Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52497342CD2711EFA50849A0762E951A.roa
File: 52497342CD2711EFA50849A0762E951A.roa (raw, json)
Hash identifier: J4XD/PY1upIqEh6CCahe11/xLH7rFhsqt7fLy3eH/qA=
Subject key identifier: D8:84:F4:81:CC:13:DB:F4:E2:08:B9:26:CA:D8:57:25:3B:BF:FC:18
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FDA5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52497342CD2711EFA50849A0762E951A.roa
Signing time: Tue 07 Jan 2025 18:43:44 +0000
ROA not before: Tue 07 Jan 2025 18:43:40 +0000
ROA not after: Mon 13 Dec 2027 18:43:40 +0000
asID: 17561
IP address blocks: 156.241.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64933 (0xfda5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 18:43:40 2025 GMT
Not After : Dec 13 18:43:40 2027 GMT
Subject: CN=677d75e0-1075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cc:58:44:c4:b1:e8:c3:73:17:a9:dd:e2:2a:
3b:f6:d9:43:48:59:22:94:3a:4b:88:a4:ef:51:48:
53:01:09:68:d5:4d:6c:e7:b4:14:2c:b5:cf:54:3b:
bb:db:8f:33:5c:00:d4:28:b3:06:b5:c4:d0:f2:5f:
b0:02:4e:21:c4:d5:53:1c:07:35:c2:fe:f2:f5:3d:
42:6c:70:8b:0e:81:c0:e9:3b:39:3f:0c:be:f4:17:
57:ce:f7:99:a4:a2:88:cb:70:c2:ba:07:c6:94:4c:
0a:9c:2b:81:72:87:59:c0:55:a6:19:82:be:cc:a0:
60:00:bf:14:81:be:f8:15:41:e3:01:48:86:83:fe:
2c:fe:3b:cf:cf:a0:de:6d:c6:b3:52:61:d9:9d:4b:
6c:a8:32:b6:14:f2:28:35:84:40:41:5c:25:a5:e9:
07:64:34:73:0e:0c:b5:fd:85:f7:a1:c5:d8:ed:f6:
b1:f8:f6:d8:a4:62:af:96:a5:84:07:f4:21:37:c8:
c2:1c:25:1d:dc:9f:a6:72:07:88:ae:7c:2e:f6:d0:
27:78:41:02:10:23:04:0f:56:cd:32:0f:8a:c1:7e:
f0:6b:4f:d4:3b:50:42:da:d7:1a:b0:43:c8:0b:70:
ae:df:c3:9e:6b:bc:7e:af:ac:13:fc:82:d2:9f:d5:
12:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:84:F4:81:CC:13:DB:F4:E2:08:B9:26:CA:D8:57:25:3B:BF:FC:18
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52497342CD2711EFA50849A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.222.0/24
Signature Algorithm: sha256WithRSAEncryption
77:48:8e:d9:74:67:e3:6d:dc:89:b8:99:05:ca:c2:07:50:66:
ba:83:6a:5d:36:4d:ca:5d:9f:99:71:87:b6:4b:69:9a:dc:3e:
05:18:6d:36:4a:b9:d3:47:f6:65:6d:24:b8:99:ad:b6:1a:86:
1b:81:72:cd:8b:3a:c5:b6:a1:fe:ba:ad:3c:b4:58:91:00:8d:
93:a5:6b:f4:b4:99:f8:76:a7:d5:4e:26:86:87:93:ef:14:8f:
d1:cb:3b:6f:f1:70:5a:ed:df:8a:26:f3:55:9c:99:df:95:4b:
cc:09:d7:24:2d:07:84:6b:63:72:fe:8c:25:01:c6:26:b0:3c:
f0:64:09:03:2e:87:b1:28:8b:07:d4:ee:7f:6d:83:99:c6:7d:
3f:b7:a1:2d:0e:54:8d:f9:10:6d:33:47:a0:02:d9:21:7a:c8:
b1:50:8d:2c:dd:14:9e:61:99:b4:c1:79:76:3b:00:29:1c:4d:
76:10:c2:06:c5:c6:13:13:b1:dc:88:a1:6e:ef:51:79:0c:96:
e6:e0:f1:3b:ed:46:b8:0b:f3:a7:c2:cc:5f:fa:7a:b1:ac:d1:
28:32:20:1a:8a:58:9e:73:5c:ae:e8:a3:bd:6f:a5:da:3c:88:
55:eb:ff:be:21:fd:5a:13:c5:88:16:29:dc:ad:6d:07:12:0b:
cd:95:f1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:02 2025 by rpki-client