Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA95884C25DB11F08B3B01BEDAE4EC9C.roa
File: CA95884C25DB11F08B3B01BEDAE4EC9C.roa (raw, json)
Hash identifier: yKbPGhFjXtrUh5PYVFUghOj2hebTOlPrHVCGrjdC5Ug=
Subject key identifier: F5:43:02:88:EA:A9:88:F8:A7:65:14:75:94:60:40:C7:61:25:64:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01508D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA95884C25DB11F08B3B01BEDAE4EC9C.roa
Signing time: Wed 30 Apr 2025 15:57:18 +0000
ROA not before: Wed 30 Apr 2025 15:57:13 +0000
ROA not after: Fri 14 Apr 2028 15:57:13 +0000
asID: 17561
IP address blocks: 156.227.6.0/24 maxlen: 24
156.231.7.0/24 maxlen: 24
156.235.128.0/24 maxlen: 24
156.238.19.0/24 maxlen: 24
156.245.4.0/24 maxlen: 24
156.249.134.0/24 maxlen: 24
156.249.135.0/24 maxlen: 24
156.249.188.0/24 maxlen: 24
156.249.189.0/24 maxlen: 24
156.253.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86157 (0x1508d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 15:57:13 2025 GMT
Not After : Apr 14 15:57:13 2028 GMT
Subject: CN=6812485e-1f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:66:ac:49:3d:b6:52:cf:d6:6a:b8:20:17:53:
dc:cf:0e:d4:58:e8:10:ee:cf:0b:35:62:ff:6f:a9:
23:c7:c5:b4:88:d2:5a:94:e6:ce:30:66:36:eb:f1:
a1:6d:c6:89:8d:6e:15:fd:dd:1a:01:1b:0a:a9:30:
56:7c:06:5e:f3:30:4d:37:35:67:0b:a0:e7:7b:74:
7f:18:f8:39:c6:86:fd:9e:af:bf:47:cc:33:bf:ef:
14:25:bd:9b:f3:f1:e6:35:fc:75:29:33:3e:5a:7a:
5a:7d:e3:81:47:42:22:1c:82:04:57:3b:f5:19:94:
20:a9:e2:2c:01:55:fa:58:26:7c:b2:45:fa:d8:7c:
7f:a1:e0:83:fa:85:a9:81:60:b7:7d:3f:5a:9e:db:
e0:48:6b:9d:d7:de:7f:5a:5f:eb:ff:17:f3:71:00:
7b:ba:db:18:e8:64:ac:8b:09:fa:53:65:64:bc:b1:
c1:33:0a:20:20:7e:b7:bc:ff:44:c4:7b:71:8e:12:
e1:f1:76:6e:85:1b:10:32:35:ce:36:71:b0:ec:75:
73:ef:f3:d5:d6:97:36:fc:4b:c4:5a:8c:55:d4:3a:
46:1c:1b:aa:5d:f7:78:e0:45:20:6d:74:d4:3f:1e:
7f:5d:bc:34:2a:8f:98:9b:7f:c7:fe:35:a6:d5:7f:
a6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:43:02:88:EA:A9:88:F8:A7:65:14:75:94:60:40:C7:61:25:64:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA95884C25DB11F08B3B01BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.6.0/24
156.231.7.0/24
156.235.128.0/24
156.238.19.0/24
156.245.4.0/24
156.249.134.0/23
156.249.188.0/23
156.253.153.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:5a:7e:0c:43:34:ea:37:1b:aa:69:91:06:e2:76:02:9a:1b:
3a:79:7c:f1:d8:d3:f7:73:b1:3b:0b:a6:dc:9d:f9:ca:b7:a2:
12:51:73:c5:76:ec:78:93:6d:e2:4f:90:2a:3c:15:96:63:d9:
29:67:6f:af:4d:3e:df:ac:22:7b:79:f4:26:b2:db:0e:1f:0f:
68:59:68:cf:ef:2a:22:b7:a9:17:53:e8:90:c1:3d:c2:9b:87:
fa:68:96:ad:96:a9:91:38:de:4f:ee:b5:10:7f:93:de:62:dd:
f5:b6:0e:b8:f6:f0:36:68:6c:e6:57:d9:bf:bd:32:81:0d:e3:
9c:23:d2:e8:62:9c:10:53:21:41:e2:0e:42:38:8b:c7:5e:f1:
1c:a5:cb:cd:2d:1d:1b:72:46:15:88:8a:e5:f3:71:88:2d:1a:
44:67:d3:ec:8e:54:71:ef:07:d6:fb:56:71:42:69:cd:2b:ea:
13:63:8c:27:89:62:98:79:0d:26:a9:26:4d:4a:2e:fd:26:87:
0b:3d:8c:21:4d:3e:c7:01:50:f8:3a:ab:d0:71:39:1f:bb:f2:
7f:cd:65:b7:19:ec:6a:b2:83:73:37:80:eb:5e:a7:17:70:b8:
7c:ee:f4:64:65:b1:00:96:bb:78:aa:72:ab:9f:3e:5e:06:45:
c7:0a:b0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:36:52 2025 by rpki-client