Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8F7D4FE04B911F0949319A2762E951A.roa
File: E8F7D4FE04B911F0949319A2762E951A.roa (raw, json)
Hash identifier: ATZU8NkgLhIVTJGwgwDoO+E1LEd3zzaCxWc0XNCC3h8=
Subject key identifier: 43:36:44:1D:98:6E:DC:B1:5C:AE:ED:A2:8F:F8:4A:31:0B:9F:4E:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0146F6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8F7D4FE04B911F0949319A2762E951A.roa
Signing time: Wed 19 Mar 2025 12:01:37 +0000
ROA not before: Wed 19 Mar 2025 12:01:33 +0000
ROA not after: Sun 27 Apr 2025 12:01:33 +0000
asID: 44559
IP address blocks: 156.246.150.0/24 maxlen: 24
156.246.152.0/24 maxlen: 24
156.246.153.0/24 maxlen: 24
156.246.154.0/24 maxlen: 24
156.246.155.0/24 maxlen: 24
156.246.156.0/24 maxlen: 24
156.246.157.0/24 maxlen: 24
156.246.158.0/24 maxlen: 24
156.246.159.0/24 maxlen: 24
156.246.160.0/24 maxlen: 24
156.246.166.0/24 maxlen: 24
156.246.167.0/24 maxlen: 24
156.246.168.0/24 maxlen: 24
156.246.180.0/24 maxlen: 24
156.246.182.0/24 maxlen: 24
156.246.192.0/24 maxlen: 24
156.246.195.0/24 maxlen: 24
156.246.219.0/24 maxlen: 24
156.246.232.0/24 maxlen: 24
156.246.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83702 (0x146f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 19 12:01:33 2025 GMT
Not After : Apr 27 12:01:33 2025 GMT
Subject: CN=67dab221-ccb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8f:41:20:c0:20:bb:bd:5d:4a:21:fb:cd:9b:
31:5a:6e:02:2a:a9:23:9d:86:a8:4f:e8:d3:0b:e6:
5e:68:fa:41:77:82:63:3d:72:b9:55:87:ec:f2:d4:
2a:f9:10:ac:9c:42:70:70:dc:a9:82:d0:d4:72:3f:
11:c1:d5:50:73:8f:d5:9d:e0:11:56:73:3f:93:5e:
2d:2b:c2:4b:8c:1d:da:51:33:38:5f:f4:f9:ba:6e:
dd:db:09:b6:7c:e2:5e:81:0c:03:a8:96:86:38:28:
1b:12:5a:15:03:9f:46:f7:9e:96:96:82:63:48:67:
46:62:1b:5b:a2:8b:54:53:c9:97:c1:a9:6a:2c:22:
e7:ce:7c:60:c0:c8:ae:3f:64:8b:ab:5e:06:aa:7c:
b1:97:03:ce:14:9a:08:0a:93:25:77:7a:6e:99:4c:
07:f6:2d:08:be:f8:8d:4c:98:9c:0e:ba:18:92:af:
8a:d7:67:71:60:dc:d4:32:c8:78:97:92:30:1b:1f:
5f:53:24:fb:a2:8d:99:5e:c7:a1:e5:94:be:14:64:
14:61:33:f2:4b:d7:c0:67:b6:4c:c4:ad:e4:c2:18:
d9:71:77:4b:17:39:60:2a:b1:e7:38:4f:7a:6d:47:
cd:32:93:dc:4d:b3:ee:49:df:bb:ee:e0:61:b6:c0:
5d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:36:44:1D:98:6E:DC:B1:5C:AE:ED:A2:8F:F8:4A:31:0B:9F:4E:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8F7D4FE04B911F0949319A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.150.0/24
156.246.152.0-156.246.160.255
156.246.166.0-156.246.168.255
156.246.180.0/24
156.246.182.0/24
156.246.192.0/24
156.246.195.0/24
156.246.219.0/24
156.246.232.0/24
156.246.255.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:2d:45:43:da:30:dc:92:51:c7:b5:4f:dc:3c:43:4a:59:42:
f5:7d:05:f3:c2:92:e6:fa:c6:97:04:29:c3:f2:b5:da:d6:6a:
68:04:38:80:7f:2f:ae:3b:55:87:d4:05:d3:0f:2a:8d:be:62:
29:50:1b:3e:3f:6f:c1:14:ad:f2:b9:a3:7a:c9:8e:a6:86:a8:
0f:4e:6a:2a:75:8f:81:ea:25:6a:75:03:29:7e:50:1e:20:98:
e5:c0:45:1a:36:e5:88:0f:e5:25:84:66:ca:4e:a7:0e:04:7f:
05:4f:7b:d6:47:65:ea:50:91:70:bb:52:ed:ab:30:0b:ef:55:
d9:df:da:d6:94:82:90:10:5a:22:09:71:00:f6:a5:9b:38:44:
12:9d:31:03:e5:bd:56:18:3c:9c:79:aa:9c:c1:36:a3:92:b9:
c9:65:69:1e:80:8f:d4:77:95:f1:2c:10:5c:74:15:45:0e:c4:
d5:7b:45:b9:76:ea:f3:60:ac:0d:66:0c:8d:2a:27:64:bc:78:
13:db:c5:16:5b:c9:2d:bd:20:b8:0d:15:f5:42:3c:af:70:9c:
e2:75:3b:98:6d:2a:1c:ca:5e:ba:5a:a5:2f:15:0b:97:54:a9:
24:2b:23:8c:45:bb:0d:39:77:be:d7:61:be:35:7d:42:99:8c:
b6:36:30:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:08:58 2025 by rpki-client