Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DEAF9284E7B11F09E8146CDDAE4EC9C.roa
File: 2DEAF9284E7B11F09E8146CDDAE4EC9C.roa (raw, json)
Hash identifier: nCclrjrVIXq1qi4eOdA+Y9egIp1b+qnLnHaT08dYlNo=
Subject key identifier: 74:DB:63:7E:8A:EE:0A:8A:DF:22:5E:B5:A5:2E:F4:74:10:47:B4:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015D92
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DEAF9284E7B11F09E8146CDDAE4EC9C.roa
Signing time: Sat 21 Jun 2025 08:39:01 +0000
ROA not before: Sat 21 Jun 2025 08:38:57 +0000
ROA not after: Sun 27 Jul 2025 08:38:57 +0000
asID: 44559
IP address blocks: 156.246.174.0/24 maxlen: 24
156.246.176.0/24 maxlen: 24
156.246.177.0/24 maxlen: 24
156.246.178.0/24 maxlen: 24
156.246.179.0/24 maxlen: 24
156.246.207.0/24 maxlen: 24
156.246.208.0/24 maxlen: 24
156.246.209.0/24 maxlen: 24
156.246.210.0/24 maxlen: 24
156.246.211.0/24 maxlen: 24
156.246.214.0/24 maxlen: 24
156.246.220.0/24 maxlen: 24
156.246.221.0/24 maxlen: 24
156.246.222.0/24 maxlen: 24
156.246.223.0/24 maxlen: 24
156.246.229.0/24 maxlen: 24
156.246.236.0/24 maxlen: 24
156.246.237.0/24 maxlen: 24
156.246.238.0/24 maxlen: 24
156.246.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89490 (0x15d92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 21 08:38:57 2025 GMT
Not After : Jul 27 08:38:57 2025 GMT
Subject: CN=68566fa5-c4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:76:63:bb:e4:fa:86:84:25:24:52:1d:29:2c:
da:e1:2f:04:26:dd:bc:4d:e3:8f:73:b7:80:ea:f7:
c8:4f:bb:07:ca:25:70:e5:5a:df:2f:f7:b4:ad:95:
ca:18:b2:d2:ac:34:d2:4e:16:68:3f:6c:2b:51:6b:
90:d4:ca:16:44:1b:51:24:7b:d6:80:81:9c:5c:2c:
98:74:82:ff:4c:28:ad:0e:15:72:da:1e:6e:b4:aa:
0f:4b:71:54:66:38:b5:7b:e1:34:a3:77:82:43:99:
8f:45:c9:9f:8e:25:bb:b4:ec:3a:33:54:80:a9:f9:
a7:94:90:02:d2:cd:35:f2:3b:93:3e:99:b5:30:b9:
e6:2c:83:49:97:e1:2b:29:8f:5b:29:de:db:38:6c:
2c:cf:fe:e9:6d:b2:a7:8e:bd:b1:20:75:21:26:2a:
10:5f:76:b0:f9:36:66:ea:75:fa:cc:47:9b:6b:14:
3c:f7:ea:97:c0:99:b8:e1:c3:fe:b6:b9:3b:f0:ca:
84:e8:f3:a3:e9:c8:5a:91:fa:cf:4f:52:4f:54:28:
4f:dd:95:6a:4f:c8:18:36:8c:31:cb:80:a1:7a:6b:
ff:0d:b6:ec:a9:82:0d:8e:7e:a1:c6:88:bd:08:0c:
a6:06:58:eb:5f:3d:ff:ea:e1:29:35:ce:65:cb:61:
c5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DB:63:7E:8A:EE:0A:8A:DF:22:5E:B5:A5:2E:F4:74:10:47:B4:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DEAF9284E7B11F09E8146CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.174.0/24
156.246.176.0/22
156.246.207.0-156.246.211.255
156.246.214.0/24
156.246.220.0/22
156.246.229.0/24
156.246.236.0/22
Signature Algorithm: sha256WithRSAEncryption
05:d5:1a:ee:57:9d:4e:56:df:5f:2f:d2:85:6b:5b:47:4a:68:
2c:04:4c:9f:28:cb:90:76:8b:c2:b6:fa:54:9a:8b:86:7e:a1:
fc:4c:e2:67:e9:a6:88:71:40:1e:96:d8:bb:0d:b8:79:12:92:
7c:1a:76:6b:6f:ec:8c:d6:cb:79:23:55:80:f7:97:19:e9:e8:
93:d2:38:42:ad:4f:87:ae:fa:8b:d7:ef:24:29:0c:a4:68:40:
19:5d:f2:4e:71:1d:9b:27:c2:b6:93:9a:09:00:02:fb:21:65:
01:dd:03:71:9c:cd:42:f9:e0:13:5e:8f:4d:67:2e:af:ef:78:
ad:7b:92:16:b1:2c:ac:a5:10:9a:b3:64:3d:55:4c:b3:1c:30:
2f:8f:45:f5:95:a5:87:ef:8a:48:55:5f:b9:92:8c:36:0e:9f:
1d:8f:a5:c1:f6:39:88:bf:58:e7:b8:f5:b1:11:84:2c:cc:c0:
14:18:9d:47:49:ed:37:1d:14:c4:47:e7:0a:0e:51:93:91:19:
83:00:c4:c9:74:53:76:5a:a6:dc:75:ef:bb:36:67:6a:2d:ee:
70:e2:30:df:d2:66:df:5d:ad:92:a3:aa:ef:98:32:f1:bf:64:
e5:e8:ca:7c:6b:3b:97:58:3a:71:84:3a:ba:a7:ff:00:a7:32:
0d:a5:96:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:53:34 2025 by rpki-client