Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB2EBE264E7E11F097391AE3DAE4EC9C.roa
File: AB2EBE264E7E11F097391AE3DAE4EC9C.roa (raw, json)
Hash identifier: euRxPoTTBYZSXbLNM00mLYGMTpOcHC5XIE1QdAcaoV0=
Subject key identifier: 43:E0:22:9E:E2:C1:E1:54:EA:70:08:E6:9B:83:5B:E4:A1:4A:EB:C3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015D98
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB2EBE264E7E11F097391AE3DAE4EC9C.roa
Signing time: Sat 21 Jun 2025 09:03:59 +0000
ROA not before: Sat 21 Jun 2025 09:03:55 +0000
ROA not after: Sun 27 Jul 2025 09:03:55 +0000
asID: 44559
IP address blocks: 156.246.169.0/24 maxlen: 24
156.246.170.0/24 maxlen: 24
156.246.171.0/24 maxlen: 24
156.246.172.0/24 maxlen: 24
156.246.173.0/24 maxlen: 24
156.246.175.0/24 maxlen: 24
156.246.181.0/24 maxlen: 24
156.246.183.0/24 maxlen: 24
156.246.193.0/24 maxlen: 24
156.246.194.0/24 maxlen: 24
156.246.206.0/24 maxlen: 24
156.246.213.0/24 maxlen: 24
156.246.215.0/24 maxlen: 24
156.246.216.0/24 maxlen: 24
156.246.217.0/24 maxlen: 24
156.246.218.0/24 maxlen: 24
156.246.219.0/24 maxlen: 24
156.246.230.0/24 maxlen: 24
156.246.232.0/24 maxlen: 24
156.246.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 01:15:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89496 (0x15d98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 21 09:03:55 2025 GMT
Not After : Jul 27 09:03:55 2025 GMT
Subject: CN=6856757f-47c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ea:fa:0c:98:d6:2a:40:9b:64:fb:f4:32:62:
3e:02:c3:2a:a2:8a:1d:f6:b4:e7:1f:30:a4:5a:50:
9d:37:e0:41:5c:df:d4:2d:c1:b3:68:80:a8:4f:11:
f5:92:7b:5a:97:13:9b:4f:f5:0d:36:ec:87:b3:5f:
09:ac:32:a6:f9:c0:e6:12:bb:22:d0:f7:b7:dd:78:
cd:c8:ce:e2:2f:55:e2:b5:d4:e4:56:f4:52:d0:b5:
a4:f0:7a:ff:fc:79:a3:16:fa:25:20:c0:9f:bf:24:
e4:05:43:6d:1d:4f:46:d4:57:76:61:77:bf:8e:d5:
bb:88:e7:28:bf:72:a9:f0:32:bf:54:83:de:eb:4a:
ce:0b:8b:8e:6c:4e:4c:54:37:94:cb:c8:fc:d2:e8:
a7:ea:81:ae:c3:7b:11:19:f7:97:43:30:1f:65:73:
30:4f:89:76:54:48:70:87:25:f7:9f:b2:24:d1:df:
49:40:ba:97:0c:42:d1:ad:5b:8c:2b:c3:af:d0:82:
58:76:1d:a4:da:fc:ab:3e:42:d7:83:76:cc:c0:bd:
b2:a4:49:33:e7:6b:28:c6:e9:19:17:85:e2:c9:3b:
aa:e2:56:a9:3f:c6:b9:ab:c2:76:f1:f9:03:c4:eb:
43:72:cf:39:03:64:05:6c:9d:d2:00:4b:dd:fd:73:
12:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E0:22:9E:E2:C1:E1:54:EA:70:08:E6:9B:83:5B:E4:A1:4A:EB:C3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB2EBE264E7E11F097391AE3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.169.0-156.246.173.255
156.246.175.0/24
156.246.181.0/24
156.246.183.0/24
156.246.193.0-156.246.194.255
156.246.206.0/24
156.246.213.0/24
156.246.215.0-156.246.219.255
156.246.230.0/24
156.246.232.0/23
Signature Algorithm: sha256WithRSAEncryption
92:eb:85:b4:2f:29:8c:72:4a:7a:93:dc:c9:9e:75:7f:28:8e:
44:f4:0d:55:96:2b:4e:92:34:ff:da:77:24:79:a0:44:b2:59:
11:c7:3f:f3:02:94:1f:22:0e:31:6e:3b:cf:0c:05:38:4c:b3:
3d:87:2e:51:f0:45:27:7c:41:86:e1:f1:7d:dc:77:d8:ad:c8:
24:a9:97:ca:f2:67:b7:f2:d2:97:cc:0d:8e:3c:ac:3f:81:2b:
19:36:b0:87:4c:41:c6:d3:b5:b4:23:23:60:2d:97:fa:d0:4e:
79:ad:24:7a:f1:99:68:88:ef:cb:87:e6:c9:83:85:f2:12:16:
1c:87:70:b9:49:9d:9a:b6:35:ad:f1:2c:d6:d9:0f:23:dc:03:
a9:a6:07:0c:70:fd:8e:b1:b3:46:82:b5:14:57:15:90:74:e8:
1c:4f:87:23:4e:c8:5a:0f:c9:59:05:82:47:db:87:fd:00:42:
ba:bc:f6:60:af:a3:f2:71:4c:f9:b3:f4:ac:91:54:0c:42:ec:
36:61:cd:7f:5a:4f:23:23:94:fa:80:9f:be:8c:d6:c5:36:cd:
4a:61:7a:51:6a:fe:50:c1:cb:65:dc:a8:ed:c2:6f:92:aa:72:
98:12:75:0c:40:ce:88:2d:00:19:88:7f:63:0b:fa:f8:d8:29:
e6:ac:e6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:02:21 2025 by rpki-client