Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB7E2F2E25F611F09C0A01EEDAE4EC9C.roa
File: BB7E2F2E25F611F09C0A01EEDAE4EC9C.roa (raw, json)
Hash identifier: r4dksijFlnZpu4wxbSZx/w+yrhnihpvYMehwZvBq8kc=
Subject key identifier: 8A:58:6F:E2:61:7A:AB:00:8E:46:0A:E6:B3:3B:09:A5:3B:0F:39:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0150C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB7E2F2E25F611F09C0A01EEDAE4EC9C.roa
Signing time: Wed 30 Apr 2025 19:10:09 +0000
ROA not before: Wed 30 Apr 2025 19:10:04 +0000
ROA not after: Wed 26 Apr 2028 19:10:04 +0000
asID: 17561
IP address blocks: 156.233.21.0/24 maxlen: 24
156.233.22.0/24 maxlen: 24
156.233.23.0/24 maxlen: 24
156.235.16.0/24 maxlen: 24
156.235.17.0/24 maxlen: 24
156.235.18.0/24 maxlen: 24
156.235.19.0/24 maxlen: 24
156.235.21.0/24 maxlen: 24
156.235.22.0/24 maxlen: 24
156.235.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86213 (0x150c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 19:10:04 2025 GMT
Not After : Apr 26 19:10:04 2028 GMT
Subject: CN=68127591-f932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:40:e5:f5:29:ed:a1:e9:4d:7b:18:82:d9:19:
37:87:03:36:05:48:8b:f4:5d:9e:1d:3f:ed:98:8f:
a1:bd:35:d2:c8:bf:92:40:e2:e2:39:17:2a:11:9f:
d2:2b:63:01:7b:5d:1d:96:a5:56:c8:2d:37:c9:35:
10:bb:08:be:94:c6:af:bc:69:c8:47:5e:3c:2c:7d:
36:7c:28:62:5e:c1:30:55:de:7d:66:cd:e8:0a:23:
6e:39:fa:ef:c0:53:95:05:47:c8:f8:3c:d8:72:d1:
39:ee:0c:12:f4:9b:2e:9b:6c:e6:a7:58:9f:c2:63:
fe:27:0a:38:a7:1a:19:25:18:fd:d5:65:de:c2:b3:
e3:67:72:65:3b:ef:fc:97:c0:8b:71:15:b5:ea:14:
96:29:ef:e6:9a:64:5c:f3:b0:96:42:61:09:db:61:
60:bd:3d:d4:92:94:48:7a:7a:01:d0:51:5a:06:c5:
66:71:fe:6d:5c:45:a3:b5:4d:7a:79:25:b2:85:43:
6b:0d:00:d9:9e:a4:32:ad:35:d6:af:78:d7:85:7d:
7b:23:af:d5:df:2d:e1:50:77:c1:00:a0:dd:0d:62:
1d:df:c7:d9:de:31:ef:35:94:2d:69:ca:c4:e5:24:
36:75:b2:1c:f6:81:05:98:ba:54:d1:f2:32:d2:85:
86:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:58:6F:E2:61:7A:AB:00:8E:46:0A:E6:B3:3B:09:A5:3B:0F:39:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB7E2F2E25F611F09C0A01EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.21.0-156.233.23.255
156.235.16.0/22
156.235.21.0-156.235.23.255
Signature Algorithm: sha256WithRSAEncryption
8c:e0:4c:0f:32:00:e1:c7:4a:30:94:ea:12:6c:da:13:d8:b3:
25:47:ef:11:d6:e7:04:96:96:88:04:17:0e:a0:f7:f3:91:61:
7f:ef:0c:27:b8:7b:79:8c:69:f0:e2:8a:38:d4:03:ca:f3:12:
87:61:2b:9b:fe:0f:38:7a:06:65:34:56:8a:08:c6:37:a7:6c:
58:0e:0d:5c:60:5e:f1:c6:a8:01:29:c1:3b:e8:af:14:d3:42:
21:c0:56:fd:5d:5d:74:69:d3:b0:f9:42:3d:d2:81:ba:6b:4d:
0a:bb:dd:7a:b9:35:b4:66:57:9b:57:90:12:c0:84:04:9d:e8:
da:30:93:09:65:69:7a:36:23:c2:f8:33:1f:72:57:37:48:59:
9c:79:08:72:de:74:97:c6:74:ef:31:1f:d0:be:ae:77:17:2e:
94:ab:e3:99:26:cd:05:0e:71:33:8d:16:88:03:6f:bf:cc:00:
95:de:bc:0c:22:20:60:c9:70:9e:10:13:f9:15:6c:19:d5:50:
7e:a7:e5:67:f5:0f:77:08:34:1d:d7:30:bb:02:64:fd:54:af:
85:0e:5f:f7:3c:3e:f4:c8:98:d1:bb:9a:b2:e0:ce:5d:d2:dd:
d5:6e:10:a0:fa:59:80:e9:58:e1:f2:73:7a:4a:3b:e6:23:19:
e9:1f:5e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:36:57 2025 by rpki-client