Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FED42561C6511F0BBB7B7EBDAE4EC9C.roa
File: 6FED42561C6511F0BBB7B7EBDAE4EC9C.roa (raw, json)
Hash identifier: mJ13vF29KyQI9+G3QgKnkmpgg/b6Q8SRgWhHIMCbpaY=
Subject key identifier: 7E:71:B4:89:13:7E:E5:CE:80:9A:A5:B3:AD:0C:20:C0:C5:61:E8:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D18
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FED42561C6511F0BBB7B7EBDAE4EC9C.roa
Signing time: Fri 18 Apr 2025 14:57:25 +0000
ROA not before: Fri 18 Apr 2025 14:57:20 +0000
ROA not after: Fri 25 Apr 2025 14:57:20 +0000
asID: 39600
IP address blocks: 156.232.80.0/21 maxlen: 24
156.235.80.0/21 maxlen: 24
156.238.136.0/21 maxlen: 24
156.252.8.0/24 maxlen: 24
156.252.9.0/24 maxlen: 24
156.252.10.0/24 maxlen: 24
156.252.12.0/24 maxlen: 24
156.252.13.0/24 maxlen: 24
156.252.14.0/24 maxlen: 24
156.252.15.0/24 maxlen: 24
156.255.80.0/24 maxlen: 24
156.255.81.0/24 maxlen: 24
156.255.82.0/24 maxlen: 24
156.255.83.0/24 maxlen: 24
156.255.84.0/24 maxlen: 24
156.255.85.0/24 maxlen: 24
156.255.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Apr 2025 14:57:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85272 (0x14d18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 14:57:20 2025 GMT
Not After : Apr 25 14:57:20 2025 GMT
Subject: CN=68026855-251c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:02:e1:2c:78:51:28:74:26:17:dd:cf:85:36:
cc:86:30:ab:92:21:f9:5e:e0:d4:a2:4f:35:2c:30:
f2:42:3d:a1:68:30:d9:ca:a2:dd:d4:d9:21:a6:58:
ec:47:c1:6e:12:ef:f2:08:87:4e:d9:ce:48:92:68:
e5:bb:8a:b8:94:33:4d:a1:e3:34:bb:26:8c:1f:dd:
38:ea:28:f5:41:50:65:7c:98:6c:a7:1c:01:05:1f:
09:2d:fd:bd:eb:f9:7f:ca:1d:03:4f:a6:ef:89:7e:
2d:13:8c:87:8b:3d:5c:8c:5f:cf:80:1f:88:be:e4:
bd:1f:90:ac:e5:5a:24:8a:04:0d:44:97:9f:ee:c0:
ec:ab:28:e1:78:9f:65:b8:66:ec:7c:69:8c:e4:7f:
9a:55:cc:e7:14:12:d6:40:a7:6d:05:f8:0d:af:32:
f7:a3:b1:e3:0f:3e:b1:3e:c9:f7:6f:16:ea:39:a0:
a5:b6:f9:73:65:9e:d4:ce:f1:61:c7:2f:18:42:04:
b2:4c:7d:a4:87:80:c8:be:16:fc:1f:11:49:98:ce:
73:de:ea:ea:87:41:ed:77:39:b5:0c:aa:5d:82:ba:
e7:fb:60:12:db:01:45:2f:ee:e3:e1:32:3f:35:d3:
02:c9:0e:cd:cd:cc:46:43:20:c5:27:6f:dc:2c:95:
87:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:71:B4:89:13:7E:E5:CE:80:9A:A5:B3:AD:0C:20:C0:C5:61:E8:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FED42561C6511F0BBB7B7EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.80.0/21
156.235.80.0/21
156.238.136.0/21
156.252.8.0-156.252.10.255
156.252.12.0/22
156.255.80.0-156.255.86.255
Signature Algorithm: sha256WithRSAEncryption
82:5a:df:72:80:86:df:1a:25:fe:c0:fa:33:ea:42:db:18:95:
04:80:e0:eb:20:22:47:ae:bc:c8:84:25:40:4a:91:49:03:d1:
2d:90:fa:c3:52:17:5e:ce:90:1c:e8:cb:6a:61:92:19:01:42:
d2:a7:ff:15:cf:fa:ab:cc:88:52:ee:b2:e3:ff:78:c8:39:17:
bc:70:f6:b4:50:9a:1d:82:16:32:11:6f:ba:35:d1:58:0f:45:
51:a9:ad:38:3d:94:4a:6e:88:a8:34:76:f1:c9:85:a4:b1:c2:
17:e7:ea:30:4d:e3:69:24:3d:3b:16:40:2a:9e:76:aa:b5:00:
32:ef:b8:0b:86:ee:f8:fe:90:c6:39:ec:48:42:01:3f:7b:d9:
97:45:f7:c4:65:d9:8b:67:70:36:0b:21:2b:b9:c6:67:44:39:
08:f6:11:ed:29:84:ec:fb:87:c8:a3:98:da:d3:14:4f:67:30:
5d:9a:26:30:f7:ed:70:a5:13:d3:fe:99:ca:2d:07:11:26:ce:
aa:72:87:10:2d:c9:57:3c:90:23:50:fe:b8:65:81:55:7f:61:
ad:44:5f:f1:b4:5d:92:71:f6:66:c4:a5:76:52:ec:ab:1a:a0:
d8:d4:f3:80:bb:5d:a4:1a:7e:a3:5b:ee:70:54:da:19:e3:0d:
85:ca:ed:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:06:16 2025 by rpki-client on console.sobornost.net