Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C3A206025E311F0862759EFDAE4EC9C.roa
File: 7C3A206025E311F0862759EFDAE4EC9C.roa (raw, json)
Hash identifier: F6YcZcZSRXiNt0qAZ2gSy/fSESZGTml0XNfUbaPt9hk=
Subject key identifier: 1E:77:A8:72:6C:8F:06:96:03:00:0A:B7:56:6D:CA:A0:59:45:D4:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01509D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C3A206025E311F0862759EFDAE4EC9C.roa
Signing time: Wed 30 Apr 2025 16:52:23 +0000
ROA not before: Wed 30 Apr 2025 16:52:18 +0000
ROA not after: Fri 14 Apr 2028 16:52:18 +0000
asID: 17561
IP address blocks: 156.235.199.0/24 maxlen: 24
156.235.200.0/24 maxlen: 24
156.235.201.0/24 maxlen: 24
156.235.202.0/24 maxlen: 24
156.235.203.0/24 maxlen: 24
156.235.204.0/24 maxlen: 24
156.235.205.0/24 maxlen: 24
156.235.206.0/24 maxlen: 24
156.235.207.0/24 maxlen: 24
156.235.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86173 (0x1509d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 16:52:18 2025 GMT
Not After : Apr 14 16:52:18 2028 GMT
Subject: CN=68125546-7eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:fd:18:75:9b:40:31:e5:db:af:85:ed:61:
ed:b8:93:d5:f2:72:1f:7f:f1:cf:dd:0f:82:4d:d0:
7b:fd:59:3c:d4:03:3b:fb:85:66:7a:f6:3d:5d:27:
c0:c6:a3:a1:66:f0:5d:4a:37:d1:e0:9d:b4:4a:5a:
27:75:53:13:9a:93:9d:08:fa:ed:5a:28:0a:2e:d7:
fb:39:75:14:1f:61:3b:3a:88:a7:90:fe:6b:a8:0d:
a4:e9:d7:a5:be:48:b8:bb:5a:bb:4b:bc:15:61:3f:
cf:e3:ef:3c:fe:a7:a1:4b:62:cc:e6:58:08:70:38:
3c:b7:be:ed:0e:8f:e6:02:4d:9a:5f:07:53:f3:70:
8c:35:28:38:bc:bf:41:23:65:03:56:ff:77:20:0d:
dd:b7:a4:3a:97:c3:60:12:09:40:b8:cb:65:af:67:
be:0b:5f:7b:5f:99:9d:d8:1a:f3:8f:be:41:24:02:
00:f4:cd:7a:9a:2c:d6:8e:ef:04:6a:c5:3f:5b:eb:
c7:28:1a:ee:b5:bc:d4:ad:14:3f:99:90:b1:3a:54:
ca:00:4a:c9:c8:65:97:29:b1:ac:77:76:4f:56:ba:
9a:aa:b8:27:5d:87:89:24:ca:9c:9c:cb:4a:03:5b:
72:62:de:4d:df:d6:50:a7:df:a6:4b:86:d7:71:5e:
1a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:77:A8:72:6C:8F:06:96:03:00:0A:B7:56:6D:CA:A0:59:45:D4:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C3A206025E311F0862759EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.199.0-156.235.208.255
Signature Algorithm: sha256WithRSAEncryption
8e:82:d6:e8:e1:45:82:8f:63:df:ca:3c:a4:65:3a:17:2d:90:
94:6b:0e:df:d9:f3:64:16:d1:af:1d:e6:11:30:cd:5a:f8:6a:
26:45:6f:55:d3:30:42:f6:a0:e6:d8:fc:25:66:fd:55:b0:cf:
e4:4a:4a:84:8c:f7:5a:61:33:ca:18:6d:35:80:c8:99:ff:de:
84:2c:7e:d2:e0:9c:c1:c9:70:f6:5d:bb:26:29:1a:70:fe:b8:
2b:fe:5d:fd:cd:a4:81:fd:67:c7:2e:5a:a1:43:ae:bd:b6:5c:
e4:10:51:43:16:aa:43:28:45:32:81:55:33:6d:ed:83:58:f5:
87:77:dc:4f:52:9d:5c:41:a7:95:61:86:11:e7:5b:45:ad:ac:
f6:c6:b6:46:3b:74:aa:c4:79:60:69:cc:50:64:de:9c:ed:96:
1c:50:c3:a7:3e:3b:9c:b6:e1:b3:37:e9:b7:fc:a6:f5:71:63:
88:e0:31:3d:bd:19:bc:44:30:6a:8d:34:4b:1d:19:84:ac:84:
99:72:52:4e:e2:b6:dc:44:9d:2e:54:f1:46:8e:4b:04:0d:a3:
0b:78:6d:b5:ce:e1:7d:7e:f6:4c:84:94:09:fe:60:d6:f9:7b:
77:9d:8b:6d:21:03:cb:16:18:1c:a7:d3:4e:9a:a7:c7:73:1a:
fd:2a:30:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:21:35 2025 by rpki-client