Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/713E42720CB611F08FE18373762E951A.roa
File: 713E42720CB611F08FE18373762E951A.roa (raw, json)
Hash identifier: iOFD+vk8vDAYMkiiIwEbDdx9GZ/KEcpvn4XLcGMLWB8=
Subject key identifier: 03:A0:D2:99:24:45:13:BE:8E:03:CE:8C:E5:1A:2B:31:E5:0D:79:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0148A0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/713E42720CB611F08FE18373762E951A.roa
Signing time: Sat 29 Mar 2025 15:56:57 +0000
ROA not before: Sat 29 Mar 2025 15:56:53 +0000
ROA not after: Sun 04 May 2025 15:56:53 +0000
asID: 203020
IP address blocks: 156.228.12.0/24 maxlen: 24
156.228.25.0/24 maxlen: 24
156.243.247.0/24 maxlen: 24
156.253.136.0/24 maxlen: 24
156.253.180.0/23 maxlen: 24
156.253.182.0/23 maxlen: 24
156.253.192.0/23 maxlen: 24
156.253.198.0/23 maxlen: 24
156.253.204.0/23 maxlen: 24
156.253.206.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84128 (0x148a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 29 15:56:53 2025 GMT
Not After : May 4 15:56:53 2025 GMT
Subject: CN=67e81849-15ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:53:87:8c:e7:f6:be:2f:f2:b4:71:cd:13:f8:
7c:b0:b8:0a:64:3f:e0:26:6d:7f:64:10:b8:c6:95:
a5:89:f8:d4:c4:ab:3d:76:8e:f9:6d:c7:f5:9b:2f:
0d:12:bd:e1:bc:64:ce:27:29:c7:3b:d2:c5:e9:de:
a2:13:ad:be:2c:0f:0a:fa:19:64:02:d7:17:c4:93:
26:8a:da:c2:93:a2:31:34:1a:3d:58:d5:23:a5:95:
28:dc:c5:93:c0:df:23:75:04:75:6a:a1:09:df:bb:
29:8e:fd:2d:29:d8:95:2c:22:1c:ea:c3:95:54:b1:
71:bc:e7:d6:b3:b7:ef:6d:66:2e:a3:9e:af:9b:d4:
39:db:2c:48:95:51:36:36:4a:f7:2b:74:94:3e:52:
84:9e:aa:d0:b8:4b:a9:85:d8:dd:db:d5:e9:2a:c6:
f7:9c:44:1a:63:36:30:f1:00:67:79:55:a1:1c:89:
60:5e:7a:f6:f8:73:da:79:f1:cd:fe:5e:a7:1a:21:
63:61:c8:93:9f:5a:a8:55:4d:e8:10:4c:e2:1a:c2:
04:a9:21:b0:22:7c:4f:69:0f:68:03:72:c3:93:0a:
eb:ce:19:59:07:d0:b6:76:e0:49:d5:a3:d9:73:f3:
6e:43:bc:21:5a:0e:69:91:4c:8f:bc:fc:87:fb:10:
f9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A0:D2:99:24:45:13:BE:8E:03:CE:8C:E5:1A:2B:31:E5:0D:79:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/713E42720CB611F08FE18373762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.12.0/24
156.228.25.0/24
156.243.247.0/24
156.253.136.0/24
156.253.180.0/22
156.253.192.0/23
156.253.198.0/23
156.253.204.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:8e:16:1c:66:c9:16:66:53:c8:1e:60:c1:41:65:8d:83:cd:
8c:48:47:1a:fa:35:18:0a:6c:cc:de:de:fa:16:77:ec:05:d9:
14:69:17:3a:38:38:05:27:1e:e7:b1:c6:52:0a:73:12:e2:da:
e7:86:5d:2d:58:7a:b4:c6:82:8a:ee:19:2c:f0:c7:10:c9:61:
9e:03:61:a5:a7:5b:61:c9:2a:c1:0c:d9:6e:d8:2c:5e:f0:39:
73:1e:c2:e6:94:d6:5c:15:95:06:c7:60:7d:3e:8b:d7:38:76:
af:5c:28:de:86:7e:37:87:35:2e:e4:d8:fc:32:bd:37:15:63:
db:ac:f8:48:d2:00:49:7c:9b:c3:a8:8e:6f:95:a4:21:0c:ca:
88:4f:fd:b5:51:f0:20:f4:ca:78:d7:d6:78:a1:b5:1d:43:c1:
37:18:b2:fe:04:fb:33:61:a1:1f:14:e7:ff:5c:f1:7a:36:f0:
d3:9b:c1:b2:c9:40:65:2c:4f:cf:e8:5e:50:3d:1e:7b:36:ca:
94:61:53:56:79:c6:20:dd:bc:ff:69:a9:ad:70:3a:01:b8:51:
c5:f6:2f:7f:bc:90:b7:f0:73:f5:89:8b:07:84:f4:fd:15:68:
9c:af:da:63:32:e0:c8:73:48:6d:26:b8:fe:6c:66:cb:34:e4:
49:e6:fb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:52:07 2025 by rpki-client