Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49DD67C429A011F090DCE1F5DAE4EC9C.roa
File: 49DD67C429A011F090DCE1F5DAE4EC9C.roa (raw, json)
Hash identifier: 1rQwnveEUzXJjU74hOJAYxc6RFzGwDEaTtMoijWHd/4=
Subject key identifier: A8:30:22:83:4A:B0:96:38:EC:18:9E:12:4E:26:C1:1F:91:6B:79:18
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015217
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49DD67C429A011F090DCE1F5DAE4EC9C.roa
Signing time: Mon 05 May 2025 11:01:26 +0000
ROA not before: Mon 05 May 2025 11:01:21 +0000
ROA not after: Tue 05 May 2026 11:01:21 +0000
asID: 984
IP address blocks: 156.242.180.0/24 maxlen: 24
156.242.181.0/24 maxlen: 24
156.242.182.0/24 maxlen: 24
156.242.183.0/24 maxlen: 24
156.242.184.0/24 maxlen: 24
156.242.185.0/24 maxlen: 24
156.242.186.0/24 maxlen: 24
156.242.187.0/24 maxlen: 24
156.242.188.0/24 maxlen: 24
156.242.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86551 (0x15217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 5 11:01:21 2025 GMT
Not After : May 5 11:01:21 2026 GMT
Subject: CN=68189a86-88c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5b:c4:c1:17:f1:ea:38:52:b6:35:9e:09:27:
a5:41:42:e7:e7:34:b2:13:5f:10:84:02:3c:75:9b:
01:14:ef:ce:2f:bc:cd:96:c5:7a:97:8d:47:01:a8:
d6:b6:1c:1b:82:6d:5e:ca:10:58:9d:0a:26:2e:7c:
4d:12:a9:58:f0:0f:48:71:bf:04:8f:4c:ae:18:77:
cd:c3:7a:e9:d1:3e:7b:0e:62:c4:95:81:86:ef:52:
19:70:de:fe:c7:0b:0f:7d:89:0d:39:4d:a8:0d:08:
70:7f:b9:4c:b7:e0:e7:85:7f:84:a7:a0:ec:46:06:
ea:49:8d:5e:22:2e:0a:e9:a8:2f:6e:31:c0:63:0a:
37:6c:a0:ac:9f:04:b5:c9:1c:88:8b:0a:d2:36:ab:
d3:66:e5:58:37:9b:dc:45:7c:58:f0:89:92:5f:ef:
c7:6e:5e:f0:d3:82:fd:7b:b9:74:4a:37:c2:9e:ca:
26:c8:db:83:60:3d:a8:f0:d6:63:bc:ab:5c:32:d2:
b1:48:e3:16:36:4f:19:7f:f9:9c:bf:9e:6c:15:6e:
c9:0a:09:f5:62:b1:0e:78:92:6f:30:60:7e:60:02:
c3:39:49:93:37:e2:03:9e:16:03:c8:c2:cc:82:70:
64:43:54:1e:93:32:41:12:85:2f:18:ed:68:32:5c:
cd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:30:22:83:4A:B0:96:38:EC:18:9E:12:4E:26:C1:1F:91:6B:79:18
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49DD67C429A011F090DCE1F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.180.0-156.242.189.255
Signature Algorithm: sha256WithRSAEncryption
a4:a7:04:e0:02:38:bc:96:93:c7:af:cb:f8:7a:3a:bd:1b:e4:
01:d1:57:7d:00:75:78:53:ff:be:18:c4:38:67:90:c4:dd:3d:
58:5e:8f:89:4d:af:8a:fa:dd:e6:82:56:67:a6:9e:fe:f0:20:
bb:d6:97:13:53:2b:1f:00:9d:67:f0:35:6c:c0:1a:a4:8c:e6:
89:af:21:a8:b2:2e:cd:42:1f:30:08:21:0e:38:6b:78:4f:a8:
5c:fb:16:73:fe:12:b3:45:27:78:fd:74:0b:fa:a6:5d:27:02:
19:33:c4:46:15:a4:f3:7a:18:fa:c5:39:56:47:f1:6a:f7:f4:
13:5a:88:5a:a2:1c:2b:57:28:5b:9c:c8:ff:40:70:8f:fc:04:
e5:3d:ee:c8:7a:98:2d:c8:10:b8:56:9d:50:24:57:bd:a8:f7:
36:df:14:18:e5:21:0c:5d:84:8c:d8:65:86:60:d4:d0:94:03:
02:14:2c:7e:81:b2:bf:b8:4f:fd:2d:d0:37:f1:fa:a6:e7:18:
63:e7:20:cf:77:52:44:ae:94:6b:09:09:13:34:47:57:bf:b9:
eb:ee:21:0a:11:18:04:fb:9f:ce:33:3d:65:e5:ea:74:c5:6d:
af:91:ee:d3:95:31:f7:aa:16:b6:92:2c:9c:49:15:3c:f6:b7:
76:02:85:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:08:27 2025 by rpki-client