Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E728DD6E242411F0A4ECEEC2DAE4EC9C.roa
File: E728DD6E242411F0A4ECEEC2DAE4EC9C.roa (raw, json)
Hash identifier: tCpLqk4TDIcE1dujPXdzE6067y7o6Hd4+L40isQNKRs=
Subject key identifier: 5D:EC:48:A5:6A:BE:04:5E:9E:CA:F3:84:67:A9:05:20:26:2E:B5:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014F02
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E728DD6E242411F0A4ECEEC2DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 11:35:37 +0000
ROA not before: Mon 28 Apr 2025 11:35:32 +0000
ROA not after: Mon 09 Jun 2025 11:35:32 +0000
asID: 205125
IP address blocks: 156.246.21.0/24 maxlen: 24
156.246.31.0/24 maxlen: 24
156.255.8.0/24 maxlen: 24
156.255.9.0/24 maxlen: 24
156.255.10.0/24 maxlen: 24
156.255.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85762 (0x14f02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 11:35:32 2025 GMT
Not After : Jun 9 11:35:32 2025 GMT
Subject: CN=680f6809-344e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:29:7d:a6:09:f0:fb:ed:ed:7d:0c:54:28:bc:
3d:f1:7c:80:b5:bd:d2:2f:4a:6c:9a:ab:cb:13:95:
3c:47:9a:ae:c1:48:b4:e0:61:4f:c0:64:60:21:b6:
11:c5:d9:40:0c:e1:db:c1:5f:c9:05:82:f8:c0:50:
ff:0a:07:a1:e7:cd:b2:ff:83:a9:ad:27:b1:6f:b6:
90:2e:63:95:a9:00:cf:41:b6:27:27:8d:38:c9:b7:
06:21:71:5c:e1:a3:11:f3:36:06:35:9e:5e:2d:55:
70:d7:4d:4d:f7:08:a5:44:8a:d0:53:a2:b6:18:31:
b4:ea:8d:cf:fd:93:76:b1:40:56:8e:ce:b1:f8:58:
e2:86:00:61:16:5b:97:e3:1d:3a:14:34:d0:15:c8:
7d:a5:98:b7:4a:da:eb:a3:a5:dc:f3:e3:5a:b0:6e:
50:7c:a4:fd:90:be:0a:d7:e5:9f:94:4c:9e:35:e5:
07:d5:5f:13:28:fa:80:5f:84:ae:bc:a8:18:04:8f:
11:bc:eb:3e:2b:fe:52:4e:0e:ad:d4:d4:be:64:84:
4f:9a:35:fe:c0:9f:44:90:2a:ce:36:cb:cb:86:a2:
17:60:0b:99:86:eb:bc:0e:38:d7:96:3b:a9:bf:45:
62:f1:8a:30:78:4f:41:6e:90:0c:52:86:22:91:ee:
e1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EC:48:A5:6A:BE:04:5E:9E:CA:F3:84:67:A9:05:20:26:2E:B5:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E728DD6E242411F0A4ECEEC2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.21.0/24
156.246.31.0/24
156.255.8.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:25:12:c6:b8:cf:79:bd:54:c5:a0:5e:ce:f0:af:b6:ca:0a:
1b:7c:92:87:64:9a:d2:7b:47:4e:c2:9c:ab:f3:5e:03:41:20:
2d:eb:b3:bc:b0:68:7d:d1:da:db:68:bf:6b:cb:ca:96:95:7a:
ef:33:72:85:37:27:c4:99:65:0c:d7:5c:21:f9:5e:cb:51:bc:
a3:a6:16:f5:a1:7b:11:60:d8:02:81:de:64:53:8c:ef:31:c3:
01:1e:f9:e9:b7:a4:7b:06:c4:0e:cc:73:d1:bf:1a:3d:ee:38:
5f:b3:f8:ac:af:80:ba:59:d1:e7:26:9a:62:11:37:61:52:c9:
b4:49:3d:6e:71:71:6c:aa:dd:4e:a6:20:20:0d:cc:0b:14:59:
a0:69:8e:cb:99:4b:d9:57:5f:87:32:c5:2f:5b:ca:6b:dc:f1:
d3:45:28:45:ae:93:9e:3a:38:ca:f3:4a:b3:11:46:dd:5d:cf:
02:20:4b:6a:62:82:00:d4:27:ff:63:c7:60:d6:88:44:ac:46:
0e:c0:ab:b2:3d:bd:d3:b9:48:e5:81:3c:75:f3:fe:f2:e9:23:
59:73:58:7f:64:6d:6d:5c:a6:5b:ca:f1:05:01:f7:94:52:c3:
76:46:ab:70:6e:19:f4:ab:de:25:b2:ca:ed:5c:4d:de:8d:f6:
fe:16:70:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:47:02 2025 by rpki-client