Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52D09A82CD6011EF81505D8B762E951A.roa
File: 52D09A82CD6011EF81505D8B762E951A.roa (raw, json)
Hash identifier: KRmc6nsj0bdL3en+lIxs97t24Uw6SkDnB0GoNNP5nOo=
Subject key identifier: 78:0E:88:87:40:12:0F:DF:EB:DB:AA:29:B1:38:6B:74:8C:93:99:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF2D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52D09A82CD6011EF81505D8B762E951A.roa
Signing time: Wed 08 Jan 2025 01:31:46 +0000
ROA not before: Wed 08 Jan 2025 01:31:42 +0000
ROA not after: Sat 13 Dec 2025 01:31:42 +0000
asID: 984
IP address blocks: 156.247.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65325 (0xff2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 01:31:42 2025 GMT
Not After : Dec 13 01:31:42 2025 GMT
Subject: CN=677dd582-12e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:31:f2:6c:1b:b6:48:c9:b8:da:8e:cc:56:08:
92:b3:33:28:90:65:83:11:54:6f:d5:42:36:d2:9f:
68:9f:f2:d5:18:33:a0:99:4f:f2:d0:62:4e:85:2d:
24:66:01:c4:91:96:b2:de:dc:f7:2a:11:57:23:56:
e1:a4:78:5c:79:bf:01:50:bb:80:27:ed:62:0b:95:
1f:18:b4:58:4f:88:10:d5:61:4e:dc:58:f8:cd:4a:
87:22:dd:8f:4e:bf:a4:59:fc:14:14:e1:77:77:ba:
45:1a:e4:f6:d6:a6:bd:1c:5b:6b:18:54:f5:85:81:
08:a7:a7:29:e5:95:4d:8e:64:28:ce:99:c8:a7:8b:
d6:24:7e:4f:18:93:67:a9:11:5b:e5:cb:73:ca:75:
07:21:fc:2d:78:2a:4c:07:fb:79:41:90:06:bd:fb:
42:27:62:a1:43:68:a6:c0:40:2a:58:6d:b6:04:76:
58:a8:8a:04:6f:44:d8:14:6c:8f:4e:ae:7c:d6:d9:
72:22:91:4d:dd:5f:af:4c:4d:06:ee:55:c0:40:7b:
5c:f5:0b:39:b1:0e:2c:6b:7c:f5:c0:5c:e4:64:39:
43:a4:bd:5c:3b:a2:8a:43:d0:21:e0:e0:8b:8e:34:
0d:8d:28:57:db:56:4b:bc:e9:2e:ad:b0:21:bb:3b:
11:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0E:88:87:40:12:0F:DF:EB:DB:AA:29:B1:38:6B:74:8C:93:99:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52D09A82CD6011EF81505D8B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.95.0/24
Signature Algorithm: sha256WithRSAEncryption
34:80:8b:6f:ea:0f:80:93:4f:6a:b0:13:4e:77:c3:a0:10:bd:
07:75:f2:89:f0:a0:2d:c4:25:d8:8f:57:9d:5f:ab:f6:77:90:
87:7d:85:8f:67:9b:8c:4d:d5:d0:31:d4:89:10:2d:56:02:40:
33:c9:a0:9d:77:b7:76:3f:fe:87:7c:c1:4c:86:e2:dc:f1:11:
5b:c8:81:70:40:77:ab:06:20:8d:4d:d5:8e:7a:cc:ba:7d:9b:
7d:d3:18:07:14:2e:7c:d0:52:9f:98:2d:2a:07:02:f4:98:46:
c0:87:f6:08:58:13:fd:c5:f6:55:02:74:1c:0c:5b:b4:f1:7e:
70:4d:90:47:09:0b:c9:98:48:90:c1:32:25:b9:82:96:50:a3:
87:4a:87:63:7a:d0:ab:73:1a:ef:cf:aa:82:68:9a:95:f6:36:
47:69:69:e4:55:d9:6b:7b:b6:6f:bc:33:2a:0d:a9:62:c1:78:
fe:54:db:a6:b1:a2:ff:4f:39:f5:31:b8:1d:e1:fe:37:fd:bb:
55:b6:14:13:3f:f2:dc:70:7b:6a:73:75:63:ac:27:dd:04:bd:
06:25:1c:8d:f4:58:db:90:99:09:8c:04:9a:24:47:49:ad:10:
e9:37:74:c4:b1:f0:94:d0:6f:1d:b9:c7:a8:ca:0b:f2:d0:e8:
64:2d:e7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:35:49 2025 by rpki-client