Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EA02522260211F0AC9D86BADAE4EC9C.roa
File: 4EA02522260211F0AC9D86BADAE4EC9C.roa (raw, json)
Hash identifier: cIOh2tatcxVGjuPRlQFinFl68AaeEobcmKAZC3Sqcq4=
Subject key identifier: 01:57:EA:6B:87:8F:F6:5E:A6:10:A1:90:2F:8F:23:E1:BD:5B:1D:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0150DD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EA02522260211F0AC9D86BADAE4EC9C.roa
Signing time: Wed 30 Apr 2025 20:33:00 +0000
ROA not before: Wed 30 Apr 2025 20:32:55 +0000
ROA not after: Wed 26 Apr 2028 20:32:55 +0000
asID: 17561
IP address blocks: 156.239.136.0/24 maxlen: 24
156.239.137.0/24 maxlen: 24
156.239.138.0/24 maxlen: 24
156.239.139.0/24 maxlen: 24
156.239.140.0/24 maxlen: 24
156.239.142.0/24 maxlen: 24
156.239.155.0/24 maxlen: 24
156.242.0.0/24 maxlen: 24
156.242.1.0/24 maxlen: 24
156.242.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86237 (0x150dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 20:32:55 2025 GMT
Not After : Apr 26 20:32:55 2028 GMT
Subject: CN=681288fc-ec72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:58:b3:40:cd:3d:cc:c1:3a:30:2b:fb:87:37:
fe:ac:a4:17:72:78:06:3d:8e:d6:5a:c2:60:34:f3:
fd:5f:c1:bc:39:4c:49:d3:00:60:d5:a7:b6:46:b5:
0e:90:c9:7b:b4:90:a6:92:86:6f:16:92:15:d1:cb:
4c:5e:7c:3a:30:6a:dc:04:25:68:2e:44:c8:e8:31:
8e:51:37:6d:03:cc:ef:0e:52:11:16:e5:13:5d:1a:
ec:cb:f4:80:fa:35:2c:f1:2c:e4:e1:98:8d:bb:c9:
3b:fb:ae:0c:62:16:af:12:f9:ff:ce:ee:6e:26:e8:
1b:ab:70:70:6a:79:88:7d:73:fd:69:14:04:cb:27:
d3:0f:84:64:e9:86:9b:84:94:67:f2:68:6a:b2:a4:
9b:7a:ab:da:e3:65:54:86:67:0c:0b:78:6a:e0:a5:
0f:3c:7b:72:a9:e3:09:a3:45:d7:24:ba:8e:2c:29:
85:8a:73:04:48:5a:5f:53:1f:15:84:6a:fe:23:cc:
43:40:2f:34:43:0d:19:cf:1e:3b:51:12:dc:04:d0:
66:e2:83:7a:81:e4:e3:bb:3a:76:d3:4e:5e:93:ce:
c5:73:d0:bd:e1:3f:54:b1:7b:c6:c1:ea:b1:c2:10:
ef:b5:13:ef:b4:f6:b6:51:3c:d6:d5:06:d3:9a:fc:
62:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:57:EA:6B:87:8F:F6:5E:A6:10:A1:90:2F:8F:23:E1:BD:5B:1D:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EA02522260211F0AC9D86BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.136.0-156.239.140.255
156.239.142.0/24
156.239.155.0/24
156.242.0.0/23
156.242.28.0/24
Signature Algorithm: sha256WithRSAEncryption
80:00:42:04:40:d4:3d:f6:0c:5f:2b:26:10:84:56:0d:b9:74:
87:1b:ff:5f:63:3a:c5:e7:37:29:fb:1a:10:74:b8:97:7b:02:
ec:d1:f7:1e:d6:fc:8a:dc:b5:ad:74:76:c4:5f:f3:a2:1c:d0:
3d:8b:c9:ed:7c:7c:3c:97:6d:cf:7e:e3:13:8b:7b:90:77:f5:
7d:d6:e4:e5:83:ef:c6:02:1d:58:81:12:6e:8f:b0:09:75:3d:
6b:81:05:cc:6b:f6:58:d6:fd:af:5e:ec:8d:24:55:ec:4e:c1:
c3:da:9f:e2:e5:ce:7a:fe:66:db:8d:99:93:23:fe:10:5c:3d:
c0:da:5a:69:e0:19:6a:2d:1b:6a:57:15:de:c2:cd:39:89:6e:
d9:17:be:af:56:cf:0d:3b:ae:42:e4:b9:42:11:c9:28:0d:49:
45:c9:1c:2b:94:f7:16:5e:3c:97:b8:62:8d:05:a1:de:0e:49:
d5:02:37:f5:ae:5b:f1:2b:ce:ee:79:bd:6a:92:f9:49:d0:33:
fb:51:dc:73:d1:0a:02:ab:f2:62:c7:f6:f7:88:45:d1:58:8f:
45:88:60:21:71:20:30:19:c1:e8:67:99:29:2c:cd:32:fa:2c:
75:18:10:7f:77:e6:bb:f4:cc:82:9c:c8:79:c6:a3:37:2d:98:
3b:e3:8c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:02:56 2025 by rpki-client