Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28AB3ED6438C11F09DD2288DDAE4EC9C.roa
File: 28AB3ED6438C11F09DD2288DDAE4EC9C.roa (raw, json)
Hash identifier: iPiHHqgGWz4suMp+BY9poX4NvDre1/ikS9TaNDqXxHQ=
Subject key identifier: 07:95:C2:09:A1:31:2F:B3:C0:7A:7A:DD:40:C6:53:10:ED:01:E0:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015A41
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28AB3ED6438C11F09DD2288DDAE4EC9C.roa
Signing time: Sat 07 Jun 2025 10:42:51 +0000
ROA not before: Sat 07 Jun 2025 10:42:46 +0000
ROA not after: Sun 31 Aug 2025 10:42:46 +0000
asID: 399077
IP address blocks: 156.240.212.0/24 maxlen: 24
156.240.213.0/24 maxlen: 24
156.240.214.0/24 maxlen: 24
156.240.215.0/24 maxlen: 24
156.240.216.0/24 maxlen: 24
156.240.217.0/24 maxlen: 24
156.240.218.0/24 maxlen: 24
156.240.219.0/24 maxlen: 24
156.240.220.0/24 maxlen: 24
156.240.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88641 (0x15a41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 7 10:42:46 2025 GMT
Not After : Aug 31 10:42:46 2025 GMT
Subject: CN=684417ab-ab74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8d:2a:40:4f:6d:6f:8c:2b:96:ef:e7:b5:91:
d5:32:86:8f:b5:09:bf:5b:37:23:d4:91:ea:13:47:
28:bd:4e:75:27:68:45:75:50:6c:f8:93:db:75:09:
0e:ef:a5:e6:40:da:d9:2b:db:c1:a0:bd:de:0c:6e:
e2:7f:96:58:38:d9:21:53:84:a2:b6:40:5d:6e:e3:
69:96:8f:2c:57:32:eb:d0:1b:b4:92:23:11:88:bc:
74:73:7e:7a:ce:5e:78:82:fa:ba:8b:1e:5c:e8:d3:
2d:63:c1:61:45:5a:6d:3a:ca:38:f2:2a:87:1f:42:
56:e9:63:20:b8:c2:16:ac:71:f7:1c:1f:a7:b3:ee:
ed:78:b5:31:f5:e9:d3:fd:06:26:a1:76:39:9e:58:
10:98:8a:7d:83:ff:49:a6:35:4a:79:55:dd:d8:e9:
be:24:9a:b6:9b:c1:33:0d:b8:3d:fc:0b:bf:7c:50:
72:5a:f1:2f:ef:f4:d2:92:23:90:ea:44:97:40:f3:
cf:25:1a:85:a7:f0:34:dd:3d:26:32:24:ee:c7:e0:
b4:f0:f2:c7:a0:17:60:e0:80:7f:17:e9:d2:23:c4:
30:50:53:51:ee:59:ba:73:6d:a2:ce:da:91:b1:e5:
32:34:51:20:a7:4a:f7:95:e3:13:a0:f8:34:bd:ac:
d2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:95:C2:09:A1:31:2F:B3:C0:7A:7A:DD:40:C6:53:10:ED:01:E0:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28AB3ED6438C11F09DD2288DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.212.0-156.240.221.255
Signature Algorithm: sha256WithRSAEncryption
49:bb:ed:b8:9b:ab:34:06:33:99:32:0f:7e:6a:34:3c:fc:31:
c6:b3:03:d2:cc:13:65:d4:e5:70:ea:f1:c6:04:f7:15:75:7f:
00:8d:cb:d7:2b:e3:af:7e:c6:1f:b4:c6:e9:c6:50:54:3e:e7:
bc:4b:c3:e5:13:89:f8:da:de:23:bf:50:c1:91:28:76:32:9b:
a1:4a:b5:75:c3:61:60:9e:f3:f1:c9:10:00:af:ab:db:b1:b1:
bc:0a:3e:61:f8:b4:0f:56:80:c7:8a:5c:45:68:4b:c8:99:64:
94:81:0b:cc:50:4f:25:75:28:9c:28:93:79:63:7f:43:c4:f3:
74:e7:b1:6b:1a:b1:32:c8:f6:b1:01:19:1e:98:34:a4:5c:0a:
24:53:7a:0c:60:df:90:ed:75:02:3b:52:a5:5a:75:bb:76:91:
af:b1:ce:39:d5:78:88:27:23:40:7c:9d:1c:aa:7e:63:e5:6e:
e5:47:8c:db:c8:54:65:95:8c:01:be:4d:bb:30:6b:da:6c:58:
fd:e9:76:25:7b:19:b1:7a:40:fa:e2:9e:72:2c:12:0c:18:cd:
78:b1:3c:85:97:cb:28:c6:91:33:02:f6:4e:75:94:50:48:06:
65:69:77:f0:3e:85:eb:6d:74:39:98:5c:aa:12:0f:76:cd:5e:
04:22:06:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:33:02 2025 by rpki-client