Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/052AD3E8CD0511EF8C2BD149762E951A.roa
File: 052AD3E8CD0511EF8C2BD149762E951A.roa (raw, json)
Hash identifier: OjTWc1kh4eZo3c5Zl21EQHEPEU5LlhceKzr1wNaSn+U=
Subject key identifier: 54:44:CF:01:84:C4:2A:93:7D:87:A3:4A:EA:CD:E8:B6:6F:E2:11:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FC91
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/052AD3E8CD0511EF8C2BD149762E951A.roa
Signing time: Tue 07 Jan 2025 14:38:12 +0000
ROA not before: Tue 07 Jan 2025 14:38:08 +0000
ROA not after: Mon 13 Dec 2027 14:38:08 +0000
asID: 17561
IP address blocks: 156.239.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64657 (0xfc91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 14:38:08 2025 GMT
Not After : Dec 13 14:38:08 2027 GMT
Subject: CN=677d3c54-9289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a5:5c:e3:18:65:e5:c8:90:ec:34:ee:2f:83:
ea:59:56:df:da:35:10:86:49:60:bb:87:4c:57:de:
b3:aa:32:11:0c:73:b1:b0:f9:70:63:24:82:85:06:
10:c2:1d:ea:9c:75:80:81:c5:8d:e5:42:50:72:c5:
89:25:41:03:d7:15:56:44:d8:3e:f3:b7:5f:0d:1b:
55:41:f6:8a:2d:93:7a:81:9f:cb:0a:95:99:61:f0:
b0:58:50:26:13:cb:db:bc:ad:85:39:45:12:b3:ec:
41:24:e2:b9:d1:b3:33:a0:2d:0c:75:ab:8b:4e:65:
60:c1:ec:95:69:cb:15:c4:6f:58:16:45:cf:f2:25:
81:54:8b:d0:5a:a9:fe:cd:48:72:c9:3b:34:06:ba:
ec:06:8c:91:d2:3d:6b:83:f8:e6:c0:95:34:1d:09:
d2:48:be:89:99:a7:84:ab:5a:45:d7:fa:71:cb:5e:
65:9b:af:cb:e8:60:e7:55:e5:d6:02:f3:ad:3d:8f:
54:cf:74:59:4c:b2:88:92:d6:fe:a1:81:ee:6c:e5:
8d:51:ed:97:33:08:5c:f4:e7:90:15:14:39:09:10:
bd:61:b2:91:2a:d7:e1:90:15:d8:24:13:eb:81:1b:
c9:6c:3f:e5:71:d5:a0:16:89:7e:c9:d8:43:ab:7c:
ce:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:44:CF:01:84:C4:2A:93:7D:87:A3:4A:EA:CD:E8:B6:6F:E2:11:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/052AD3E8CD0511EF8C2BD149762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.26.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:38:a9:ca:66:05:3d:fb:90:85:7b:ef:37:a8:24:cf:5f:c7:
3f:b9:4a:50:7b:c7:b5:09:f5:c0:30:c2:27:e4:33:24:e8:76:
b4:bd:1b:82:00:ec:c6:82:da:3c:da:5e:3b:d8:47:39:98:0f:
57:66:fb:c9:77:b5:63:15:0d:3d:ae:41:b0:86:75:9d:89:51:
5d:a9:25:88:1f:d9:88:29:23:3b:33:dc:7d:29:0b:5c:08:46:
74:fe:c8:33:04:de:cc:33:c9:80:af:e2:fa:5c:d1:1f:fd:2b:
54:2b:c1:49:2f:f0:e7:57:f8:af:49:b8:ef:6a:b7:ea:70:bd:
a8:24:8c:04:f0:ba:72:a6:3e:be:07:1a:3c:43:d2:19:65:2b:
e0:16:35:8e:57:9b:87:ad:f9:87:8a:8e:2c:a0:81:1d:aa:23:
fd:15:f1:7a:42:52:c1:ec:43:06:9e:d4:b2:39:7d:1f:09:89:
4b:95:14:3a:b1:04:84:a8:cb:c4:57:d1:08:80:bc:8c:ec:42:
e7:30:a4:32:0e:b3:c1:50:22:b6:94:fb:8e:0a:83:d3:3c:7f:
22:bb:94:45:29:1c:fa:65:6c:58:e8:65:26:a3:5a:bb:49:80:
ac:b9:d3:74:df:66:0b:76:a4:fb:1b:c4:41:60:de:bd:11:27:
1c:09:1f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:40 2025 by rpki-client