Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52580552983811EF856BE46F762E951A.roa
File: 52580552983811EF856BE46F762E951A.roa (raw, json)
Hash identifier: CWvfk5lK+al6RdRirUnkDcs3JPBsvoVK1Av4rxmBKPU=
Subject key identifier: 4A:D5:FF:53:58:94:65:BE:B1:77:13:F4:F1:CD:40:72:1A:76:78:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CB9D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52580552983811EF856BE46F762E951A.roa
Signing time: Fri 01 Nov 2024 10:01:54 +0000
ROA not before: Fri 01 Nov 2024 10:01:50 +0000
ROA not after: Mon 25 Nov 2024 10:01:50 +0000
asID: 137547
IP address blocks: 156.245.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52125 (0xcb9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 1 10:01:50 2024 GMT
Not After : Nov 25 10:01:50 2024 GMT
Subject: CN=6724a712-5833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a9:f7:3a:20:62:54:3d:15:a0:f5:76:2b:9d:
b8:85:3d:9f:96:80:d7:05:1a:64:0a:43:7b:29:00:
2a:9b:a7:5f:c9:9a:9f:6d:87:68:f1:25:41:89:09:
be:c8:ea:ae:35:98:4d:36:29:bc:0b:05:3f:4c:45:
4b:77:f0:d2:32:81:89:33:7e:da:bd:56:c1:72:b4:
29:00:f7:cc:e6:18:b5:34:5d:71:81:c2:1d:b7:54:
ea:ea:09:74:09:be:f0:a7:10:b6:01:4e:70:58:6a:
31:2d:a9:f5:e1:1e:bc:57:bc:d7:12:54:01:66:85:
8e:b0:dc:d8:c1:09:4c:b7:90:b0:b2:3a:c4:f3:49:
d1:ab:82:6d:2c:a2:7d:91:67:4f:22:59:8b:48:1c:
40:fa:91:a1:63:56:8f:89:4b:01:e6:1a:bf:6f:e4:
4b:8a:44:44:78:fb:74:62:79:99:42:14:dd:07:51:
70:d1:0f:cc:f4:f0:e0:26:40:a8:cd:05:54:9e:23:
c6:6e:02:cb:14:14:36:54:85:98:26:f7:43:b1:71:
44:38:c9:89:00:a9:26:87:bd:10:4a:00:d3:df:e3:
4d:fe:a6:92:d2:ba:a3:07:41:aa:f2:55:00:89:cb:
68:5b:07:7e:e3:ac:d6:44:b6:a1:09:fd:39:02:32:
af:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D5:FF:53:58:94:65:BE:B1:77:13:F4:F1:CD:40:72:1A:76:78:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52580552983811EF856BE46F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.244.0/22
Signature Algorithm: sha256WithRSAEncryption
25:0d:f2:fc:c5:e6:e0:77:24:9b:e2:7b:cc:10:e6:9f:2c:f4:
b9:12:8e:38:8c:2b:57:5e:66:10:55:95:a6:83:dc:59:03:13:
13:44:33:97:f9:00:a0:8d:55:4b:d1:a2:d4:58:4c:9c:29:24:
27:ea:3e:b0:4d:0e:40:a1:bc:11:5b:fb:24:2a:a1:59:8e:b8:
10:f8:1a:03:58:34:c8:d5:90:cc:42:ca:88:36:15:ad:29:e7:
40:10:e0:8d:2b:c5:03:2b:04:00:5f:5f:bf:17:bb:44:70:49:
64:e1:1d:f8:06:a3:a4:6c:31:c6:fe:2c:a5:bf:dd:e8:18:fa:
1d:86:c8:ed:35:d6:80:3a:4c:50:d0:61:30:1a:4b:57:39:e6:
f2:ba:ad:11:d6:73:00:f3:89:de:9b:16:12:42:1f:50:a0:f4:
d9:63:a6:a6:48:1e:32:5c:eb:27:f3:d8:4e:97:ec:bb:4b:c4:
c5:80:5c:36:ba:7c:13:58:e9:9a:78:14:bc:79:4f:27:6d:be:
20:94:9c:02:01:15:6a:c9:52:99:9d:a8:c9:75:0d:b1:ff:8d:
96:0a:91:fc:22:49:c7:61:88:45:3e:6d:2a:32:f5:9e:e3:93:
a5:82:ac:7e:53:fd:e2:b0:86:55:68:2f:69:e5:00:6a:ff:0c:
b1:d4:d8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:30 2024 by rpki-client on console-ams.rpki-client.org