Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07D2532C4E7A11F08705D2C6DAE4EC9C.roa
File: 07D2532C4E7A11F08705D2C6DAE4EC9C.roa (raw, json)
Hash identifier: 9hoK6wuUeGbnwJi4OAjtTOfLrj+0kCvwqYtyUYIJYPY=
Subject key identifier: 88:20:D1:3F:45:E3:30:70:DE:4B:54:F9:7F:D4:40:04:D8:92:03:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015D90
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07D2532C4E7A11F08705D2C6DAE4EC9C.roa
Signing time: Sat 21 Jun 2025 08:30:47 +0000
ROA not before: Sat 21 Jun 2025 08:30:43 +0000
ROA not after: Sun 27 Jul 2025 08:30:43 +0000
asID: 44559
IP address blocks: 156.246.151.0/24 maxlen: 24
156.246.161.0/24 maxlen: 24
156.246.163.0/24 maxlen: 24
156.246.164.0/24 maxlen: 24
156.246.184.0/24 maxlen: 24
156.246.185.0/24 maxlen: 24
156.246.186.0/24 maxlen: 24
156.246.187.0/24 maxlen: 24
156.246.188.0/24 maxlen: 24
156.246.189.0/24 maxlen: 24
156.246.190.0/24 maxlen: 24
156.246.191.0/24 maxlen: 24
156.246.197.0/24 maxlen: 24
156.246.212.0/24 maxlen: 24
156.246.224.0/24 maxlen: 24
156.246.225.0/24 maxlen: 24
156.246.226.0/24 maxlen: 24
156.246.227.0/24 maxlen: 24
156.246.228.0/24 maxlen: 24
156.246.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89488 (0x15d90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 21 08:30:43 2025 GMT
Not After : Jul 27 08:30:43 2025 GMT
Subject: CN=68566db7-296b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:56:b7:4c:4b:d1:84:8d:a9:b8:dd:76:01:44:
78:29:c3:9a:21:74:f3:b8:9b:a6:9c:50:2e:e1:be:
f0:d2:0a:75:92:d2:94:3c:3d:e4:63:58:06:7c:ac:
20:73:b6:a0:77:34:97:55:3a:0d:75:67:90:46:f4:
72:10:e4:eb:a5:94:d4:24:cd:59:03:e9:f0:bd:1a:
74:97:63:66:f3:c4:a6:2d:c2:07:e6:d7:48:b3:e1:
21:91:71:a8:ff:10:51:c7:81:28:93:83:68:67:0c:
63:c2:4e:63:09:6c:3f:01:13:d6:33:82:db:0e:2c:
be:2a:e7:31:c8:0a:82:05:82:26:c4:3a:4b:6f:83:
93:d8:f0:52:77:1e:a6:f8:82:87:2a:05:b5:fd:c6:
78:f0:25:14:ee:24:f2:dd:28:35:ab:fd:a5:b0:ba:
f7:5d:3f:32:6b:67:cc:ec:04:64:e8:f9:03:1a:86:
03:a2:fa:12:33:22:0f:30:09:c5:a9:11:11:cf:a9:
ab:fc:a6:dd:72:57:3a:81:67:9f:7a:7f:8c:d8:e1:
04:e9:2e:1e:7f:7a:7f:b8:4a:63:1e:24:02:e3:ab:
03:59:6e:45:dc:97:96:e1:5c:39:cb:23:fc:be:52:
d6:71:d0:3c:bb:01:a1:5b:49:73:97:01:76:b0:39:
2d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:20:D1:3F:45:E3:30:70:DE:4B:54:F9:7F:D4:40:04:D8:92:03:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07D2532C4E7A11F08705D2C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.151.0/24
156.246.161.0/24
156.246.163.0-156.246.164.255
156.246.184.0/21
156.246.197.0/24
156.246.212.0/24
156.246.224.0-156.246.228.255
156.246.231.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:8a:b6:16:f7:80:14:87:a5:53:e1:66:dc:0b:d0:c4:79:83:
63:aa:64:69:9b:78:c7:ef:ad:c4:50:6a:a7:ae:a7:61:50:61:
78:84:62:01:61:d7:d7:9a:fb:3f:14:f8:45:0d:b3:83:95:e9:
a0:50:fd:0c:c7:d2:a7:15:1b:b9:41:fd:e6:c3:24:5f:e8:d5:
ff:42:b2:ff:aa:b3:05:29:7c:fa:5f:b1:26:2e:92:d4:ba:c3:
3a:06:f8:9c:59:5c:35:3e:e4:64:e2:bf:b2:01:a5:4b:e2:b0:
07:1a:13:9a:1d:62:dd:d4:f9:47:96:ff:c4:4b:9a:65:a8:e8:
b9:4b:dd:93:fb:8f:c3:7a:f7:d9:ac:6f:07:dd:a0:8b:22:26:
97:f6:f1:2f:5a:a8:36:44:31:e9:e1:f1:7b:c9:e9:53:00:32:
42:09:4a:02:0a:80:49:4d:59:20:d0:71:7b:be:f6:c7:a4:a8:
fc:05:33:7b:13:2c:70:b8:9d:bb:10:29:ae:cb:67:49:18:70:
1b:e1:6f:19:43:7c:c4:ee:8d:fe:16:5f:7f:72:7a:30:13:bc:
c5:d7:ae:78:f3:75:87:1a:54:da:b9:98:56:a6:93:77:f1:11:
33:3c:7c:9a:68:f2:91:10:f1:9b:9a:0a:22:d2:81:ba:72:54:
d4:e7:7d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:10:29 2025 by rpki-client