17:0c:c9:67:46:1d:62:a7:47:30:d3:3e:10:ab:
60:25:d6:1f:a7:de:47:c6:44:21:7b:b1:cb:9a:26:
f0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EF:58:6C:AD:BB:AD:72:FB:8F:F4:18:46:25:AF:93:5A:C9:98:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4D3988CF4F011EF8E4A2994762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.28.0/24
156.236.30.0/24
156.236.32.0-156.236.43.255
156.247.61.0-156.247.63.255
156.247.69.0/24
156.247.92.0/24
156.247.114.0/24
Signature Algorithm: sha256WithRSAEncryption
02:62:c5:b4:36:44:ba:31:fd:52:f5:61:23:9b:c2:d6:08:d3:
4d:a1:3c:77:41:bd:a5:57:03:7d:ae:84:2b:f9:4c:98:f8:91:
98:04:4f:fe:46:23:a8:7f:f5:f0:1f:c2:c6:f9:a3:b0:4a:e4:
36:76:6c:a2:f1:70:c0:ae:4e:ac:b9:85:15:da:ad:b2:36:8e:
85:06:65:ec:91:86:96:31:2b:16:eb:81:3a:3a:bd:88:49:7c:
a7:e1:24:e6:7a:2f:0d:d5:b1:a2:29:15:22:ea:2b:7a:69:55:
04:7b:2e:81:71:c6:54:19:1e:7e:07:9c:00:85:e9:88:31:49:
5d:85:25:e7:50:fc:ec:aa:b5:db:47:4f:51:51:ce:93:88:69:
a8:a1:81:4d:eb:ac:9d:0d:dc:43:ce:eb:66:f4:87:21:d1:fd:
f4:44:2c:1a:cc:a3:2f:dd:b6:e5:b4:0c:81:21:ca:ca:29:13:
ff:b6:b4:49:34:ac:8c:9c:16:ca:86:6c:ac:b6:25:62:6e:40:
7d:b5:45:d5:0d:b3:5a:47:9c:79:c9:4a:03:a9:da:40:78:ec:
74:a2:68:5e:31:96:ef:c7:f7:29:04:61:dc:d1:5e:c4:35:21:
d4:0d:65:f2:76:c4:e3:a4:ba:5f:06:5c:b0:06:fe:df:3f:bc:
3a:66:37:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:24:38 2025 by rpki-client