Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A0F6C2816BE11F0B06C81D16DB8BCC6.roa
File: 9A0F6C2816BE11F0B06C81D16DB8BCC6.roa (raw, json)
Hash identifier: xysmN10Lrqj2f997xgABhBuegaBMo+AqNdvr2Ustwzs=
Subject key identifier: B7:C5:74:4F:FD:C6:E0:5F:A1:BF:67:E2:7E:B4:B0:0D:2F:6C:4E:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014BBB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A0F6C2816BE11F0B06C81D16DB8BCC6.roa
Signing time: Fri 11 Apr 2025 10:20:33 +0000
ROA not before: Fri 11 Apr 2025 10:20:29 +0000
ROA not after: Wed 21 May 2025 10:20:29 +0000
asID: 203020
IP address blocks: 156.233.180.0/22 maxlen: 24
156.233.184.0/21 maxlen: 24
156.233.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84923 (0x14bbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 11 10:20:29 2025 GMT
Not After : May 21 10:20:29 2025 GMT
Subject: CN=67f8ecf1-c113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a7:a1:b9:57:8e:49:d4:15:b0:2a:6d:4f:0b:
18:ce:f7:eb:63:76:74:db:6c:07:a8:10:bc:ff:b6:
2e:94:67:04:87:6c:5d:d2:f0:d1:fd:81:4b:20:7c:
61:bc:30:a9:15:e3:f7:00:17:08:c6:42:f8:d4:87:
d6:9e:1e:e0:af:28:ac:e2:43:c4:a6:6e:f1:d0:ef:
8b:32:95:ad:30:dc:83:a9:11:e3:6f:a0:b9:7e:a0:
ae:02:8e:53:31:ee:0a:f7:fe:06:ec:88:db:88:61:
b4:18:9c:9e:e1:7e:d8:6a:df:fc:c6:8b:b1:2f:b8:
6b:61:a6:8e:2b:a3:9b:41:ce:2d:bd:35:4e:46:03:
76:24:b8:4d:45:e5:ab:40:95:98:75:8a:f0:06:d5:
e3:f8:3d:b3:a3:55:00:5a:32:00:3e:c7:a3:3e:b4:
c0:a5:38:e4:42:0d:31:76:22:da:6b:91:5b:f5:4e:
c1:d2:56:f4:01:f1:5c:b9:b2:ca:fb:d9:85:43:5a:
3d:c3:df:60:0d:5a:63:4c:65:d8:c4:40:73:b4:a4:
98:3d:cf:dd:b3:4e:05:46:23:7e:06:12:f0:cc:77:
7a:8f:aa:31:36:af:35:e6:77:49:1d:1e:2b:3d:36:
24:85:41:2c:cb:d1:2a:da:2b:b5:98:e5:7a:fa:ca:
4d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C5:74:4F:FD:C6:E0:5F:A1:BF:67:E2:7E:B4:B0:0D:2F:6C:4E:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A0F6C2816BE11F0B06C81D16DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.180.0-156.233.192.255
Signature Algorithm: sha256WithRSAEncryption
29:a2:31:60:93:7c:66:26:11:5e:3d:64:88:67:bb:17:fd:5d:
d0:75:4d:71:28:85:50:dd:60:5c:69:ff:4f:b8:7d:cc:54:41:
62:23:fa:9c:81:5f:30:d5:9f:fc:07:bf:fc:a7:90:b5:58:b7:
b7:ac:8f:cd:a4:ae:f9:32:81:4c:5c:e1:d8:45:d1:e3:9d:0f:
86:ae:61:9a:65:cf:52:0f:f6:9e:9a:92:6e:2f:dc:f0:ae:45:
5f:5b:d3:b2:26:d7:22:c5:dd:8b:03:d5:9e:5c:7a:20:66:68:
9c:15:f9:10:b3:7f:27:fd:ab:87:5d:f3:e8:f2:10:4b:61:25:
79:7b:32:ee:ec:07:c2:a1:13:56:f8:4e:4f:4e:6b:24:f8:03:
06:d3:95:af:46:1b:c9:07:ae:8d:ec:eb:5c:40:ca:01:74:36:
e7:36:1f:d5:88:13:ea:cd:7f:db:a4:db:12:f6:19:7a:4d:4b:
92:f1:6d:4d:25:f7:42:61:76:cb:bc:72:37:27:2d:0a:d9:ae:
4e:f8:ee:93:45:e7:d8:3b:9b:9d:78:10:b9:86:b2:35:90:ce:
18:89:df:d6:d8:0f:db:aa:1f:9a:f6:fa:01:0a:bf:55:e5:a5:
af:fb:4a:5f:e8:52:f5:a5:5f:06:e7:61:c0:4a:0a:4d:cd:94:
47:2a:65:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:54:34 2025 by rpki-client