Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/054E6368C2A511EFAB057A5D762E951A.roa
File: 054E6368C2A511EFAB057A5D762E951A.roa (raw, json)
Hash identifier: kwF11ea94LEaK+eIc98jO1XDEQVh01RfJuUXLIRr1+U=
Subject key identifier: 2E:50:D9:FA:44:A5:C9:1A:05:35:52:CA:6B:0A:A4:A6:54:25:D7:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E9FD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/054E6368C2A511EFAB057A5D762E951A.roa
Signing time: Wed 25 Dec 2024 09:45:49 +0000
ROA not before: Wed 25 Dec 2024 09:45:45 +0000
ROA not after: Sat 15 Feb 2025 09:45:45 +0000
asID: 138915
IP address blocks: 156.244.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59901 (0xe9fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 09:45:45 2024 GMT
Not After : Feb 15 09:45:45 2025 GMT
Subject: CN=676bd44d-7ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e7:63:e6:f9:52:1f:17:e0:76:62:1a:b5:db:
53:a7:78:e9:db:bf:48:6e:dd:e2:4b:13:53:2d:de:
85:3b:da:d0:9d:41:74:f1:6c:c6:41:be:7c:8e:54:
21:4e:60:df:4b:b6:cc:e3:ff:5c:ba:b3:89:ac:18:
5a:c1:b8:95:60:3a:b1:ed:55:8a:5b:6e:97:ac:2b:
6b:3d:9a:34:c3:e9:5c:47:ee:22:42:a4:38:68:3e:
0e:12:b5:eb:b6:5b:e4:f3:42:54:86:e8:cd:2c:03:
52:b9:c9:11:00:ee:e3:1e:94:b9:e1:5d:ca:55:f2:
16:fc:71:d9:1d:18:a1:c6:07:73:3a:2f:86:7f:d2:
f6:54:79:5c:e3:ad:54:a7:88:cc:4d:0e:72:6d:6f:
c0:9a:77:68:90:80:60:20:da:8b:32:4a:23:76:1b:
7e:f8:50:d1:7e:8c:e0:a5:0d:a9:f3:d1:b9:24:9a:
98:dc:a9:57:5a:11:b1:16:9f:32:f4:0e:6b:9d:be:
c9:16:c2:1b:1f:a1:0d:fc:e9:cd:a0:f6:7d:67:00:
b0:26:6f:e7:cb:07:0c:43:f8:26:32:20:cf:49:90:
e5:cd:3d:bd:43:72:56:17:ff:75:29:08:69:36:62:
27:7c:19:26:68:9f:06:66:ca:c6:93:e0:40:fc:51:
dc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:50:D9:FA:44:A5:C9:1A:05:35:52:CA:6B:0A:A4:A6:54:25:D7:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/054E6368C2A511EFAB057A5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.48.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:b4:43:2b:e2:f5:c6:2c:6b:d9:30:37:36:46:6a:56:4f:36:
ba:d3:5e:68:a2:d0:eb:97:ef:68:31:2a:e6:cf:5b:45:68:e7:
54:f8:3e:e9:b4:52:94:e3:1a:a7:12:bc:e5:d3:ed:c7:c0:4a:
20:99:86:6a:ba:73:51:0f:4f:e6:ea:3b:30:94:63:e8:ea:f5:
19:a2:1e:9b:05:10:ce:bb:7d:86:66:30:5d:41:21:e4:ac:e4:
05:e5:8b:e1:92:b6:41:67:7d:9f:5d:7b:0c:32:80:37:e0:ef:
99:cb:5c:72:08:4e:9e:38:5a:6b:17:8f:d0:4f:1d:54:e4:98:
b4:ab:05:e7:cb:40:00:64:c5:79:02:59:bd:ac:83:8b:a1:b1:
9a:cf:6c:f8:82:76:98:00:14:0e:99:ae:d1:91:92:62:b1:20:
fd:fe:84:47:3b:9b:eb:bd:bd:c4:81:2a:b4:29:07:49:9d:ab:
25:da:90:89:01:11:2e:4c:83:0a:7d:46:d2:2c:bf:33:dd:8f:
83:fb:9f:79:86:0e:e9:06:3b:3a:97:5e:96:60:df:af:5a:5d:
73:fb:ba:61:80:76:19:d6:a2:85:d9:4d:3d:38:78:95:af:50:
62:9b:07:fd:69:d4:97:ce:c0:d9:b4:e8:a8:f4:fa:71:cd:1a:
31:cb:c2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:32 2025 by rpki-client