Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26F1E33C25EC11F091682DA7DAE4EC9C.roa
File: 26F1E33C25EC11F091682DA7DAE4EC9C.roa (raw, json)
Hash identifier: n/rfT43UQYYqDHu1W0WuATJ2C7nJRKTO6pKFfjnDJxQ=
Subject key identifier: 44:0F:B2:B7:FB:3F:37:3A:32:31:C9:1D:6F:88:40:CB:0D:8A:99:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0150AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26F1E33C25EC11F091682DA7DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 17:54:25 +0000
ROA not before: Wed 30 Apr 2025 17:54:20 +0000
ROA not after: Fri 14 Apr 2028 17:54:20 +0000
asID: 17561
IP address blocks: 156.237.171.0/24 maxlen: 24
156.237.172.0/24 maxlen: 24
156.237.173.0/24 maxlen: 24
156.237.174.0/24 maxlen: 24
156.237.175.0/24 maxlen: 24
156.237.176.0/24 maxlen: 24
156.237.177.0/24 maxlen: 24
156.237.179.0/24 maxlen: 24
156.237.180.0/24 maxlen: 24
156.237.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86191 (0x150af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 17:54:20 2025 GMT
Not After : Apr 14 17:54:20 2028 GMT
Subject: CN=681263d1-d055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a8:3f:e7:80:91:98:46:ce:fa:c1:62:e5:b3:
f9:8b:85:63:89:93:9e:bb:13:da:95:60:2d:eb:4d:
1e:62:b9:21:07:de:a9:37:02:45:e6:1c:39:0a:56:
12:9c:71:30:05:1d:bc:56:4c:25:f8:e5:cf:57:15:
67:56:0a:37:08:10:c1:61:58:6c:fa:b6:40:ab:d2:
04:c4:71:1c:25:0a:7f:27:2c:85:15:4f:b2:9c:42:
f7:6a:ec:5c:c6:df:c4:70:f1:e1:bc:b3:e4:d2:ee:
51:67:ca:c0:02:de:d7:a3:83:34:c4:7c:4c:9c:76:
42:f2:89:2e:f3:20:3f:5d:40:4b:2c:73:fb:91:b4:
04:f8:f5:27:a2:5d:8e:e4:d4:3c:17:83:4b:d0:b0:
43:f5:65:b2:37:58:28:59:34:d6:ea:d4:f4:81:b2:
cc:13:7a:e2:25:71:75:57:e2:98:4e:de:67:06:ba:
97:ed:6a:ba:98:36:bb:6b:36:bf:a4:e2:a2:49:6a:
8d:55:d5:4a:14:4a:78:c8:cc:a4:02:5d:b9:84:c1:
d2:d6:d5:8a:13:da:79:fa:cb:93:80:8d:f7:ab:5a:
1e:2c:74:20:5e:db:04:b6:62:54:19:06:90:01:a7:
5d:1a:8b:f5:62:f6:4c:13:c4:0b:49:e8:ce:bd:f5:
eb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0F:B2:B7:FB:3F:37:3A:32:31:C9:1D:6F:88:40:CB:0D:8A:99:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26F1E33C25EC11F091682DA7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.171.0-156.237.177.255
156.237.179.0-156.237.181.255
Signature Algorithm: sha256WithRSAEncryption
99:54:49:cf:bc:f9:e3:8e:70:97:28:b5:a9:e1:6e:35:17:f4:
ae:5b:e8:7b:ef:f0:6e:1e:27:a0:21:65:48:b2:2b:cd:38:b3:
a7:b9:57:62:0c:9b:1b:6e:1d:99:e0:02:28:f4:ef:82:19:25:
f2:d6:2f:de:71:d5:7b:85:62:0b:b9:78:19:90:29:9c:c5:60:
83:2f:df:20:30:26:35:2e:9b:b7:55:32:44:0e:92:7a:e5:75:
24:f5:a2:2b:e5:f3:ad:3f:88:aa:fd:c3:dd:da:ee:f7:30:70:
0b:b5:ae:ce:a8:65:98:d0:f5:12:0f:10:76:69:da:a6:bb:a3:
aa:ba:76:1d:8f:f8:14:b5:25:da:7a:35:cb:1a:11:f0:80:9c:
d0:02:91:10:22:5c:b3:3d:93:15:ad:91:65:83:6e:75:f7:e7:
d2:40:ae:7b:31:14:91:1b:7b:e7:2b:52:2a:4d:e0:6a:b1:36:
f2:26:9c:4c:c4:e9:ee:02:d6:48:fc:5f:8e:48:8b:c6:53:d8:
16:f9:3d:8a:24:7c:81:1a:d8:2c:9d:42:98:77:8d:46:65:d6:
7b:27:33:d3:05:70:10:57:a0:fe:44:6b:f6:06:0e:9a:a2:3d:
f9:5f:a7:03:8d:25:0b:2a:c4:7a:da:2b:48:e9:ed:a3:82:d9:
44:d0:9d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:32:09 2025 by rpki-client