Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52A7576EED1611EFA29E37A8762E951A.roa
File: 52A7576EED1611EFA29E37A8762E951A.roa (raw, json)
Hash identifier: rEivdK7q7IYKnW2k43UKWZ3jVKQpncSa83Pm8pO9dfw=
Subject key identifier: 8F:6B:14:5D:78:8C:F7:1D:DE:00:D9:27:1A:23:35:86:FA:B7:E6:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0124CE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52A7576EED1611EFA29E37A8762E951A.roa
Signing time: Mon 17 Feb 2025 10:02:40 +0000
ROA not before: Mon 17 Feb 2025 10:02:36 +0000
ROA not after: Tue 18 Mar 2025 10:02:36 +0000
asID: 137899
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:26:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74958 (0x124ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 17 10:02:36 2025 GMT
Not After : Mar 18 10:02:36 2025 GMT
Subject: CN=67b30940-e342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5c:76:51:c2:85:13:f5:96:37:b5:a2:12:4b:
e5:cc:ca:74:26:29:71:12:6e:19:40:24:a4:4f:d0:
33:cd:7a:9f:5d:e6:0e:c7:51:eb:24:ca:b1:65:ee:
25:6e:83:e6:c3:b3:3b:8b:a6:fb:fc:77:ea:c2:e2:
20:c1:46:5a:45:16:cf:06:36:33:d1:5f:64:14:40:
3b:36:f4:75:04:1b:0c:c0:3c:79:e8:ac:ed:28:21:
e0:e8:99:7b:83:e4:8c:01:0e:85:cd:9e:fb:40:6c:
9a:8f:1c:f0:a3:7a:de:f0:94:5e:75:52:9c:d2:15:
72:d2:60:c4:e0:cf:d5:e7:b4:1f:89:44:fe:87:be:
9c:8d:d1:d6:fb:5c:94:ef:1c:d1:4d:e7:7c:14:79:
8c:86:e4:5e:45:b9:bd:67:ab:36:6b:c0:f1:56:53:
ed:39:2b:87:ae:4f:a8:ce:54:b0:7e:d2:a3:43:e4:
ce:fd:b4:a7:38:64:ac:54:44:cf:dd:db:19:4a:4b:
67:a4:0a:b9:bf:08:01:4c:c3:81:ac:1b:4a:4b:bc:
8f:cf:e2:61:1e:a6:ff:72:b9:9d:e9:c7:31:f3:dc:
4b:76:f1:55:e8:fa:f3:31:43:b4:4b:2d:87:b2:22:
e3:a5:8d:ec:0f:dd:6e:16:c4:d2:21:81:e5:31:0c:
30:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6B:14:5D:78:8C:F7:1D:DE:00:D9:27:1A:23:35:86:FA:B7:E6:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52A7576EED1611EFA29E37A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
2c:ad:19:d3:64:14:74:28:09:6d:d4:81:a5:16:17:77:54:64:
c7:7c:f1:ab:ca:1f:02:81:a5:8d:44:9d:02:10:25:3a:d8:5a:
43:5c:57:3d:00:9d:ae:a7:e4:6e:45:0a:0e:b2:42:28:a0:80:
3f:0a:58:5c:49:16:37:f7:54:0a:de:72:44:6d:a8:c8:b1:a0:
fd:6c:dc:a4:d3:46:f2:87:22:7e:98:a6:7a:53:db:79:0c:50:
5f:fb:5a:16:3d:e9:0d:7b:68:da:a5:68:b2:24:5d:72:a0:20:
d7:dc:b5:cd:d4:cf:b9:92:3e:12:8a:a1:3a:ee:1a:29:f5:30:
ad:5f:7c:65:a2:cc:98:ec:a6:1f:c2:8c:de:15:4b:84:79:6e:
3a:da:49:60:f0:51:db:5a:c3:d3:c5:66:85:af:84:0c:23:20:
bd:0d:4d:60:19:34:80:63:6f:0a:99:f2:5b:68:53:33:55:47:
ca:b7:80:18:30:c3:13:af:28:7b:d0:58:8d:59:3e:74:1b:f4:
39:c8:75:d1:09:af:ff:8a:d2:ea:7f:08:89:c6:97:77:6a:c8:
59:43:19:3c:1d:f6:7d:44:f7:2d:cc:c3:52:61:57:4e:11:ae:
0e:f8:c1:58:26:a6:b1:c4:ec:1f:7a:85:53:d5:21:cc:dc:52:
a6:2a:dd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:43:05 2025 by rpki-client