Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86BFB9BA25E211F0990EFBE8DAE4EC9C.roa
File: 86BFB9BA25E211F0990EFBE8DAE4EC9C.roa (raw, json)
Hash identifier: 2QGmch0XA+pdFVI7ksBtVr6NR1HSkrzOj8mBNkH+xNI=
Subject key identifier: 29:E9:5F:12:D9:64:23:9A:52:CA:F0:7A:8E:84:75:A5:61:F0:5C:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01509B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86BFB9BA25E211F0990EFBE8DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 16:45:31 +0000
ROA not before: Wed 30 Apr 2025 16:45:26 +0000
ROA not after: Fri 14 Apr 2028 16:45:26 +0000
asID: 17561
IP address blocks: 156.235.189.0/24 maxlen: 24
156.235.190.0/24 maxlen: 24
156.235.191.0/24 maxlen: 24
156.235.192.0/24 maxlen: 24
156.235.193.0/24 maxlen: 24
156.235.194.0/24 maxlen: 24
156.235.195.0/24 maxlen: 24
156.235.196.0/24 maxlen: 24
156.235.197.0/24 maxlen: 24
156.235.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86171 (0x1509b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 16:45:26 2025 GMT
Not After : Apr 14 16:45:26 2028 GMT
Subject: CN=681253aa-9b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:da:98:5f:1f:ba:ab:54:70:ad:fe:96:7f:d7:
3c:a7:7f:4d:7b:1f:38:d5:20:0d:ca:38:3e:58:23:
0b:14:e7:a2:ff:bd:f7:da:03:c3:a9:62:b5:eb:83:
9b:f9:0a:02:dd:c0:e0:cf:f2:51:cc:a3:37:2c:8d:
b9:dd:b7:78:1a:62:9a:af:28:11:42:ad:f0:8d:51:
84:94:1a:73:81:c3:03:6d:01:47:01:07:b1:9b:53:
85:8f:31:34:e3:1d:42:09:6c:b0:c4:ae:a5:6a:08:
d3:8e:c4:c0:1a:8a:ff:20:f2:43:5b:45:89:8c:d0:
03:f4:92:17:a5:0b:d5:04:7a:f3:b3:6f:81:f6:ac:
b4:6b:03:58:23:f4:3e:54:c1:7d:cb:66:e4:f6:9e:
23:74:5e:30:8f:3d:85:d9:b3:be:55:c4:b8:68:f7:
e1:c1:08:d0:f2:00:52:54:78:e9:e8:12:8f:c3:a0:
ee:f1:8d:14:86:2c:4f:70:f3:36:99:75:30:4b:2b:
47:db:94:4a:d3:63:3d:26:eb:f2:cd:6e:0e:78:56:
0a:f0:43:7a:96:5f:ee:15:a7:e4:e4:c5:a3:d6:ab:
9d:5e:0c:1a:47:f4:83:1c:c6:5a:03:6d:0e:03:69:
e0:50:76:97:96:ba:2d:7a:cf:3e:4a:5f:b5:fb:83:
12:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E9:5F:12:D9:64:23:9A:52:CA:F0:7A:8E:84:75:A5:61:F0:5C:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86BFB9BA25E211F0990EFBE8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.189.0-156.235.198.255
Signature Algorithm: sha256WithRSAEncryption
87:b1:24:af:23:e7:a5:aa:50:d4:b1:a5:11:03:c4:fa:6d:94:
28:fe:93:0e:fe:db:d2:d3:78:a5:5f:c1:45:55:74:4a:b3:e9:
dc:d1:26:6d:40:25:f7:d8:4e:2f:f7:c3:ae:fa:8e:69:9d:56:
5d:47:1c:a3:b6:b4:93:b3:e7:9d:dd:1e:c4:56:e2:50:dc:ca:
ae:e0:0c:ee:4f:8b:0a:7d:e7:42:1f:65:63:3b:e0:8b:97:56:
d3:61:62:c6:98:5d:f9:1d:cf:99:a7:84:39:fa:58:62:e6:a3:
7b:5e:56:04:b4:98:11:f3:f0:81:c9:80:e2:84:ab:3e:c9:d6:
a0:c8:d1:52:42:f3:d7:68:26:0e:56:8a:a8:a8:a1:60:2c:ba:
9c:dd:6f:99:67:15:3f:a3:12:6b:f3:26:96:35:14:de:29:8c:
cd:ea:40:49:22:37:87:1a:0c:3f:28:09:2e:54:7a:60:32:77:
03:77:85:58:1a:2f:ab:97:da:b1:99:24:3f:ae:29:a0:d6:56:
c4:59:b8:c8:9f:f7:32:e7:9c:24:9e:40:ba:bc:14:16:91:95:
95:e0:3b:1f:40:e2:e4:99:ca:c0:4a:59:de:01:61:de:7c:e3:
88:03:3a:48:c2:f8:17:4a:92:76:0e:05:a6:27:b1:83:98:b1:
e1:0b:b7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:25:14 2025 by rpki-client