Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBA76EDA108911F0885314AB762E951A.roa
File: FBA76EDA108911F0885314AB762E951A.roa (raw, json)
Hash identifier: +nz8imXyUH3ZyMWpY+n/g2TQj9VyCMtbVyL62PmMYh0=
Subject key identifier: B8:51:6E:17:64:2E:B2:E2:2A:A5:43:F2:93:BD:D6:01:AF:E8:EB:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0149EF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBA76EDA108911F0885314AB762E951A.roa
Signing time: Thu 03 Apr 2025 12:48:47 +0000
ROA not before: Thu 03 Apr 2025 12:48:43 +0000
ROA not after: Fri 18 Apr 2025 12:48:43 +0000
asID: 39600
IP address blocks: 156.232.80.0/21 maxlen: 24
156.235.80.0/21 maxlen: 24
156.238.136.0/21 maxlen: 24
156.252.8.0/24 maxlen: 24
156.252.9.0/24 maxlen: 24
156.252.10.0/24 maxlen: 24
156.252.12.0/24 maxlen: 24
156.252.13.0/24 maxlen: 24
156.252.14.0/24 maxlen: 24
156.252.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84463 (0x149ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 3 12:48:43 2025 GMT
Not After : Apr 18 12:48:43 2025 GMT
Subject: CN=67ee83af-c3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:52:3e:08:50:9b:cc:35:23:77:a8:ac:a0:95:
3e:6f:0b:a8:4c:c2:97:c3:6c:5c:c4:b7:26:65:0e:
7d:07:02:00:63:f4:4f:5d:42:2b:61:25:1c:4c:1c:
05:7c:64:d7:95:a4:bd:2a:f4:19:1b:6e:b8:d2:ac:
71:52:d1:ba:9c:19:44:60:91:b9:90:ff:7d:69:66:
ec:3d:44:1d:1f:a0:68:da:83:08:ce:e0:a8:81:4c:
b3:1e:dd:d5:7d:34:54:2c:a0:f5:14:a5:b6:8e:6d:
aa:b2:b6:3e:a8:cc:2d:2c:a7:98:d8:02:6c:a3:83:
e4:1d:dc:79:59:ec:71:67:49:2b:d8:28:89:70:8c:
ae:db:85:bf:23:e7:ba:96:f1:06:72:76:bc:c7:6f:
2b:50:99:cf:c7:6b:8d:25:a1:db:99:15:c7:bc:79:
c1:2b:65:b1:bd:62:66:93:d3:50:b6:4d:c0:1b:9f:
b8:f5:5a:c0:3e:6e:c4:37:eb:ce:73:7e:6e:6e:9a:
f7:95:f5:c6:4f:5c:1a:07:f3:31:60:8c:a8:d4:af:
93:e5:be:eb:72:9b:eb:24:e9:a1:51:d3:6c:52:e5:
f3:ed:6d:09:d9:0d:b8:64:6b:31:25:12:e2:6c:93:
04:51:25:1e:a2:5e:c7:76:12:fd:34:c3:dd:89:f8:
c3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:51:6E:17:64:2E:B2:E2:2A:A5:43:F2:93:BD:D6:01:AF:E8:EB:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBA76EDA108911F0885314AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.80.0/21
156.235.80.0/21
156.238.136.0/21
156.252.8.0-156.252.10.255
156.252.12.0/22
Signature Algorithm: sha256WithRSAEncryption
79:d7:d9:1b:8e:06:27:15:d0:48:c7:b0:25:0a:c5:4e:15:91:
f1:3d:0c:db:15:ff:56:4d:a3:a8:27:48:91:dc:f2:65:24:4e:
a5:1f:92:e2:9c:32:5d:89:ba:f3:8f:36:9e:ae:59:68:4c:57:
83:e0:7b:c7:8e:d1:61:7f:20:d9:8c:07:06:af:d5:6c:9d:21:
21:1c:57:c1:53:bb:9f:26:66:bf:1c:b7:cd:ca:56:52:ec:6a:
c2:5f:d2:5a:fc:db:1c:53:3a:85:02:90:cc:5b:1e:d2:68:0c:
9f:f4:ae:d4:31:f5:53:2f:38:81:ae:56:76:e5:2f:5f:57:17:
80:a5:8b:ea:39:50:d2:a1:98:d5:20:f1:25:14:ff:83:24:15:
fc:cd:fe:7c:e9:14:b1:2e:06:71:94:1f:2e:d7:50:ca:bf:59:
5a:19:9c:a6:05:67:f3:4d:f3:7c:9c:58:b2:d8:7a:4e:56:1c:
34:18:df:15:85:88:91:e8:b1:d1:ef:50:43:46:a0:ef:7c:01:
8d:f7:b1:1e:fc:e8:5c:4d:9b:b0:12:0f:74:5b:c1:87:b5:dd:
bf:4a:25:d4:15:b8:41:42:40:73:f6:dd:45:31:11:ce:0b:b6:
3a:af:f1:1d:53:22:42:8d:d2:87:ed:ed:42:be:1a:62:5f:2d:
f6:dc:ee:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:12 2025 by rpki-client