Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED8498B824C611F0BC491B89DAE4EC9C.roa
File: ED8498B824C611F0BC491B89DAE4EC9C.roa (raw, json)
Hash identifier: ZAGE/t5QjtPfppk83RhCZJ1/C4JZymOLoaC4lrZysJc=
Subject key identifier: 97:39:35:E2:E9:91:01:0A:CA:9A:7A:F7:8E:76:B3:D1:20:A6:D0:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01500D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED8498B824C611F0BC491B89DAE4EC9C.roa
Signing time: Tue 29 Apr 2025 06:55:26 +0000
ROA not before: Tue 29 Apr 2025 06:55:21 +0000
ROA not after: Fri 30 May 2025 06:55:21 +0000
asID: 152092
IP address blocks: 156.245.128.0/21 maxlen: 24
156.245.198.0/23 maxlen: 24
156.245.200.0/22 maxlen: 24
156.245.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86029 (0x1500d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 06:55:21 2025 GMT
Not After : May 30 06:55:21 2025 GMT
Subject: CN=681077de-1d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:06:c5:ee:f3:01:c9:22:83:1f:25:63:11:
81:97:b5:83:50:79:af:71:11:a8:f7:cc:7f:23:e2:
e4:ca:e0:f7:13:32:2e:1f:de:df:e2:8a:1f:f1:45:
e4:85:57:d0:a6:64:ca:0d:94:d0:78:09:69:ef:e2:
2e:e4:e9:a6:54:40:8c:f1:e9:e3:41:85:98:17:10:
12:3c:5c:a7:bb:a8:2d:2e:43:ac:ad:f5:67:01:90:
30:69:88:e3:9b:b7:0e:a8:87:d2:48:70:c0:a2:b4:
70:7d:d9:ec:67:f8:93:76:7d:20:11:7f:d0:b5:29:
7f:de:23:d3:4e:cf:63:bb:a1:2f:24:e2:27:04:a4:
03:f3:81:95:52:a3:81:db:fd:c2:60:e8:33:94:2b:
81:36:68:9b:44:75:fc:77:7e:f5:13:f6:38:ce:d6:
f2:4c:01:81:3f:ab:40:89:5d:5d:8a:18:16:9d:29:
fc:34:52:ca:0f:a4:16:5c:94:43:83:5f:92:4b:11:
aa:e7:da:15:20:e9:62:f1:92:c8:95:23:0b:7c:6c:
ff:08:93:df:be:0c:4a:ec:66:a2:6b:d4:30:fa:84:
42:5d:45:f8:ea:8f:ed:e5:18:20:30:0e:92:79:c0:
eb:ed:2a:9d:69:69:a0:76:12:d7:29:4b:e7:f4:c4:
b5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:39:35:E2:E9:91:01:0A:CA:9A:7A:F7:8E:76:B3:D1:20:A6:D0:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED8498B824C611F0BC491B89DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.128.0/21
156.245.198.0-156.245.203.255
156.245.209.0/24
Signature Algorithm: sha256WithRSAEncryption
50:5a:df:96:5d:b4:e4:31:f7:eb:01:00:be:47:21:28:5c:bb:
bd:59:2c:0f:88:19:a9:dc:86:43:ab:40:1f:d7:05:9d:5f:59:
5a:12:3f:58:33:a6:8f:e8:4e:70:bd:e2:36:69:c9:93:1b:fa:
cd:86:67:11:55:f4:73:aa:93:41:87:57:86:73:89:58:22:fb:
c6:81:f4:2b:de:a0:2d:99:84:f5:3d:46:7d:e0:29:95:17:74:
f2:50:51:09:68:e1:cb:4e:b3:33:c7:c9:0d:9c:ae:e5:09:c9:
47:73:cb:70:e9:b0:bf:8f:5f:59:22:97:b9:ba:6e:54:51:70:
82:05:d6:c2:09:a5:7d:fd:a6:71:d2:5c:b0:be:ae:69:79:b3:
a4:e3:6a:15:4b:6e:4c:e1:c9:ed:fe:0e:0e:ef:e3:06:25:47:
b9:45:81:40:e3:5f:42:e4:d7:eb:d0:6a:ff:f0:98:37:90:95:
e2:7e:69:5f:3b:b1:6f:7f:8d:fa:77:44:9a:55:6a:af:2b:05:
f5:a8:c5:bf:18:1b:b9:6a:e8:98:24:04:ed:87:11:1f:6a:0e:
c4:ae:56:03:e7:af:82:3b:fc:45:45:f4:41:50:c3:dc:9a:a0:
ad:8a:e1:4d:c6:5e:e4:86:65:d4:40:94:89:3b:11:0c:4c:84:
9f:a4:b4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:51:36 2025 by rpki-client