Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B9F5F0425ED11F0A3A229AEDAE4EC9C.roa
File: 1B9F5F0425ED11F0A3A229AEDAE4EC9C.roa (raw, json)
Hash identifier: D2igtQuDwQjHWbWzf634Mq/92YAmjhuqPfj9EX5avBA=
Subject key identifier: 9C:AA:E2:88:E9:7E:48:A3:A1:94:9A:AB:4B:3A:06:59:38:40:2B:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0150B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B9F5F0425ED11F0A3A229AEDAE4EC9C.roa
Signing time: Wed 30 Apr 2025 18:01:15 +0000
ROA not before: Wed 30 Apr 2025 18:01:10 +0000
ROA not after: Fri 14 Apr 2028 18:01:10 +0000
asID: 17561
IP address blocks: 156.237.182.0/24 maxlen: 24
156.237.184.0/24 maxlen: 24
156.237.185.0/24 maxlen: 24
156.237.189.0/24 maxlen: 24
156.237.190.0/24 maxlen: 24
156.237.192.0/24 maxlen: 24
156.237.193.0/24 maxlen: 24
156.237.194.0/24 maxlen: 24
156.237.195.0/24 maxlen: 24
156.237.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 16:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86193 (0x150b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 18:01:10 2025 GMT
Not After : Apr 14 18:01:10 2028 GMT
Subject: CN=6812656b-c53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cb:11:93:37:95:6c:bd:8b:4c:be:79:55:5a:
93:59:ea:75:d8:d5:41:6f:7a:7b:c7:b3:bc:cc:aa:
e5:dc:5c:59:52:42:83:34:2e:12:1a:28:c8:b1:9e:
c1:f6:83:90:83:62:ff:5b:f1:68:a6:05:1f:04:94:
34:5b:9b:b0:38:b8:d2:6c:c9:56:5f:aa:05:9a:e2:
1e:f0:18:f4:b9:2e:02:64:7d:68:92:3e:69:dd:55:
45:0d:ea:9a:2e:ad:d6:18:37:a2:51:de:52:49:b0:
e0:36:1b:67:4f:f5:4a:d9:d7:1e:3b:16:bb:88:21:
b9:94:a7:04:f5:bd:c9:a2:58:8b:8e:8d:c7:d7:53:
37:d6:61:62:91:86:1b:f9:8e:02:4a:9e:c7:b2:9e:
9b:dc:53:1c:8d:68:68:e4:cb:98:b0:ed:34:b8:49:
50:77:90:01:a8:94:01:50:e4:f8:e5:ff:cf:36:61:
82:98:d0:a5:73:1b:fe:51:d1:1d:43:ed:85:9c:01:
fc:69:c1:73:c4:17:04:56:66:9b:75:3e:92:0e:d5:
90:d5:f4:10:bf:b9:37:2f:f9:25:c6:be:11:2c:8a:
88:69:a5:16:21:c8:27:38:93:f6:43:9a:9b:c9:71:
a9:31:af:a0:93:ef:66:45:8d:0b:ec:bb:4c:ff:55:
38:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AA:E2:88:E9:7E:48:A3:A1:94:9A:AB:4B:3A:06:59:38:40:2B:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B9F5F0425ED11F0A3A229AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.182.0/24
156.237.184.0/23
156.237.189.0-156.237.190.255
156.237.192.0/22
156.237.197.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:b7:4a:75:8a:9b:a8:19:4d:96:3d:66:38:31:91:df:e7:3c:
2d:73:c1:f8:fe:13:de:a3:ed:29:57:39:9f:a7:b8:a4:c9:87:
04:4a:25:c0:1d:83:c6:4b:0d:68:83:c9:a3:36:7f:1e:13:a7:
d2:c6:2f:1c:71:dd:8f:d9:69:e0:1e:43:e0:00:40:24:c7:5b:
ed:83:9e:f1:5a:60:fd:37:7f:6f:71:eb:25:c7:59:6d:d1:6c:
08:fa:8c:94:9f:37:1a:dd:62:08:00:f1:23:9b:32:b9:91:db:
06:4b:36:29:f1:d8:ec:c7:27:d5:73:70:1e:4a:29:99:18:2c:
49:5d:87:39:5c:f5:de:94:21:0f:86:57:f7:fb:2d:1b:e0:33:
9a:31:63:f4:13:93:e3:42:5c:23:95:82:48:72:43:cd:39:9c:
32:e6:30:42:41:57:c7:21:c1:d4:ba:22:10:ad:cf:bb:40:f0:
65:f7:15:80:5c:1a:b7:bb:85:f7:02:f4:ff:85:13:45:7f:a5:
47:be:72:1a:9c:51:1f:20:82:28:03:94:ff:50:02:b4:08:f9:
9c:9d:2c:2a:54:1f:39:e3:58:b3:26:91:24:35:3d:2d:90:ff:
c6:9c:6f:51:7b:57:08:2b:df:13:83:87:92:d9:47:0f:11:08:
9a:7e:c6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:42:15 2025 by rpki-client