Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0859F76825EF11F0BD5D41BCDAE4EC9C.roa
File: 0859F76825EF11F0BD5D41BCDAE4EC9C.roa (raw, json)
Hash identifier: /hD8AEXhZyWm5GHkXz3aK+9OfACFIfiPL2aqS0VHDKE=
Subject key identifier: DF:7B:FB:9C:AF:15:2A:75:19:F4:2F:F4:69:E8:F1:DD:FE:70:0A:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0150B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0859F76825EF11F0BD5D41BCDAE4EC9C.roa
Signing time: Wed 30 Apr 2025 18:15:02 +0000
ROA not before: Wed 30 Apr 2025 18:14:57 +0000
ROA not after: Fri 14 Apr 2028 18:14:57 +0000
asID: 17561
IP address blocks: 156.237.209.0/24 maxlen: 24
156.237.211.0/24 maxlen: 24
156.237.212.0/24 maxlen: 24
156.237.214.0/24 maxlen: 24
156.237.215.0/24 maxlen: 24
156.237.216.0/24 maxlen: 24
156.237.217.0/24 maxlen: 24
156.237.218.0/24 maxlen: 24
156.237.219.0/24 maxlen: 24
156.237.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86197 (0x150b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 18:14:57 2025 GMT
Not After : Apr 14 18:14:57 2028 GMT
Subject: CN=681268a6-f9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ab:23:38:5a:1b:fe:d0:0c:55:00:f4:bb:fd:
93:2e:8a:cb:dc:19:f1:90:c2:c3:2c:7f:29:e6:0e:
b6:3f:08:ca:69:51:a2:f6:57:0b:87:bb:de:05:a4:
52:e7:04:50:1a:c5:bb:3c:83:9b:d0:01:03:6c:98:
5b:0a:c5:dd:72:ba:99:45:f6:c4:60:69:25:d6:2c:
fe:2e:c9:50:38:d3:d2:20:44:85:b6:53:75:ed:06:
5d:13:e6:06:8e:72:15:37:30:18:90:e6:22:3a:a6:
23:fc:7e:a0:3c:3b:a6:6d:7a:4a:b2:8d:5c:5f:a9:
5f:d3:33:82:59:73:4f:08:b3:af:05:87:86:4c:e7:
2b:01:bc:c4:c5:73:ca:40:75:b7:34:11:11:38:1e:
13:9b:bb:3e:c5:31:dd:54:6b:db:f6:0a:77:34:6e:
b4:cc:61:4f:36:87:11:f1:19:57:d5:8c:81:51:15:
c7:24:c6:22:75:84:d9:30:60:5d:ff:a9:12:15:ad:
0a:05:4e:ad:55:de:df:91:7b:42:86:7f:ee:7b:52:
be:18:99:71:fd:94:d7:d0:38:48:86:c0:34:46:b5:
69:49:ba:3a:9f:ba:fd:36:b9:d1:74:58:e2:7e:e5:
cf:76:3e:ed:54:54:85:1b:b7:59:6c:06:a4:df:dc:
61:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7B:FB:9C:AF:15:2A:75:19:F4:2F:F4:69:E8:F1:DD:FE:70:0A:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0859F76825EF11F0BD5D41BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.209.0/24
156.237.211.0-156.237.212.255
156.237.214.0-156.237.220.255
Signature Algorithm: sha256WithRSAEncryption
25:04:77:30:27:23:d1:59:78:3f:fe:e9:25:88:a8:37:02:32:
d0:0c:0e:b4:b5:9c:58:95:eb:72:fe:df:d7:4d:22:d0:6d:e1:
ad:17:0c:a8:79:01:20:01:03:3d:e6:7a:fb:50:13:be:9e:92:
dd:96:2f:20:00:7c:c5:d3:59:ba:c1:ac:f2:59:95:ae:ca:88:
25:67:9e:b1:9d:43:60:40:4c:f7:0c:e0:b3:a9:40:7a:78:87:
bb:35:92:45:d8:76:ac:6f:02:01:29:aa:a7:25:15:74:b2:9a:
fd:89:e3:03:d4:c3:cb:9e:e4:16:40:35:8d:5a:fe:aa:98:97:
61:43:f0:c2:af:7f:08:22:ed:4b:9a:89:3a:32:dc:c7:1a:ed:
2d:c2:50:e8:fe:0e:61:35:7e:df:01:0a:bc:0d:79:02:85:04:
cd:20:9e:6e:f5:1c:ca:0e:43:53:12:01:22:5c:f6:1a:ce:06:
12:48:17:f1:4e:1d:56:b7:d2:11:30:13:91:7c:50:e8:84:45:
27:5c:93:b7:77:48:b2:7f:db:15:1f:c5:93:da:fb:21:96:13:
59:66:70:25:c3:58:89:a2:bb:d7:93:3e:08:4a:d5:ae:64:b2:
ff:dc:e8:ad:10:44:da:3c:87:39:0f:06:1b:38:57:43:0d:aa:
1e:8e:63:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:39:44 2025 by rpki-client