Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51E61EA01C6911F0945AB186DAE4EC9C.roa
File: 51E61EA01C6911F0945AB186DAE4EC9C.roa (raw, json)
Hash identifier: vX/oOci6yCk72iopRdI4SVbSbV43VOS34lBsaC312jM=
Subject key identifier: 5F:30:02:94:14:C9:BE:E7:C8:78:39:D0:F1:8C:0C:E4:7D:62:68:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D1F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51E61EA01C6911F0945AB186DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 15:25:12 +0000
ROA not before: Fri 18 Apr 2025 15:25:08 +0000
ROA not after: Sun 25 May 2025 15:25:08 +0000
asID: 203020
IP address blocks: 156.243.159.0/24 maxlen: 24
156.243.160.0/20 maxlen: 24
156.243.176.0/21 maxlen: 24
156.243.184.0/22 maxlen: 24
156.243.188.0/23 maxlen: 24
156.243.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85279 (0x14d1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 15:25:08 2025 GMT
Not After : May 25 15:25:08 2025 GMT
Subject: CN=68026ed8-bea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c2:85:f5:46:22:e8:da:7d:dc:8b:d7:16:46:
8e:fb:17:7d:4a:d7:23:f0:b6:da:e8:8b:aa:04:ee:
f0:e4:d9:12:a9:d6:74:3b:59:29:6a:3e:cd:a0:c0:
b7:27:30:1d:b5:43:4c:e1:e9:a9:24:a9:74:ae:9b:
36:3c:ae:69:fa:90:cd:3c:a0:f2:11:fd:a4:db:6d:
c0:5f:01:f1:ce:8d:56:0c:f1:69:65:e2:32:d8:02:
89:fc:d7:eb:67:ed:20:05:4d:c1:c3:2a:25:50:75:
99:8b:7f:85:2a:17:bd:ba:a3:ca:77:e7:1a:82:02:
e3:d9:96:30:79:e5:ad:cc:90:ef:0c:71:e9:84:29:
8e:32:ba:20:bd:4e:67:63:80:6e:5a:71:fd:66:31:
fa:24:33:2a:f0:a8:da:31:f1:f2:3d:50:92:2b:26:
c3:e8:63:6b:09:32:88:c8:a7:7b:66:73:bf:31:6f:
85:bf:54:dc:7b:d5:a4:c1:73:e2:5b:0f:3d:0f:52:
48:40:ac:12:29:d3:87:12:6c:c4:f3:65:68:cb:42:
e0:0c:c4:e1:a6:7d:16:f3:d1:1d:3c:20:33:eb:07:
ad:7f:34:5a:f9:4e:53:f4:e8:0b:f0:6f:97:f5:fd:
8b:b5:b5:dc:2e:c2:0f:20:dc:e9:8b:3d:e9:a8:1f:
b3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:30:02:94:14:C9:BE:E7:C8:78:39:D0:F1:8C:0C:E4:7D:62:68:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51E61EA01C6911F0945AB186DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.159.0-156.243.190.255
Signature Algorithm: sha256WithRSAEncryption
92:73:c1:cd:3d:fc:e7:83:b9:06:87:4d:5f:65:1a:b3:13:fb:
3b:7e:e0:ed:5c:97:46:70:f9:4a:23:e0:0a:c9:d0:84:54:19:
87:7c:62:89:a9:69:48:b8:e0:40:5b:b5:ff:5c:86:b3:62:3d:
dc:57:e7:dc:b6:34:67:38:91:c7:79:ad:35:46:20:3e:d6:23:
10:65:78:26:99:8f:fa:0c:bc:1f:62:67:4e:aa:5f:02:4b:98:
19:a9:58:39:b5:37:60:4d:fb:7e:69:df:54:2b:ae:e3:42:8b:
f0:67:bf:28:2d:b7:ba:d3:cf:cb:36:44:97:c6:be:ee:9c:2a:
8a:fa:ce:67:e5:d7:bb:82:42:21:e4:b5:cf:7f:b9:27:2b:fa:
4c:0e:c6:f9:72:55:59:bf:11:2c:5d:30:40:ae:a9:67:af:a5:
d4:16:0a:0a:96:76:38:fc:1f:5a:96:16:f6:06:f0:88:81:d9:
99:70:2f:b7:a7:07:fd:42:34:44:b9:1d:54:62:83:4b:c5:14:
11:27:56:7f:49:bc:17:4c:92:4d:a2:79:30:51:de:5b:42:bb:
93:3a:09:0b:11:a0:92:0c:cc:16:0a:e1:51:16:74:94:e9:bd:
f4:f6:55:29:59:22:db:da:d8:54:ce:87:8f:a4:89:e4:67:c7:
2d:ec:f6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:48:11 2025 by rpki-client