Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65E22C7025E511F0A916BB7CDAE4EC9C.roa
File: 65E22C7025E511F0A916BB7CDAE4EC9C.roa (raw, json)
Hash identifier: 1GGpdBYsJXU1lkjnFmwPiII6H8w0lf8glpKRhyqyLSQ=
Subject key identifier: BE:7E:D6:7E:B8:C8:A6:06:EE:87:5B:D6:7F:75:3B:75:45:41:3A:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0150A1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65E22C7025E511F0A916BB7CDAE4EC9C.roa
Signing time: Wed 30 Apr 2025 17:06:04 +0000
ROA not before: Wed 30 Apr 2025 17:05:59 +0000
ROA not after: Fri 14 Apr 2028 17:05:59 +0000
asID: 17561
IP address blocks: 156.235.219.0/24 maxlen: 24
156.235.220.0/24 maxlen: 24
156.235.221.0/24 maxlen: 24
156.235.222.0/24 maxlen: 24
156.235.223.0/24 maxlen: 24
156.235.224.0/24 maxlen: 24
156.235.225.0/24 maxlen: 24
156.235.226.0/24 maxlen: 24
156.235.227.0/24 maxlen: 24
156.235.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 16:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86177 (0x150a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 17:05:59 2025 GMT
Not After : Apr 14 17:05:59 2028 GMT
Subject: CN=6812587c-900b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e7:b5:ce:6e:d2:86:ff:55:79:b0:da:d3:41:
33:f8:2e:33:70:2f:a5:19:64:c6:de:85:fa:49:b9:
2c:30:0a:ed:ef:19:39:70:b2:44:f9:4d:54:1b:b6:
aa:71:0c:6e:f9:a7:98:99:98:7c:27:d5:73:dc:b4:
c9:08:a0:6d:13:8a:7f:94:92:c2:f7:40:64:86:56:
46:21:4e:24:aa:94:0b:1f:55:ab:aa:e6:ca:1b:fb:
aa:2b:f7:fe:cf:e9:78:d5:78:c5:3f:3d:45:49:0a:
b5:1f:49:2b:da:cd:f9:dc:c3:08:4f:db:e6:5b:18:
ef:ad:a5:b0:78:f3:c4:9d:5c:09:7c:99:7b:99:61:
c6:3d:75:ef:1b:46:ac:c6:bd:8e:66:8a:87:da:22:
5d:b8:60:6d:9d:6f:b5:86:08:c4:f7:5a:83:56:f3:
88:de:74:be:ba:87:03:4f:9c:f7:f4:82:40:8f:10:
7a:c0:94:25:2d:52:47:d8:5e:df:eb:9c:8b:48:5f:
47:6a:61:9e:e7:93:ca:e3:99:86:27:d0:82:70:ac:
fe:e9:fa:d1:f3:0f:fe:1c:92:44:3b:d5:03:7d:de:
f0:89:6b:a7:b3:4b:b3:fa:80:5c:42:ee:01:c8:aa:
49:d7:b3:d9:fb:90:f8:76:88:85:cf:f8:8e:6e:88:
cd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7E:D6:7E:B8:C8:A6:06:EE:87:5B:D6:7F:75:3B:75:45:41:3A:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65E22C7025E511F0A916BB7CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.219.0-156.235.228.255
Signature Algorithm: sha256WithRSAEncryption
a1:85:35:1c:14:28:13:39:5e:11:0a:e0:ab:94:72:ae:89:41:
a0:6b:a5:3f:25:59:38:60:d0:70:01:60:9f:5b:a4:9f:a3:3e:
2b:24:58:8e:61:74:e6:0a:61:9f:d2:77:29:88:e9:d3:8a:51:
2d:b8:b6:24:45:40:80:aa:b2:68:35:c2:6c:86:16:79:e7:a7:
46:61:fd:0c:7c:bb:51:47:3b:8e:2a:e3:b1:04:3a:e4:b9:a4:
54:48:f9:ce:33:1e:2d:64:43:61:8f:5a:63:a8:f0:42:94:a4:
5c:04:f7:9f:11:84:8b:01:44:e5:c1:92:b6:8f:ff:f9:9a:cc:
76:9f:6b:8f:2c:6f:0b:c8:e6:69:29:03:d0:ee:69:74:67:3d:
73:64:f3:3a:70:c5:fd:00:f9:41:34:8f:e1:bd:04:5c:a7:f0:
f8:2f:9c:ab:48:f8:c8:f8:f1:c3:f5:06:33:36:76:c7:31:b0:
a1:d9:4e:8e:10:ee:18:a0:25:6f:93:4e:9d:64:7d:f3:41:1d:
be:e6:bd:5a:74:6b:04:02:a8:d1:21:be:7f:0a:e7:1a:90:f1:
cd:05:81:6c:98:8c:c1:59:19:0d:51:a8:02:92:72:84:76:62:
5e:ed:8f:55:1b:93:cb:0b:26:71:12:9b:44:54:46:3f:09:e9:
0f:db:61:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:42:09 2025 by rpki-client