Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD7C26081C8211F095D0F3ACDAE4EC9C.roa
File: DD7C26081C8211F095D0F3ACDAE4EC9C.roa (raw, json)
Hash identifier: U4iSRER/cIJ6aDmK/gXtFTHg7YEKnhiB6oSDRMO3zUE=
Subject key identifier: 5F:D1:73:50:04:CB:81:7F:B3:F6:57:58:F7:51:18:F1:AB:E8:96:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D4B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD7C26081C8211F095D0F3ACDAE4EC9C.roa
Signing time: Fri 18 Apr 2025 18:28:04 +0000
ROA not before: Fri 18 Apr 2025 18:27:59 +0000
ROA not after: Tue 27 May 2025 18:27:59 +0000
asID: 48031
IP address blocks: 156.246.128.0/24 maxlen: 24
156.246.129.0/24 maxlen: 24
156.246.130.0/24 maxlen: 24
156.246.131.0/24 maxlen: 24
156.246.132.0/24 maxlen: 24
156.246.133.0/24 maxlen: 24
156.246.134.0/24 maxlen: 24
156.246.135.0/24 maxlen: 24
156.246.136.0/24 maxlen: 24
156.246.137.0/24 maxlen: 24
156.246.138.0/24 maxlen: 24
156.246.139.0/24 maxlen: 24
156.246.142.0/24 maxlen: 24
156.246.143.0/24 maxlen: 24
156.246.144.0/24 maxlen: 24
156.246.145.0/24 maxlen: 24
156.246.146.0/24 maxlen: 24
156.246.147.0/24 maxlen: 24
156.246.148.0/24 maxlen: 24
156.246.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85323 (0x14d4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 18:27:59 2025 GMT
Not After : May 27 18:27:59 2025 GMT
Subject: CN=680299b4-13ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a7:28:81:83:bc:e0:7f:6f:5c:b1:d9:51:0b:
04:3c:58:8c:37:f1:48:e6:21:81:3c:3d:65:2a:b5:
9b:89:61:54:57:b0:2b:18:34:d0:21:84:ac:24:07:
bb:ea:cf:a5:a8:34:50:eb:e3:67:32:85:f0:e8:a8:
49:05:3c:02:4b:ef:9b:09:4c:6b:ec:a6:ca:dc:09:
4a:92:a9:47:d5:8e:1e:fc:6d:45:05:29:40:9e:1b:
ba:4a:29:00:0a:87:65:ce:bb:27:f5:9f:3d:d3:11:
b8:0e:ba:0f:db:e6:c5:00:53:e8:dd:7b:f1:9c:ac:
1a:7d:a1:5b:98:9a:13:25:ea:cb:38:e4:66:c4:03:
16:c8:02:80:ee:2a:54:07:73:29:7b:d1:14:74:2f:
b2:d2:64:6c:cd:db:e1:8e:4b:29:62:eb:6d:79:4d:
ac:01:96:49:10:95:19:83:b7:1c:94:71:f5:14:fd:
b2:56:a1:d7:0c:0d:64:01:48:41:11:6f:82:21:57:
3c:1f:03:45:b5:68:f7:e1:7e:5f:a4:8e:dc:0c:74:
f8:e9:10:2c:b9:3a:8e:35:37:99:d5:5d:3a:7d:64:
dd:00:cd:a2:c1:14:9f:c9:f7:17:65:2d:51:4b:14:
4f:a9:65:30:3a:23:b7:ae:c3:81:e2:4a:76:4a:03:
91:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D1:73:50:04:CB:81:7F:B3:F6:57:58:F7:51:18:F1:AB:E8:96:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD7C26081C8211F095D0F3ACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.128.0-156.246.139.255
156.246.142.0-156.246.149.255
Signature Algorithm: sha256WithRSAEncryption
3f:a1:64:e8:81:73:6d:24:5f:55:27:30:f0:16:47:31:75:24:
35:8d:17:09:2d:a2:b5:3b:65:81:b2:dd:65:71:a8:bc:00:94:
8c:94:56:4d:1f:2e:7c:71:37:34:24:e8:13:64:f7:4d:b0:6a:
ca:90:93:b4:9d:12:c5:26:b2:4e:bc:1b:86:f4:96:e3:32:58:
c4:6c:16:a3:12:89:32:e2:91:81:ae:ec:c0:35:5e:d7:5d:0e:
78:0e:96:08:ac:f0:e5:2b:1a:e6:b7:df:5d:af:38:f5:92:bb:
b3:ec:21:58:0e:5b:81:ef:c7:de:65:11:c3:dd:e3:6c:bf:19:
23:59:95:80:86:10:d6:87:cb:c5:a8:aa:70:39:b1:5e:60:b7:
1b:24:61:6c:24:62:ee:48:f4:9f:ea:a3:2a:d7:af:80:6c:1d:
03:ec:30:21:79:e1:62:5b:31:e4:3f:f0:ba:59:b9:32:f3:3f:
b4:b3:10:e3:c0:e3:6f:49:d1:91:b4:2b:04:d9:36:20:61:ae:
a2:29:2e:ea:af:15:98:a3:fe:00:b5:01:23:09:59:01:5d:f0:
04:3e:97:35:96:1c:2a:36:a1:fd:53:9f:0e:dc:04:d3:3f:93:
b0:9f:4d:23:c2:ca:6d:af:a6:40:7d:e2:03:7d:50:69:2f:b7:
c9:09:07:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:07:43 2025 by rpki-client on console.sobornost.net