Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E255C27E24ED11F0884A8388DAE4EC9C.roa
File: E255C27E24ED11F0884A8388DAE4EC9C.roa (raw, json)
Hash identifier: w9mpPu7q6cdmm5aPTRpmwY8R23MtwGFId516unBvO5I=
Subject key identifier: A1:C6:2A:F8:19:86:5F:43:AE:07:77:FB:4A:4C:80:22:DE:32:D3:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01504F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E255C27E24ED11F0884A8388DAE4EC9C.roa
Signing time: Tue 29 Apr 2025 11:34:17 +0000
ROA not before: Tue 29 Apr 2025 11:34:12 +0000
ROA not after: Wed 03 Sep 2025 11:34:12 +0000
asID: 136970
IP address blocks: 156.236.64.0/24 maxlen: 24
156.236.65.0/24 maxlen: 24
156.236.67.0/24 maxlen: 24
156.236.68.0/24 maxlen: 24
156.236.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 07 May 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86095 (0x1504f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 11:34:12 2025 GMT
Not After : Sep 3 11:34:12 2025 GMT
Subject: CN=6810b939-6cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1d:1d:d2:05:38:ec:36:20:eb:99:5c:17:36:
9c:95:04:5a:f3:be:a9:18:86:5f:c3:a1:9a:d1:c4:
c3:8f:98:ea:12:d9:f1:fd:bd:14:82:84:e2:8a:78:
35:cd:8f:37:f2:b4:30:3f:19:39:5a:56:f1:0c:d1:
43:fb:e8:0f:36:81:d5:b5:80:92:ba:39:bb:0d:2f:
4c:59:b7:ba:46:e5:59:0a:ae:1d:8b:e3:32:2f:90:
db:c8:78:ff:96:ac:e7:84:cd:4e:be:57:d5:7b:4c:
8a:8f:93:cb:8c:5b:d0:fb:c1:76:22:69:27:7f:92:
b1:83:c5:73:a7:c9:40:5d:2b:ab:81:2d:be:ec:d5:
3e:50:0e:10:53:b4:d6:20:df:e0:74:7e:99:41:75:
df:81:66:9b:13:c9:e7:88:cf:60:5b:84:df:21:74:
9d:e1:30:c2:a4:8b:42:f6:c2:12:73:cf:9b:ff:01:
c8:8a:54:5c:50:fb:08:b9:51:44:96:91:f6:b7:73:
65:8b:21:c5:23:89:ed:b8:2c:67:b9:20:ea:d8:ad:
a5:ad:95:41:60:6d:48:07:66:15:24:fa:28:74:59:
51:0b:44:40:16:5b:f9:51:2b:c5:91:dd:36:9b:08:
8e:7a:65:3e:e9:2c:2a:59:2f:29:77:2b:8d:93:32:
5f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C6:2A:F8:19:86:5F:43:AE:07:77:FB:4A:4C:80:22:DE:32:D3:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E255C27E24ED11F0884A8388DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.64.0/23
156.236.67.0-156.236.69.255
Signature Algorithm: sha256WithRSAEncryption
a1:61:7c:0b:33:f5:bd:0e:70:ef:9b:98:6e:0d:52:46:cd:fa:
d0:e2:79:1f:2a:5f:13:f0:a2:2f:4f:c0:0c:a1:e5:ba:6a:b4:
84:7a:7a:90:1e:72:e3:2a:42:c7:28:f2:9d:57:05:b5:db:ba:
57:56:70:35:6a:d7:39:b6:82:c8:49:63:7c:74:34:d8:56:a4:
4f:16:9b:2c:0b:48:a0:c3:12:01:7e:9b:76:b3:3c:bc:59:70:
41:28:54:46:ae:c2:41:72:9b:7c:95:d3:0d:58:9e:da:1c:de:
f1:7b:48:a1:7c:82:b3:f4:80:1b:8e:71:19:f8:f7:a2:15:5c:
3d:d2:b5:e6:2b:dc:a1:ef:65:c5:99:c4:ce:b4:1e:a6:7d:2f:
53:d7:60:ec:d1:cc:d3:9b:c6:15:e5:a6:46:38:27:1d:ca:08:
db:d0:4e:8e:67:db:79:5b:c7:ac:be:c6:23:6b:3c:87:22:3c:
a0:c6:1f:d4:dc:d1:34:fd:85:ad:92:9f:28:89:b7:75:6f:e3:
e9:f5:07:a6:0e:fc:de:0a:9a:bb:21:6d:63:5c:a4:7d:7f:ee:
cf:20:46:7b:19:8a:a7:55:9f:3a:b4:3a:ec:fe:b2:7c:fc:d0:
b8:0a:8e:e1:f3:f7:b4:43:4c:37:9a:61:0e:be:58:35:97:64:
38:c5:80:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:29:58 2025 by rpki-client