Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7219F26625FE11F09D2F3CA1DAE4EC9C.roa
File: 7219F26625FE11F09D2F3CA1DAE4EC9C.roa (raw, json)
Hash identifier: UvkenHRmlWuXpWm0XUNHhcJGONUf2ThaX+YKZzQHrb8=
Subject key identifier: F5:99:3E:B8:8D:91:80:04:C2:F9:94:3F:DF:0C:2D:A5:36:03:28:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0150D5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7219F26625FE11F09D2F3CA1DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 20:05:22 +0000
ROA not before: Wed 30 Apr 2025 20:05:16 +0000
ROA not after: Wed 26 Apr 2028 20:05:16 +0000
asID: 17561
IP address blocks: 156.238.150.0/24 maxlen: 24
156.238.151.0/24 maxlen: 24
156.238.152.0/24 maxlen: 24
156.238.153.0/24 maxlen: 24
156.238.154.0/24 maxlen: 24
156.238.155.0/24 maxlen: 24
156.238.156.0/24 maxlen: 24
156.238.157.0/24 maxlen: 24
156.238.158.0/24 maxlen: 24
156.238.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 01:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86229 (0x150d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 20:05:16 2025 GMT
Not After : Apr 26 20:05:16 2028 GMT
Subject: CN=68128282-b86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5d:e4:05:24:3f:19:a6:2f:3b:15:89:f0:3c:
f5:a4:44:54:e5:4c:de:e2:7b:3c:2b:5c:57:08:4a:
c6:17:d2:d8:11:87:49:4a:c7:38:c0:1d:f7:4d:61:
01:fe:f8:b1:3d:4d:a1:91:ee:21:37:98:d0:49:4c:
82:cf:39:97:56:4c:13:b9:11:18:8e:b8:08:dd:78:
2c:13:bd:03:c8:a7:2a:e2:ec:97:a6:13:4a:2c:0f:
7b:b5:d6:f9:50:07:ba:e5:48:4e:b9:dd:9f:4f:04:
ab:7e:0f:5d:58:f5:3d:d7:45:31:df:4c:26:59:d3:
8e:ec:1a:b6:05:8a:93:09:ac:1d:46:c4:a2:6e:7c:
e2:83:e8:6a:55:b1:dc:31:70:53:fa:14:3a:70:e9:
13:5b:22:c0:47:df:b9:db:c1:0b:ff:60:e1:45:44:
07:0e:b6:da:d5:e8:1b:59:16:2f:ff:b1:20:31:11:
6f:3f:7b:a3:36:2d:47:04:62:d7:cc:27:ce:2d:ef:
f2:8e:28:5f:ab:4a:b1:48:b6:cf:c9:72:2f:52:c1:
bb:a8:49:94:64:13:6b:1d:ff:bc:48:0a:d9:40:c5:
69:9d:ef:61:76:ee:0f:56:df:99:95:5c:48:0c:f6:
a1:82:aa:95:76:47:f8:d6:13:47:e4:da:48:23:b8:
52:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:99:3E:B8:8D:91:80:04:C2:F9:94:3F:DF:0C:2D:A5:36:03:28:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7219F26625FE11F09D2F3CA1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.150.0-156.238.159.255
Signature Algorithm: sha256WithRSAEncryption
3c:dd:d8:53:6b:51:dd:8e:69:72:21:b4:b6:9f:8e:84:18:1f:
09:bf:bb:da:88:b8:86:5d:44:87:65:49:9e:d9:de:47:86:5f:
2c:98:ba:08:81:85:15:f1:98:dc:72:94:03:82:51:5f:5d:f9:
e7:db:91:d0:5d:7a:8e:6d:bb:cb:3b:b5:01:7e:b4:10:bf:a1:
40:ff:fb:20:d0:21:66:5c:50:04:89:8f:8e:83:20:4e:09:96:
36:28:48:b0:c0:25:40:4e:b4:dd:b4:48:17:12:8f:2e:6a:66:
c7:0d:ab:cb:54:f7:09:15:e4:e6:04:e6:9b:56:72:f7:00:85:
e4:50:e1:d1:71:61:7d:17:e2:2d:d4:6c:81:d8:3f:93:51:1f:
b7:46:1d:c5:dc:40:fa:c6:8e:98:5d:bb:d6:c7:98:6e:3e:ce:
27:ec:7d:d1:ac:b3:5c:33:f6:00:8d:4e:20:3a:06:2f:28:ea:
c5:b6:af:8a:c7:80:30:2f:9d:09:db:cb:17:7d:20:be:e3:da:
cd:ac:fa:b1:a7:80:c7:9a:cd:85:2f:a6:06:4f:71:20:c3:9c:
81:c5:de:fe:56:b0:ca:26:39:ce:fc:a0:7d:57:ce:e3:f0:4a:
c1:dd:09:4f:c6:54:db:e6:ad:c0:18:53:56:d1:be:fe:cd:3d:
fa:bf:29:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:49:59 2025 by rpki-client