Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E08CA0FC202411F0B4BF1286DAE4EC9C.roa
File: E08CA0FC202411F0B4BF1286DAE4EC9C.roa (raw, json)
Hash identifier: 38qRz9efT0wvaM87nvDtmYixpdJ6SqEUH+9XiYCi0eU=
Subject key identifier: 91:DC:52:48:63:DB:BC:CE:9D:9B:70:3B:A6:6B:26:EC:E3:43:7D:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014E3E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E08CA0FC202411F0B4BF1286DAE4EC9C.roa
Signing time: Wed 23 Apr 2025 09:25:21 +0000
ROA not before: Wed 23 Apr 2025 09:25:16 +0000
ROA not after: Fri 02 May 2025 09:25:16 +0000
asID: 5065
IP address blocks: 156.243.0.0/24 maxlen: 24
156.246.85.0/24 maxlen: 24
156.246.97.0/24 maxlen: 24
156.246.99.0/24 maxlen: 24
156.246.101.0/24 maxlen: 24
156.246.102.0/24 maxlen: 24
156.246.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85566 (0x14e3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 09:25:16 2025 GMT
Not After : May 2 09:25:16 2025 GMT
Subject: CN=6808b201-0ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:90:19:44:58:78:2c:ed:be:b3:14:c7:8e:ad:
ea:04:60:c0:7e:6c:db:b0:43:f3:60:a3:0d:dc:61:
b4:89:46:e6:a5:4c:4f:ea:02:13:11:04:35:3f:d1:
89:f6:23:50:04:40:dc:c9:4b:9e:55:0d:34:8e:a3:
b0:54:c8:fb:ed:95:2f:43:89:d6:3c:82:f7:00:19:
e3:8c:55:e0:d5:2c:75:77:21:e3:e4:62:9f:13:c8:
fd:d4:32:1d:bd:7d:cf:f7:bc:04:0b:f1:d4:27:06:
65:fb:39:4e:36:fd:8b:a5:64:a6:b2:d3:3a:97:62:
d7:b9:f9:65:6e:d1:70:03:c9:fc:9d:55:f4:c8:10:
da:fa:e9:ef:4a:14:a9:1d:57:37:d9:84:22:12:a4:
06:ec:92:44:d3:c5:1a:85:7b:a2:13:c3:c9:81:85:
15:3c:76:a3:7e:54:3d:c0:19:e8:04:5b:f7:20:d9:
bf:c0:94:5a:9d:f7:74:9d:c0:bc:bd:61:ae:62:e6:
8c:e1:84:74:2f:fe:b5:19:fd:50:e8:83:7d:b5:e1:
1c:1f:11:fb:2b:4d:8c:8b:f4:aa:bd:e8:2f:98:71:
04:0b:d9:9b:f3:16:32:0f:0f:2b:13:c0:65:db:a5:
bf:45:35:a8:5f:ca:e9:e9:8a:4d:95:21:09:5c:ce:
e5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DC:52:48:63:DB:BC:CE:9D:9B:70:3B:A6:6B:26:EC:E3:43:7D:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E08CA0FC202411F0B4BF1286DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.0.0/24
156.246.85.0/24
156.246.97.0/24
156.246.99.0/24
156.246.101.0-156.246.103.255
Signature Algorithm: sha256WithRSAEncryption
3d:47:a1:ef:15:7a:57:89:35:fd:96:71:73:70:cb:fc:7b:8a:
7d:68:40:07:36:c1:25:2d:70:72:7b:4b:6c:52:87:12:23:71:
f8:6a:87:05:4c:0f:de:e9:90:22:91:89:7f:d3:62:55:7a:84:
4a:1b:1f:23:2c:5a:5f:02:1a:5e:d3:ce:2f:8f:45:46:67:55:
ae:61:f1:14:43:40:14:24:53:8f:9e:78:7b:43:22:65:39:8f:
c4:f6:c9:17:40:46:60:0b:a3:9f:2d:c6:0e:51:bf:d1:4e:1b:
da:32:e0:ac:a9:47:d6:81:5e:e6:9a:92:80:87:ed:0a:ed:99:
c6:1c:2c:ce:15:51:2b:f1:2d:62:5b:7f:42:26:f9:a9:1e:47:
12:43:b4:b8:65:9f:40:04:d0:87:f7:45:d8:8b:5b:9c:02:13:
6b:75:aa:0b:5c:8c:02:03:2b:59:8c:6e:50:6d:7d:ba:09:dd:
82:5e:b6:bf:17:ea:b7:5c:07:b6:a8:3c:fb:1d:a1:eb:ba:fd:
81:ab:40:1c:fb:23:ab:ec:cd:db:60:77:f9:58:50:12:1f:74:
65:96:0c:a9:82:84:c4:82:b9:f0:06:75:d9:4b:2c:e4:eb:19:
9e:cb:49:30:b6:12:fa:4f:72:16:cd:a1:d0:0d:b8:27:ae:16:
3f:12:8b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:52:09 2025 by rpki-client