Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30F621401A0211F0BEF5C41D6EB8BCC6.roa
File: 30F621401A0211F0BEF5C41D6EB8BCC6.roa (raw, json)
Hash identifier: i7HroHO+CI1kin3i+J3pyIULeAEykVMk6rhUruJiR20=
Subject key identifier: 4B:C7:2D:76:C3:75:31:8D:F1:1A:FD:11:B7:59:73:BD:09:EB:28:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014C68
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30F621401A0211F0BEF5C41D6EB8BCC6.roa
Signing time: Tue 15 Apr 2025 14:01:57 +0000
ROA not before: Tue 15 Apr 2025 14:01:52 +0000
ROA not after: Thu 22 May 2025 14:01:52 +0000
asID: 60223
IP address blocks: 156.253.219.0/24 maxlen: 24
156.253.221.0/24 maxlen: 24
156.253.222.0/24 maxlen: 24
156.253.224.0/23 maxlen: 24
156.253.227.0/24 maxlen: 24
156.253.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85096 (0x14c68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 15 14:01:52 2025 GMT
Not After : May 22 14:01:52 2025 GMT
Subject: CN=67fe66d4-3942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:e8:57:af:ce:da:cd:27:2f:1a:df:8c:19:
56:0d:0f:18:c7:c9:f9:f0:c3:7d:1f:43:ec:f4:18:
93:11:a4:42:ab:8b:4a:46:6f:cd:49:c9:24:97:d7:
26:8c:6c:66:69:2f:df:fd:98:b4:34:2a:62:43:b9:
9e:96:12:e7:d8:ec:ba:2e:24:c0:6d:48:d7:e9:7a:
20:a2:89:61:ef:c1:e8:4c:74:37:d5:d0:a5:f9:b6:
5f:83:f0:0f:2d:d2:f8:d8:01:3a:24:b7:75:7c:34:
39:62:1b:89:35:7f:6a:ff:ad:9d:ec:6d:8b:55:27:
c4:aa:6e:9c:3d:31:b7:93:c1:d5:76:92:5d:cd:cd:
cd:bd:62:b8:18:d3:93:ab:8b:13:a2:7c:5f:30:6d:
7c:45:29:2d:c1:80:90:23:de:42:28:92:51:43:a2:
0f:3c:43:fe:ed:3b:3c:85:50:1c:2b:74:5e:f0:4c:
3d:39:6c:a1:a8:00:53:10:d7:65:e7:88:56:de:dd:
8f:b8:c4:db:be:5b:82:b0:16:77:fb:b1:e3:02:56:
31:c0:4a:12:9a:41:ea:24:0c:74:11:f2:c0:9f:1d:
d3:f1:1b:2d:fa:ff:3f:1a:5c:24:8c:ca:75:7a:8d:
d5:c8:b5:d6:00:0e:e0:c0:42:00:c4:ae:f3:0d:d0:
64:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C7:2D:76:C3:75:31:8D:F1:1A:FD:11:B7:59:73:BD:09:EB:28:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30F621401A0211F0BEF5C41D6EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.219.0/24
156.253.221.0-156.253.222.255
156.253.224.0/23
156.253.227.0/24
156.253.229.0/24
Signature Algorithm: sha256WithRSAEncryption
67:3d:5b:38:b7:fd:1e:2a:f5:09:0e:7b:44:86:a0:0a:e1:9c:
ab:b5:1f:d8:f6:2a:7f:6e:dc:fb:12:59:2c:d0:be:27:f9:04:
24:f6:4c:72:66:28:c8:8d:c8:50:4a:80:59:5a:24:53:71:96:
f6:af:59:67:a2:48:49:9e:9f:b5:93:4d:6f:84:bb:1a:ea:9b:
35:d9:7c:6a:4c:0a:30:5c:ae:f3:8b:68:70:18:d6:29:1b:27:
85:dc:bd:a7:8a:e0:cc:af:03:42:7f:8e:a5:c0:18:93:03:ee:
77:27:9d:be:77:d7:df:b0:be:92:d0:ff:e6:84:e7:06:f9:8c:
93:5c:e8:64:23:95:79:2c:bf:9e:0b:f1:f3:c6:6e:00:97:a0:
ef:1f:ac:f5:3c:5c:d1:c1:05:5a:2f:07:21:4c:d8:cb:40:14:
61:e8:f8:3a:a7:3e:3f:ab:ef:a3:b5:62:d5:e3:0d:3c:03:1f:
3b:bc:d9:5f:7e:f1:01:89:0c:f7:eb:98:41:09:db:cd:23:b9:
b0:2f:19:5f:7d:4b:53:4c:42:f9:0a:1f:f9:24:5f:78:43:d2:
b3:a2:1f:d1:0e:14:8f:73:09:46:bf:d6:75:80:93:7c:29:e4:
29:b3:05:47:c4:96:8c:dc:99:ba:ac:47:e8:8b:f6:39:4a:5d:
93:d3:9e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:25:55 2025 by rpki-client