Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D94AEE6260F11F0A644808DDAE4EC9C.roa
File: 1D94AEE6260F11F0A644808DDAE4EC9C.roa (raw, json)
Hash identifier: sITpQdUr4WCTFiKsU3kUrVHEq2IfJQZCAZXAmBdCOE0=
Subject key identifier: A5:9E:AA:4C:AA:0A:69:FB:93:32:BE:59:5D:FE:78:D7:4E:C6:12:31
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0150F7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D94AEE6260F11F0A644808DDAE4EC9C.roa
Signing time: Wed 30 Apr 2025 22:04:41 +0000
ROA not before: Wed 30 Apr 2025 22:04:37 +0000
ROA not after: Fri 28 Apr 2028 22:04:37 +0000
asID: 17561
IP address blocks: 156.232.172.0/24 maxlen: 24
156.232.173.0/24 maxlen: 24
156.232.174.0/24 maxlen: 24
156.232.175.0/24 maxlen: 24
156.232.176.0/24 maxlen: 24
156.232.177.0/24 maxlen: 24
156.232.178.0/24 maxlen: 24
156.232.179.0/24 maxlen: 24
156.232.180.0/24 maxlen: 24
156.232.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86263 (0x150f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 22:04:37 2025 GMT
Not After : Apr 28 22:04:37 2028 GMT
Subject: CN=68129e79-a35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:4b:56:b2:e1:a8:72:cf:62:b1:82:6e:8c:
d9:79:bb:2c:28:f4:ce:d5:a3:77:e8:20:c0:13:f7:
25:97:8d:92:ea:48:12:12:85:56:15:f6:3d:6c:7f:
24:58:14:14:a3:52:21:c1:ad:6c:2e:44:6b:cb:84:
db:3c:f9:db:4c:29:bf:8d:04:73:82:76:5e:37:73:
5d:13:61:d1:4f:8b:db:a7:f6:2c:d0:25:07:33:24:
b7:c8:37:68:44:3a:e7:0c:82:a5:4a:54:8f:90:69:
f7:6a:da:a2:73:66:b3:85:4c:4e:34:a9:4b:95:87:
c7:a1:ab:9a:65:ba:a6:a4:30:e2:8e:ea:16:de:aa:
f6:fd:d3:2f:b9:f2:70:57:7e:ec:82:82:23:cd:19:
c7:77:53:26:15:1e:b5:89:ca:9a:c3:eb:5a:55:10:
83:97:c8:a4:3f:90:7f:0c:c1:82:ee:b4:c3:ba:18:
4f:08:f7:c9:d8:5e:6b:3c:01:d7:00:ae:8d:61:b5:
ae:ff:7b:26:3f:92:8c:cb:63:cf:b7:bd:49:75:25:
fd:1f:42:bc:f6:e2:66:32:9b:59:02:2b:78:87:c0:
67:fa:39:f4:28:64:13:20:0a:96:0c:30:16:7b:f1:
98:b2:eb:85:04:90:96:6a:48:fb:39:04:e7:80:4d:
01:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9E:AA:4C:AA:0A:69:FB:93:32:BE:59:5D:FE:78:D7:4E:C6:12:31
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D94AEE6260F11F0A644808DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.172.0-156.232.181.255
Signature Algorithm: sha256WithRSAEncryption
b7:31:9a:2f:ed:cb:1a:8e:f9:38:b3:c6:23:7f:53:5f:a9:0b:
7f:f8:49:c5:b6:81:c0:69:c7:7c:6c:26:e9:22:e5:b9:62:3d:
5d:db:6f:56:fc:b5:03:e0:fd:60:1b:3c:d1:04:de:5c:b4:49:
3f:8f:a7:14:05:a0:9c:1f:ad:68:34:44:3d:58:63:e8:e5:a3:
4e:6f:82:3e:3f:f6:5e:17:65:ed:6f:ac:76:92:07:3c:ec:53:
f1:0e:33:ae:41:67:22:cc:4e:db:d3:fb:f3:3c:80:db:1b:ee:
10:4f:f3:d6:b6:18:1a:3a:33:0d:9f:4d:3a:fe:bc:e7:d9:a1:
78:50:a1:49:ac:59:18:fd:1c:1f:d4:d0:fb:bb:f1:5c:68:b1:
74:ca:20:07:3e:25:6d:20:87:07:08:e2:10:3a:b1:b9:86:64:
4a:4f:e0:1a:b7:6d:30:d5:03:68:9d:f6:bc:87:7f:41:38:98:
11:1b:4d:be:9a:8f:2e:13:b4:e1:81:d8:fd:04:a5:1f:e0:3f:
89:03:2d:0c:2e:1b:b3:ed:38:be:c6:ee:a2:9c:11:93:4e:66:
5d:26:a4:fd:cf:3c:fd:0b:32:af:03:fd:a6:46:bb:9d:8c:5d:
eb:8e:11:5a:f9:fc:ca:16:b7:41:90:b2:c2:ec:16:cc:33:d3:
c4:4b:10:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:55:46 2025 by rpki-client