Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF2A3B3625DE11F0B11A0AD0DAE4EC9C.roa
File: AF2A3B3625DE11F0B11A0AD0DAE4EC9C.roa (raw, json)
Hash identifier: drDxdooHvReyN6mnncQucsYP3fkGPVoX9TK/iaDo5eE=
Subject key identifier: 89:07:F0:47:01:CD:10:FD:DA:1A:6D:5B:51:7F:23:3B:43:27:D9:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015093
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF2A3B3625DE11F0B11A0AD0DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 16:18:00 +0000
ROA not before: Wed 30 Apr 2025 16:17:56 +0000
ROA not after: Fri 14 Apr 2028 16:17:56 +0000
asID: 17561
IP address blocks: 156.235.149.0/24 maxlen: 24
156.235.150.0/24 maxlen: 24
156.235.151.0/24 maxlen: 24
156.235.152.0/24 maxlen: 24
156.235.153.0/24 maxlen: 24
156.235.154.0/24 maxlen: 24
156.235.155.0/24 maxlen: 24
156.235.156.0/24 maxlen: 24
156.235.157.0/24 maxlen: 24
156.235.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 16 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86163 (0x15093)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 16:17:56 2025 GMT
Not After : Apr 14 16:17:56 2028 GMT
Subject: CN=68124d38-51b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f7:20:b2:8f:88:b2:78:0e:a6:21:d3:75:c0:
7c:f2:e2:39:48:4f:00:07:c6:c7:8f:68:f5:eb:41:
a0:ec:30:de:6c:2f:73:69:64:e2:f0:c0:83:f0:6f:
2b:34:c4:a0:b2:ad:f0:92:7d:81:e4:29:6d:7e:2f:
f2:02:f9:35:2a:53:96:77:d4:ce:ca:da:dd:cd:20:
de:3e:24:6c:42:05:b0:2e:f2:72:f7:db:28:7d:fe:
cf:81:e2:9d:b4:bb:28:81:4e:3d:6d:87:f9:d8:a2:
d8:d7:90:08:d7:e1:e1:5e:ab:87:69:95:c7:0d:d3:
e9:a7:10:49:b4:d8:66:bc:78:0f:15:7c:d2:08:15:
18:da:63:81:fd:a3:8c:ee:f6:87:26:53:f0:0b:a3:
25:92:87:c0:1f:24:5d:b9:26:34:67:11:be:17:a1:
18:a1:91:f0:6f:cd:7f:32:f4:7b:3d:c5:bc:05:1f:
c5:a4:f3:7b:e9:fd:e3:8a:c5:97:9d:ae:b2:2d:c5:
a7:1e:e0:17:af:77:77:71:aa:c2:0f:aa:74:02:00:
31:01:db:54:21:8a:62:01:67:9a:68:22:f1:e8:ea:
8a:d0:11:39:a5:7a:0c:34:ca:6c:e7:81:52:c6:31:
a6:1f:e3:d2:59:e9:69:bc:d9:87:d0:d2:87:60:41:
a6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:07:F0:47:01:CD:10:FD:DA:1A:6D:5B:51:7F:23:3B:43:27:D9:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF2A3B3625DE11F0B11A0AD0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.149.0-156.235.158.255
Signature Algorithm: sha256WithRSAEncryption
80:66:36:d4:38:2b:77:31:76:80:71:b0:19:a6:1e:8c:f5:ae:
13:64:28:ce:c2:5c:93:e1:35:b4:2e:31:d3:55:78:d9:be:e9:
ce:07:92:ae:90:29:66:6f:6c:17:14:b4:ca:80:83:7f:98:d4:
9d:e1:ec:84:01:bb:41:b3:ea:89:eb:bd:de:90:d6:26:ff:b6:
b3:55:22:10:25:a6:37:6e:65:db:55:dc:f7:e1:d0:ea:06:ed:
ef:b1:df:0b:79:a1:6f:8e:ec:51:8e:ea:50:b7:27:a2:2e:24:
9b:de:d9:5a:e5:a7:f1:6c:90:5e:7a:40:0d:1d:5e:e4:88:10:
44:05:62:69:39:e7:b7:11:2a:1f:2b:91:bc:6d:04:52:6b:48:
1d:04:7d:c2:cd:e3:54:b2:b4:2a:e2:b7:fa:04:c4:59:ad:7a:
75:16:40:f6:63:7c:a4:81:1c:f3:85:05:29:0f:49:0f:52:8b:
01:e6:6c:04:cf:ec:f3:24:4c:4a:1d:e7:9f:a2:97:40:fb:c9:
ad:68:24:09:1c:f8:e6:d9:ba:ed:b4:67:ed:d1:e9:3c:ba:3d:
99:cc:db:70:b2:7b:4c:55:70:78:97:7d:8c:88:47:ec:fd:59:
7b:ea:52:c3:2a:db:b6:45:46:3d:53:34:90:10:5d:7d:0b:89:
ad:74:a9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 14:49:04 2025 by rpki-client