Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAEBF724249F11F0A925AAF1DAE4EC9C.roa
File: BAEBF724249F11F0A925AAF1DAE4EC9C.roa (raw, json)
Hash identifier: qI90QvmEjbfJt38mlPraWGARKzowHQaFpHhC0RHfyDo=
Subject key identifier: 02:5F:CE:17:9D:D4:35:5B:0B:34:A6:12:5D:87:25:38:00:AE:56:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014FFA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAEBF724249F11F0A925AAF1DAE4EC9C.roa
Signing time: Tue 29 Apr 2025 02:14:51 +0000
ROA not before: Tue 29 Apr 2025 02:14:46 +0000
ROA not after: Mon 19 May 2025 02:14:46 +0000
asID: 62468
IP address blocks: 156.245.128.0/21 maxlen: 24
156.245.188.0/23 maxlen: 24
156.245.198.0/23 maxlen: 24
156.245.209.0/24 maxlen: 24
156.245.210.0/24 maxlen: 24
156.245.242.0/23 maxlen: 24
156.245.244.0/22 maxlen: 24
156.245.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86010 (0x14ffa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 02:14:46 2025 GMT
Not After : May 19 02:14:46 2025 GMT
Subject: CN=6810361b-2b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:42:ed:01:bc:1b:d6:dc:97:8b:25:d8:bf:
78:fe:91:b9:cb:d1:5a:2e:e3:9c:aa:8a:a0:f2:1a:
c7:ad:a2:f1:2a:5b:95:b7:c7:02:f3:2f:30:8b:e3:
87:22:4d:9f:8d:71:ff:3a:59:79:5b:bc:e2:46:5b:
ca:74:12:8f:bc:3e:16:ae:e1:51:84:f5:06:1f:6e:
ff:fa:79:c0:e2:72:5d:de:20:ab:54:66:74:b0:7c:
77:dc:0b:42:79:6f:65:c3:9f:80:47:2f:51:b4:a9:
c4:2c:6e:bf:67:1d:9b:cd:2a:6f:34:56:8b:bf:76:
ac:35:4b:cd:c1:89:2d:bd:82:2c:3f:97:39:cc:7f:
3c:a9:18:f2:8e:de:4a:e3:b2:2b:d5:89:c8:3f:a5:
ec:b3:13:b7:93:da:60:3e:cb:b5:23:90:ef:80:a5:
a2:26:26:d5:cf:24:46:e0:b2:dc:15:3b:a0:05:4d:
33:2a:5f:da:4e:53:2e:65:04:74:8c:ea:e8:4e:8a:
a4:33:a2:c8:7d:30:fe:8f:96:ca:c0:93:06:4e:f4:
0b:45:90:14:ab:d4:09:f7:63:6b:55:f8:87:f0:4d:
f3:ac:53:ce:f4:6e:70:72:96:3a:04:be:2c:58:fb:
da:99:f2:b6:65:f1:c0:88:71:a6:31:69:c6:14:21:
e9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5F:CE:17:9D:D4:35:5B:0B:34:A6:12:5D:87:25:38:00:AE:56:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAEBF724249F11F0A925AAF1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.128.0/21
156.245.188.0/23
156.245.198.0/23
156.245.209.0-156.245.210.255
156.245.242.0-156.245.255.255
Signature Algorithm: sha256WithRSAEncryption
a9:c3:c5:55:94:f9:a7:1c:98:2f:6a:bf:aa:65:10:4f:5b:bf:
18:6e:63:c1:5b:68:2d:96:8c:55:d2:ba:9d:7b:8e:33:f6:6e:
a1:e4:74:8b:39:92:37:17:d0:c8:43:5b:ba:11:21:d8:1b:71:
55:5d:22:d7:da:d8:ca:8e:17:eb:61:42:92:32:cf:0e:3d:b8:
99:94:31:ad:ff:f2:d6:2d:0a:f0:95:d7:ff:01:85:97:d4:32:
2b:49:4f:55:ce:66:dd:ba:67:85:74:c4:04:c5:1c:09:d8:fe:
83:49:3a:3b:c6:9b:e9:17:49:be:aa:16:83:48:13:ec:29:9b:
42:61:b7:08:6d:6a:39:2a:64:ee:d0:db:19:f5:f3:6a:3f:86:
55:ab:12:4d:bb:ff:49:b5:a1:68:81:c8:97:13:11:1b:07:a2:
1c:ff:69:35:c1:3f:23:ed:97:8e:83:5c:4b:49:a3:d4:0d:fb:
b6:90:6e:e6:26:bd:ee:cd:f8:7e:c1:1c:f7:5c:63:e5:96:a5:
8e:2a:79:33:79:21:fe:15:a3:97:f9:47:85:03:c6:37:0a:5d:
16:f9:54:ae:3e:ad:d8:2f:79:68:82:28:f7:8c:a4:12:5e:f4:
b1:1d:dc:68:c7:61:cb:0b:a9:dc:1b:45:3f:eb:7d:2b:12:f2:
90:5d:dc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:44:26 2025 by rpki-client