Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4D7E998211211F08C431BB6DAE4EC9C.roa
File: E4D7E998211211F08C431BB6DAE4EC9C.roa (raw, json)
Hash identifier: kYAQixGrN4evHyCEwEnjF/a335lLnUlJOHipbBTj6BU=
Subject key identifier: AD:5F:7A:91:F0:2B:35:EE:21:80:A2:EC:6B:FC:99:6D:82:39:7D:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014E7E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4D7E998211211F08C431BB6DAE4EC9C.roa
Signing time: Thu 24 Apr 2025 13:49:08 +0000
ROA not before: Thu 24 Apr 2025 13:49:03 +0000
ROA not after: Fri 02 May 2025 13:49:03 +0000
asID: 55714
IP address blocks: 156.238.72.0/24 maxlen: 24
156.238.73.0/24 maxlen: 24
156.238.74.0/24 maxlen: 24
156.238.75.0/24 maxlen: 24
156.238.76.0/24 maxlen: 24
156.238.77.0/24 maxlen: 24
156.238.78.0/24 maxlen: 24
156.238.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85630 (0x14e7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 13:49:03 2025 GMT
Not After : May 2 13:49:03 2025 GMT
Subject: CN=680a4154-66ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:f5:dd:d9:af:7c:32:af:3d:9f:04:4a:ec:
73:00:72:b7:92:00:fb:c5:2d:50:65:55:50:3c:c6:
1b:ea:d9:97:28:3f:ac:5b:f3:17:fc:a8:68:9f:8a:
a6:63:1c:67:72:6a:39:a8:50:ac:21:eb:2d:da:aa:
7e:b2:a9:96:12:e4:be:65:b1:45:91:85:7a:23:af:
f3:93:7e:b1:3b:58:72:d8:9c:0e:af:35:4b:62:7d:
06:b4:dc:83:bf:b7:86:4e:78:a4:7e:a6:77:f7:fd:
e8:14:33:54:a7:50:7c:a3:cc:51:dd:c8:a0:71:65:
b0:cf:40:b9:8e:ce:3a:34:96:19:dc:2f:04:25:be:
93:47:b2:ef:61:27:3e:95:70:f8:05:e8:1a:56:9d:
23:6d:fc:54:13:ec:16:4e:eb:64:e0:9e:24:27:bd:
33:22:e2:ee:12:18:da:42:48:5c:ec:af:be:6d:18:
fe:06:b2:da:ea:89:2d:30:05:b9:44:0a:05:b2:6c:
d2:43:61:f2:d9:96:bf:1d:06:18:be:9b:46:5a:b8:
a7:a7:b6:6b:91:85:3e:a2:d9:1c:77:1f:54:88:79:
1c:5c:6c:19:5c:a5:86:66:08:59:55:ba:a5:46:d0:
e4:f4:af:db:7f:18:84:20:55:d0:98:55:e9:25:c2:
ff:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5F:7A:91:F0:2B:35:EE:21:80:A2:EC:6B:FC:99:6D:82:39:7D:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4D7E998211211F08C431BB6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.72.0/21
Signature Algorithm: sha256WithRSAEncryption
31:72:fa:6d:62:be:6c:34:2a:29:55:86:30:c6:3b:12:9e:cd:
1e:bf:a5:92:ff:54:ad:1a:54:b5:96:f5:35:28:76:6d:e6:8e:
3b:82:3a:5e:e3:d4:ac:d4:81:0b:ca:9c:52:2e:20:95:5c:93:
ea:25:5f:1e:c5:2d:05:89:4f:7a:87:06:f4:3b:19:7f:ac:a3:
2e:60:76:fb:a8:cd:f6:9b:ec:cb:56:99:83:e3:18:62:c8:f8:
13:df:9b:8e:66:b8:b4:5f:d7:46:bd:88:50:77:6d:92:42:14:
c5:65:1f:fd:6d:e7:7b:2a:11:d3:cd:84:35:12:69:a8:79:34:
74:56:b0:5c:20:f8:16:32:1e:24:67:cb:1d:9c:88:11:0b:d2:
33:f6:3b:b2:45:9f:58:6a:72:60:8a:36:52:6d:14:8e:ae:34:
d5:52:68:60:d9:85:38:4a:48:7b:04:95:b6:1e:a4:80:d9:dd:
7e:0e:fc:06:2e:18:dd:06:92:47:bc:68:5f:80:51:10:86:7d:
98:9e:18:96:44:55:54:b4:dd:c5:0b:cc:c0:f3:17:94:40:62:
15:70:02:9d:4b:da:38:5b:00:3a:21:cd:17:4e:ca:a7:5c:b9:
37:98:9c:f0:e1:13:06:c3:e1:4e:66:22:8f:51:b8:3f:c7:8d:
dc:57:25:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:07:37 2025 by rpki-client on console.sobornost.net