Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/187110C415EF11F0B54DC5E66DB8BCC6.roa
File: 187110C415EF11F0B54DC5E66DB8BCC6.roa (raw, json)
Hash identifier: MbNMNvGgF8PGgqTQbyEkUnqy4WzzJ2vi0y9ySSub/Ks=
Subject key identifier: 7B:57:EA:6B:E0:30:B8:9E:70:CD:94:35:6F:D5:E4:B8:93:36:A0:34
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014B70
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/187110C415EF11F0B54DC5E66DB8BCC6.roa
Signing time: Thu 10 Apr 2025 09:35:10 +0000
ROA not before: Thu 10 Apr 2025 09:35:06 +0000
ROA not after: Fri 16 May 2025 09:35:06 +0000
asID: 398993
IP address blocks: 156.231.52.0/22 maxlen: 24
156.231.68.0/22 maxlen: 24
156.231.88.0/21 maxlen: 24
156.231.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84848 (0x14b70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 09:35:06 2025 GMT
Not After : May 16 09:35:06 2025 GMT
Subject: CN=67f790ce-4be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2e:eb:28:eb:21:61:49:a8:b0:d6:68:8e:0e:
9a:08:d8:e1:ab:06:8a:d3:08:1c:c7:a5:04:f8:5a:
31:4e:5c:67:d1:03:75:c0:55:9c:4a:c0:24:c4:50:
58:df:45:5d:a0:1d:8b:b9:d4:41:19:b5:48:49:5e:
a3:08:61:83:b0:74:3c:79:6f:bf:c8:70:4f:aa:1f:
73:ab:5f:5d:f3:f2:33:eb:2b:7d:7c:22:02:45:50:
cb:aa:fd:d1:4a:d8:ef:d0:99:8f:61:d1:7c:dc:3a:
f3:0c:ca:22:29:9f:c2:05:43:cb:93:cd:84:98:14:
b3:ac:43:32:2e:7b:b2:f4:0d:a4:e3:fd:70:a8:ae:
af:e3:59:ab:de:fe:ed:18:7c:7a:b8:ce:7e:23:eb:
0e:8d:52:8e:0f:13:6d:2b:a8:2b:4b:d7:73:8e:ef:
91:a2:37:e0:b5:a6:39:12:e6:d2:64:63:90:22:ac:
d6:65:c9:94:9a:51:c6:df:93:f2:71:1a:2e:1c:15:
52:88:29:5d:75:7f:fc:3f:1f:91:c9:4e:d8:19:4a:
4b:50:fd:8f:19:6e:d1:17:ef:71:0d:3e:bb:4d:d6:
5e:3d:5f:2e:78:1e:8c:9b:61:df:21:2e:a7:08:d7:
6f:cb:ce:10:ce:5d:5a:e8:7d:32:ae:49:86:f0:fe:
63:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:57:EA:6B:E0:30:B8:9E:70:CD:94:35:6F:D5:E4:B8:93:36:A0:34
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/187110C415EF11F0B54DC5E66DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.52.0/22
156.231.68.0/22
156.231.88.0/21
156.231.144.0/20
Signature Algorithm: sha256WithRSAEncryption
0f:d2:6f:84:b1:26:af:47:d1:ef:a8:67:ce:4b:76:93:58:75:
c1:26:78:e6:6c:da:03:2e:89:ce:76:c0:f4:6b:00:97:2d:82:
13:6c:bc:88:f1:59:b6:e0:5b:d0:ac:8f:cb:eb:70:47:0d:4c:
a5:8f:1b:59:14:02:3e:eb:ce:a4:0e:b2:fc:17:46:27:f3:5c:
2a:e7:e9:3f:ee:a6:03:94:7c:34:23:28:6e:fb:3e:77:ea:d7:
d2:00:a1:29:b5:24:ad:4b:b2:18:7d:60:e9:a0:64:8f:fe:1a:
0a:63:e3:95:e8:08:62:c5:e2:ce:0b:ec:b2:bd:0c:76:85:6f:
61:8c:78:92:f7:f9:c3:99:a9:e1:47:77:89:85:52:41:31:0e:
fd:8b:93:44:ff:18:68:31:2b:ab:2a:88:e7:57:4e:08:4b:0b:
94:c6:99:67:bb:2a:b6:e3:bd:19:9d:cf:c0:cb:98:9c:6a:d5:
f2:16:71:7b:3e:5f:20:fa:4f:ca:a9:77:89:bf:77:5a:ae:8c:
23:05:7d:ae:88:32:d5:40:3d:ce:75:2d:22:f1:f6:3e:f4:10:
1e:0b:24:57:7e:b0:65:0d:14:7c:27:8c:63:d6:b0:96:09:72:
e8:08:36:8c:d0:df:1e:b4:d0:dc:1e:08:d3:f0:f0:6a:8f:93:
ba:46:0f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:05:46 2025 by rpki-client on console.sobornost.net