Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52EF42ACCC1111EFB7E886BA762E951A.roa
File: 52EF42ACCC1111EFB7E886BA762E951A.roa (raw, json)
Hash identifier: bHdtKFCT2tS9i16A6xVqDRlX1GGpOiEZ6U+Q6EWbB0w=
Subject key identifier: 48:8C:67:FD:7F:D0:D0:B3:AE:39:7F:11:29:C7:E2:D5:93:98:EB:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F865
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52EF42ACCC1111EFB7E886BA762E951A.roa
Signing time: Mon 06 Jan 2025 09:33:45 +0000
ROA not before: Mon 06 Jan 2025 09:33:41 +0000
ROA not after: Thu 06 Feb 2025 09:33:41 +0000
asID: 200373
IP address blocks: 156.249.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 09:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63589 (0xf865)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 09:33:41 2025 GMT
Not After : Feb 6 09:33:41 2025 GMT
Subject: CN=677ba379-c428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ae:1b:c3:29:3e:55:8d:cb:65:aa:f6:64:a6:
f1:64:f5:e7:bb:d3:5f:f0:6e:b2:d5:54:39:79:04:
21:b4:59:47:9d:62:14:f2:70:9d:eb:62:5f:41:3c:
8f:ca:2e:4a:8e:44:25:4e:64:95:91:ce:4d:6b:7e:
54:d9:b4:4c:9a:2a:9e:34:07:f9:88:19:4c:47:ac:
02:fa:35:b0:a9:d3:32:05:9f:e7:fb:70:8d:63:9c:
9a:03:f0:e4:a1:61:6f:99:40:98:21:4e:9a:e5:f3:
62:16:3a:48:3f:ac:81:57:55:ca:6e:94:1e:f6:36:
08:ca:e8:ac:0b:25:c0:73:62:44:b3:35:5d:e4:78:
03:95:58:56:88:0c:43:ec:18:6e:ed:16:a5:04:50:
0e:b7:26:22:5d:9a:7d:b6:e2:d4:c5:8d:47:88:3f:
90:fb:b5:17:87:3f:7b:05:ac:99:1f:67:9b:ce:4c:
47:90:10:e5:94:44:e1:8e:d3:00:22:e7:53:0c:cd:
c8:8b:76:66:c5:23:d4:ae:f4:ce:1c:d9:01:72:33:
c7:9b:d2:93:69:cc:d9:6c:d0:0f:f7:68:09:48:5a:
3f:5a:eb:09:b2:f2:03:52:97:12:63:ce:3b:73:9b:
a4:05:17:ab:4d:49:86:f1:f6:ab:c0:80:46:b8:ee:
ee:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8C:67:FD:7F:D0:D0:B3:AE:39:7F:11:29:C7:E2:D5:93:98:EB:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52EF42ACCC1111EFB7E886BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.138.0/24
Signature Algorithm: sha256WithRSAEncryption
25:2a:de:94:1a:d7:19:93:6c:61:3f:d3:6e:c9:7b:66:65:a6:
60:2a:95:91:c2:c5:ea:6c:5b:92:f7:12:9f:c1:bb:e0:ac:4e:
98:ec:2a:8e:08:63:d2:9a:85:0b:a8:a5:e0:5f:7c:48:00:ab:
e5:38:cd:cf:2b:8e:32:6b:15:07:ff:8c:a8:c9:45:9b:4b:8a:
e2:7a:51:55:8f:19:2e:d7:37:cf:15:82:79:87:6b:db:ca:3f:
0f:41:32:dd:2e:22:e7:54:da:ac:18:9d:9c:e3:5f:d8:b4:88:
09:04:03:ef:64:b9:15:6b:56:e6:ce:50:1e:3b:4b:ca:ed:f1:
db:cf:e1:ec:1b:b2:c4:ba:91:a2:eb:b8:12:9e:12:64:a6:8d:
78:78:99:cc:a8:07:45:90:b1:fd:46:ed:5c:5c:18:19:7d:eb:
b6:24:c3:5c:2b:33:d3:78:f2:f6:0d:2f:ae:85:da:ed:8b:0a:
93:aa:21:53:c2:b8:a6:ba:58:f0:65:91:e2:a4:12:6a:dd:2c:
03:a4:f4:a8:35:da:5a:1e:91:25:3e:61:a6:cc:ef:03:a3:dd:
8f:44:dc:f7:0c:0b:29:fd:61:88:ce:90:21:67:89:06:b2:2d:
3e:ac:0d:d8:35:8c:87:cd:c0:14:68:1b:77:5e:df:21:51:21:
24:e4:05:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:28 2025 by rpki-client