Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/106D91EA1C6611F0B83240F0DAE4EC9C.roa
File: 106D91EA1C6611F0B83240F0DAE4EC9C.roa (raw, json)
Hash identifier: XpxtrpnZ/yB4z+utlHcN0hK7zLApEzNwkYcTtvZdD3Q=
Subject key identifier: 83:58:4F:7B:90:3A:66:2D:2F:61:0B:BB:86:D9:D9:BA:98:46:C6:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D1B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/106D91EA1C6611F0B83240F0DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 15:01:54 +0000
ROA not before: Fri 18 Apr 2025 15:01:49 +0000
ROA not after: Sat 24 May 2025 15:01:49 +0000
asID: 8796
IP address blocks: 156.239.24.0/21 maxlen: 24
156.239.32.0/20 maxlen: 24
156.239.48.0/22 maxlen: 24
156.239.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85275 (0x14d1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 15:01:49 2025 GMT
Not After : May 24 15:01:49 2025 GMT
Subject: CN=68026962-1d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7b:c7:8b:45:c0:38:e8:95:99:e0:19:9f:cc:
61:8e:21:03:ff:8c:47:7e:1b:52:e6:b7:52:c6:3f:
fa:02:e7:ee:78:b0:fc:36:f7:be:67:3b:4a:09:eb:
11:e7:89:f2:92:dc:43:20:a8:e8:44:b5:33:11:f3:
e6:2c:e8:6b:d6:1c:db:df:40:af:c6:90:d2:70:ff:
66:41:3d:cc:6e:b6:74:a2:6b:11:c0:10:0f:66:ac:
99:05:35:74:43:7a:ee:e6:b1:4d:29:fc:46:70:67:
c6:76:58:05:30:6d:37:ba:f0:3e:ff:0f:76:38:5f:
89:a9:d9:0f:02:f9:17:73:ed:19:bf:6c:5c:1f:40:
f0:fd:93:0e:9b:eb:6f:10:e9:c1:62:05:46:47:75:
02:34:a8:78:01:45:ad:69:da:e7:a4:6a:0c:c4:6d:
2e:f3:5a:07:31:70:b6:d1:6b:1b:0c:0e:18:8d:43:
4c:7c:c3:e3:24:34:de:18:e8:7f:99:c9:a5:94:eb:
9d:4b:ec:99:ad:7e:c9:d9:c9:02:ec:c7:83:dc:aa:
67:bd:35:ad:5e:7a:65:e9:b2:d1:98:59:f1:14:6d:
48:a1:b0:8d:f0:dd:87:be:15:57:55:79:23:f3:f7:
ac:ef:51:10:d7:08:1c:37:73:3d:b2:8f:f6:f7:c1:
78:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:58:4F:7B:90:3A:66:2D:2F:61:0B:BB:86:D9:D9:BA:98:46:C6:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/106D91EA1C6611F0B83240F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.24.0-156.239.53.255
Signature Algorithm: sha256WithRSAEncryption
ab:7c:49:9e:17:55:af:e4:cd:52:a5:49:66:88:b3:f2:ed:b2:
5d:61:7b:5d:7a:7d:bd:51:e2:36:af:5d:31:76:36:1a:7c:ca:
78:c3:f8:85:20:d7:41:24:72:51:07:63:a2:6e:7e:9a:39:4e:
82:24:ca:85:e6:cc:57:05:ba:db:0f:4f:cd:b5:88:55:5c:08:
a6:9a:8d:2b:94:2a:93:67:0c:bf:9d:1a:0e:9b:15:91:79:84:
c4:5e:27:a3:c1:22:1c:0d:0c:7b:84:2b:3d:f7:d1:8b:94:6a:
3c:14:cc:57:54:c6:a8:62:ea:82:60:23:5e:40:90:1f:f1:2b:
23:4e:04:19:09:34:43:28:0e:f6:db:de:30:94:fc:54:ae:5d:
ad:fc:f6:cb:f9:4b:d7:7e:dc:95:8e:2c:ae:18:fc:62:fa:3d:
1d:46:51:98:13:54:32:5a:14:98:4e:29:68:74:77:a2:20:ee:
d5:db:8c:81:0b:17:cb:c6:aa:4c:a4:ec:a3:34:04:22:3e:ed:
c5:e7:3c:62:1a:3a:71:49:f4:e2:d6:4d:ad:33:01:f8:4f:b2:
2f:10:ef:c9:f9:74:4b:75:b6:63:c2:ad:b2:80:58:e0:66:a3:
f0:23:e8:34:95:08:71:cd:8d:b6:69:03:43:ee:81:02:da:d5:
05:ad:74:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:55:10 2025 by rpki-client