Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D0A7F6225FA11F084252E88DAE4EC9C.roa
File: 9D0A7F6225FA11F084252E88DAE4EC9C.roa (raw, json)
Hash identifier: G4cGJ8GOukzNZp3jACKmvy2Jx2LV1zawH+7Rk7fan3M=
Subject key identifier: F6:C9:4B:B4:FA:5D:34:A5:95:71:9B:4C:1A:43:45:CA:9D:08:F5:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0150CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D0A7F6225FA11F084252E88DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 19:37:56 +0000
ROA not before: Wed 30 Apr 2025 19:37:51 +0000
ROA not after: Wed 26 Apr 2028 19:37:51 +0000
asID: 17561
IP address blocks: 156.237.109.0/24 maxlen: 24
156.237.110.0/24 maxlen: 24
156.237.111.0/24 maxlen: 24
156.237.112.0/24 maxlen: 24
156.237.113.0/24 maxlen: 24
156.237.114.0/24 maxlen: 24
156.237.115.0/24 maxlen: 24
156.237.116.0/24 maxlen: 24
156.237.117.0/24 maxlen: 24
156.237.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86221 (0x150cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 19:37:51 2025 GMT
Not After : Apr 26 19:37:51 2028 GMT
Subject: CN=68127c14-0714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:6c:1a:73:65:9b:99:83:c2:f3:c3:aa:da:
ea:d6:b4:75:cc:36:5f:05:52:b6:53:06:6e:da:0d:
ba:04:a1:51:06:ea:a4:1a:5f:e9:02:99:4b:bd:3b:
bf:39:51:86:49:2c:b4:c4:01:24:b5:21:47:5c:ad:
e8:36:52:ff:75:fe:62:b2:ef:7e:5b:a4:1f:dc:82:
35:53:af:2b:49:ac:f5:ee:7f:37:b4:0d:7a:27:52:
ca:60:a0:d0:06:b4:76:9a:77:4c:1c:68:b9:e2:5e:
f4:a4:6f:6f:fb:17:52:e4:05:25:6e:be:10:4a:8b:
c2:3c:c2:47:f6:0c:97:af:eb:1c:88:24:54:8c:53:
cd:ce:e7:7e:e0:79:5a:51:bd:7a:2b:06:0a:8c:42:
83:4e:3d:c9:ac:68:90:e2:53:ef:dd:ab:38:78:a4:
92:f4:1e:99:41:b8:da:58:ee:3e:bc:2a:cb:e1:5d:
23:d5:f1:93:54:18:94:62:9a:8b:14:1c:20:d8:d5:
ef:99:79:bc:d1:bc:3d:41:45:a3:1d:6f:4c:e3:4d:
95:0e:0f:8d:b7:e7:a3:14:ca:d5:76:88:ba:be:21:
2c:33:9b:4c:25:d2:b0:7c:0f:a7:ac:0f:60:dc:e2:
9b:0c:ab:69:7a:41:b5:e1:56:b9:63:ce:58:83:10:
81:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C9:4B:B4:FA:5D:34:A5:95:71:9B:4C:1A:43:45:CA:9D:08:F5:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D0A7F6225FA11F084252E88DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.109.0-156.237.118.255
Signature Algorithm: sha256WithRSAEncryption
28:c4:c2:aa:91:bb:e4:2e:c3:0d:62:28:cb:74:d7:60:e8:65:
39:3f:16:c9:69:cc:7b:ff:fc:a5:d2:78:45:d3:56:7c:fc:e4:
79:cd:ce:58:a7:23:c8:1d:fe:68:6e:1b:8e:fb:31:79:fe:0c:
f4:c8:aa:13:5b:55:f9:7a:51:33:b0:52:8a:34:be:2d:62:0b:
6f:9c:02:14:d2:66:ac:29:d1:13:57:be:33:df:e7:54:c6:7d:
8e:67:cc:7a:2a:8d:91:c4:39:11:a8:49:48:e4:59:d0:67:40:
58:a0:e4:5a:b3:cb:2d:7c:4f:e2:9f:9d:05:6a:0c:48:5e:cc:
74:02:e3:d6:8a:30:98:04:92:d0:0a:43:5a:2e:0f:2f:a4:4c:
20:2d:d1:5b:93:87:fd:8f:99:eb:68:1b:51:f2:89:cb:9b:c2:
57:e9:2b:e0:92:72:b5:7a:cd:05:df:ba:70:1d:01:a6:b9:d8:
25:33:a7:10:b5:fc:63:f3:1a:49:b5:8c:d9:28:42:e8:8e:39:
03:65:87:33:48:cb:0a:dd:e3:a7:05:ef:87:dc:c8:4b:72:ef:
ab:fc:84:eb:96:2a:67:17:36:a1:ef:db:24:03:9f:f3:60:a3:
14:46:d9:2b:d8:13:17:b9:44:60:59:03:9f:a7:4a:99:92:46:
14:93:b6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:00:29 2025 by rpki-client