Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52A4C1CEC32811EF9276718E762E951A.roa
File: 52A4C1CEC32811EF9276718E762E951A.roa (raw, json)
Hash identifier: eZHZzvsWtkRoV75LYtwftqtRDBnS6zg+uKUPIEErDX0=
Subject key identifier: B0:09:B8:E0:EE:01:AD:6D:20:31:24:5E:EB:92:99:94:9D:3C:4C:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EAA5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52A4C1CEC32811EF9276718E762E951A.roa
Signing time: Thu 26 Dec 2024 01:25:42 +0000
ROA not before: Thu 26 Dec 2024 01:25:39 +0000
ROA not after: Wed 10 Dec 2025 01:25:39 +0000
asID: 984
IP address blocks: 156.243.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60069 (0xeaa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 01:25:39 2024 GMT
Not After : Dec 10 01:25:39 2025 GMT
Subject: CN=676cb096-e3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e0:b7:1d:5d:ea:5d:56:3e:d0:35:e4:c1:dc:
9f:c1:2f:a9:64:59:e6:bf:7a:61:50:45:10:e9:38:
c5:b1:e4:72:91:db:7e:0b:cc:84:74:c1:d2:a5:e7:
8a:45:c9:64:c9:09:ab:4d:cc:7e:82:6b:40:51:78:
62:9c:2a:a0:1e:c4:e2:e2:43:3d:43:00:e8:e7:cc:
b6:ba:b6:60:be:a3:fb:14:2d:48:aa:eb:48:ba:d6:
46:e4:cb:f3:b5:69:43:ef:7f:32:2d:68:84:85:2b:
62:e7:1b:94:8c:eb:4a:c7:7f:f3:31:2f:44:38:76:
ca:2b:93:81:92:51:2c:d3:78:f9:fe:c5:84:33:50:
74:e6:a0:29:7f:66:11:e1:5e:53:a6:13:19:e0:92:
33:1a:ab:f5:15:cd:1a:94:7b:c7:51:07:fd:a0:50:
16:ff:10:46:85:5c:1c:88:20:39:a7:0c:7c:07:c8:
9b:b4:97:12:e3:64:20:20:cd:2f:c5:6c:b6:8d:87:
31:6c:92:94:4e:f1:c2:95:2d:89:af:71:74:65:fd:
b2:d6:1d:cb:40:ca:f5:7f:ad:e9:05:4f:c2:09:46:
53:e3:8e:d3:d1:3d:fa:6b:45:a8:e6:3f:de:e1:90:
b6:4d:9d:e3:a3:0f:13:21:72:49:07:83:8c:6d:57:
2b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:09:B8:E0:EE:01:AD:6D:20:31:24:5E:EB:92:99:94:9D:3C:4C:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52A4C1CEC32811EF9276718E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.146.0/24
Signature Algorithm: sha256WithRSAEncryption
16:db:49:49:8f:75:06:7e:21:52:01:4b:cd:e8:ae:fe:37:96:
f3:16:25:dc:3d:18:eb:41:37:94:37:93:57:1d:99:1a:14:01:
4f:fa:74:8f:2e:60:62:2a:60:09:69:65:35:e4:28:dc:cc:4a:
dc:f3:87:99:80:18:84:1d:26:f9:86:ce:9f:85:87:17:21:8a:
49:43:23:61:15:1d:97:3e:86:91:81:83:9a:3a:5c:16:3a:d5:
a6:17:fa:60:73:00:8c:d9:36:80:bf:18:b3:83:83:ad:56:47:
8f:cc:dd:b5:f2:85:1a:75:55:b3:a0:3f:ee:a6:7e:c5:65:11:
83:39:50:8a:42:a1:88:0c:0a:94:d6:d1:3d:58:74:f2:6c:5c:
86:81:6b:01:c4:ba:4a:34:41:71:93:16:34:da:ff:84:a4:37:
61:a8:5e:ac:fb:67:3a:74:3e:b7:06:c0:ca:ef:64:ba:00:cd:
44:ef:f9:43:5b:b8:7c:9e:1b:74:29:9a:5b:0e:3d:1a:11:a9:
2b:07:3c:42:ec:aa:67:ce:b8:3b:3d:9b:35:1d:e3:c7:51:3d:
f0:14:d2:92:2b:95:fe:82:16:06:4d:66:5d:de:c3:63:5a:0d:
9e:7b:f3:7d:f4:20:98:1b:b2:c3:f2:7a:ce:44:c8:6c:2d:25:
ce:68:82:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:03 2025 by rpki-client