Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CB6F51425E011F0ABEB66DDDAE4EC9C.roa
File: 9CB6F51425E011F0ABEB66DDDAE4EC9C.roa (raw, json)
Hash identifier: wz/UsTPQERg9lkyn/eFAD5QpE58QK1XI2OejIUloc6M=
Subject key identifier: 9F:F0:F7:4C:6F:B6:81:D8:58:D7:8F:73:8F:38:96:AB:AB:CB:D3:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015097
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CB6F51425E011F0ABEB66DDDAE4EC9C.roa
Signing time: Wed 30 Apr 2025 16:31:48 +0000
ROA not before: Wed 30 Apr 2025 16:31:44 +0000
ROA not after: Fri 14 Apr 2028 16:31:44 +0000
asID: 17561
IP address blocks: 156.235.169.0/24 maxlen: 24
156.235.170.0/24 maxlen: 24
156.235.171.0/24 maxlen: 24
156.235.172.0/24 maxlen: 24
156.235.173.0/24 maxlen: 24
156.235.174.0/24 maxlen: 24
156.235.175.0/24 maxlen: 24
156.235.176.0/24 maxlen: 24
156.235.177.0/24 maxlen: 24
156.235.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86167 (0x15097)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 16:31:44 2025 GMT
Not After : Apr 14 16:31:44 2028 GMT
Subject: CN=68125074-1a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b6:07:50:77:8d:14:4d:46:dd:20:d0:57:98:
57:5a:49:d0:b0:ea:ed:a9:6c:a2:4e:f6:d4:74:16:
3e:f9:4e:04:2e:06:9f:b0:a3:ca:65:d9:6f:ba:b7:
1d:19:c4:ff:ac:fb:ad:da:8e:5f:92:9a:ab:f4:46:
eb:32:b2:74:83:0d:43:b3:c5:41:b3:3f:74:78:e3:
84:8d:fe:1c:14:e9:89:53:90:9a:5c:b9:03:94:64:
3d:7e:50:c7:4d:04:56:b6:da:75:f8:8e:49:78:28:
ae:61:55:cd:26:96:2f:62:6b:25:c6:6d:ad:5d:d0:
ac:48:f8:d0:a9:c5:c9:34:b0:d2:9a:9a:51:30:06:
74:0c:54:3d:f3:ac:92:39:0e:d6:25:e7:c5:00:00:
20:13:bd:c4:b6:53:8d:7c:01:a5:3d:06:a8:8d:10:
af:b6:09:bf:da:60:18:34:54:31:69:a2:54:75:06:
80:b7:32:4c:9c:6c:5a:92:15:8b:62:a0:03:0d:dd:
71:91:36:69:d6:99:b3:86:5e:15:3b:3b:f4:fd:de:
55:4c:72:27:6b:e3:4c:9a:64:6b:4c:04:41:96:e2:
e3:d0:11:46:30:3d:f5:b7:13:d9:f8:9a:c9:0a:eb:
c0:07:14:33:ea:fc:50:03:a0:a9:5e:fc:3d:fb:c7:
81:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F0:F7:4C:6F:B6:81:D8:58:D7:8F:73:8F:38:96:AB:AB:CB:D3:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CB6F51425E011F0ABEB66DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.169.0-156.235.178.255
Signature Algorithm: sha256WithRSAEncryption
4a:69:26:a2:56:18:b4:c1:cb:01:1f:17:13:c4:a5:17:68:64:
a4:88:f7:06:b0:43:45:4c:99:16:d2:63:18:02:76:78:c0:5a:
a6:fa:ae:1a:72:5e:0b:37:ad:b7:86:7f:c9:dd:08:31:8c:1e:
10:c6:d7:e9:a1:38:a1:b6:b9:4d:e9:e3:9b:06:db:06:28:65:
e9:85:6d:17:9a:fc:fe:74:22:6d:6e:e5:61:6a:41:23:65:05:
90:a8:09:b0:2c:48:39:65:de:ee:2e:1c:d4:0b:06:f7:26:c1:
6f:8b:ba:d6:74:bd:8f:bf:2b:c2:5e:1e:2b:04:31:7f:4c:59:
f6:cd:a8:df:7a:5d:23:55:ca:eb:8b:90:d7:8a:d0:96:3c:fe:
f2:19:0d:7d:d0:d7:40:ee:b1:ec:8d:39:2a:da:cd:af:0b:e3:
ec:e5:13:d1:fb:97:53:ba:fb:51:fe:95:c3:48:6b:4a:fd:80:
9c:5c:1f:57:ef:5e:a5:c0:b4:e2:1c:c5:79:54:c4:c7:a6:2f:
1e:98:b9:79:84:38:34:fa:f4:c0:54:03:41:72:a7:1a:c4:c7:
b0:9f:2c:b9:a9:ef:49:19:f3:18:de:51:86:bf:74:04:56:98:
52:6d:e0:16:4c:43:ee:b6:03:df:bf:3b:e1:97:b7:cf:a1:13:
6e:b1:99:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:51:38 2025 by rpki-client