Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52FC85BCF44711EFB494F577762E951A.roa
File: 52FC85BCF44711EFB494F577762E951A.roa (raw, json)
Hash identifier: lg1dVgI3dFr19PtdETyycDNhqHaWWWIx8d5zfdFSJCs=
Subject key identifier: 04:9E:AA:F4:14:E2:AF:74:64:99:E7:25:29:B3:47:73:D8:53:03:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01334A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52FC85BCF44711EFB494F577762E951A.roa
Signing time: Wed 26 Feb 2025 13:41:04 +0000
ROA not before: Wed 26 Feb 2025 13:41:00 +0000
ROA not after: Thu 19 Feb 2026 13:41:00 +0000
asID: 984
IP address blocks: 156.252.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78666 (0x1334a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 13:41:00 2025 GMT
Not After : Feb 19 13:41:00 2026 GMT
Subject: CN=67bf19f0-801e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:1c:28:8a:12:38:f0:00:8e:66:57:fe:74:
64:77:47:53:9a:ca:86:a4:16:a5:86:10:da:62:e8:
0d:61:38:0d:1f:75:30:48:92:e5:87:2d:0f:9a:94:
44:dc:17:26:76:76:78:10:4c:42:7b:19:4a:ca:66:
3e:a0:f9:df:a4:4b:74:b2:75:c0:13:61:29:94:2b:
fa:e8:1b:d8:d7:16:39:f0:b8:f4:32:59:92:bb:d3:
6c:3d:67:da:f4:59:c9:0f:78:49:56:2e:e9:53:70:
54:b8:13:84:71:a2:f7:de:28:2b:81:c7:d6:b1:0f:
17:4e:42:15:40:7f:a4:76:61:c4:45:e3:0d:f4:58:
a9:55:10:c3:33:37:99:77:df:a5:90:5b:b0:6c:01:
55:d4:1a:51:67:42:39:db:de:78:61:08:a5:ef:3c:
f1:ea:53:51:c7:a2:7d:0d:f8:f7:6c:12:ad:47:8e:
f8:33:2a:fd:49:bb:7e:76:24:ab:66:37:6a:8e:d3:
9a:cb:54:9b:55:59:12:b7:87:ae:fe:d2:f5:e5:75:
09:9a:9e:81:83:24:55:b8:9c:37:8e:12:e7:a5:d9:
ef:b4:b6:60:80:3c:d1:a9:74:cc:25:96:a2:cc:97:
54:b6:ff:86:0d:6c:31:f0:73:c0:2f:d1:64:82:1a:
e8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9E:AA:F4:14:E2:AF:74:64:99:E7:25:29:B3:47:73:D8:53:03:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52FC85BCF44711EFB494F577762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.174.0/24
Signature Algorithm: sha256WithRSAEncryption
89:64:0c:ff:43:89:c0:78:99:f4:c6:80:aa:d9:95:ad:a6:b0:
76:e2:08:2f:67:41:0c:fb:d8:9d:e6:dd:09:37:1c:1e:80:3b:
00:01:c4:1d:5a:d4:12:7d:98:d2:71:88:b7:85:f0:39:40:f9:
ee:7e:c1:93:4e:c3:d6:68:c3:7e:ad:aa:ea:c0:9d:b0:f0:cb:
42:5b:1f:4e:ec:ee:f3:be:ae:00:30:5a:04:94:38:b2:45:e7:
9f:cc:d4:5b:6f:cf:fe:98:5a:df:c1:ba:56:ed:a5:e6:be:85:
bf:37:5a:d0:1d:e4:20:e6:c6:b2:0c:54:6e:16:3a:fb:42:96:
03:fe:0e:2f:c0:c5:87:13:20:8e:72:9e:67:26:a8:b7:36:ed:
99:44:c5:78:34:38:03:18:9a:42:69:1e:27:9e:21:c4:6e:e3:
f2:e3:0e:fa:c8:a5:67:51:52:0e:d0:c0:7a:c0:3a:35:32:89:
4a:8d:29:8f:6e:0d:91:3c:97:76:a7:44:f1:fb:db:5f:f0:1e:
df:38:53:6c:9e:0c:81:28:bc:0e:47:4d:bc:d8:cf:61:3d:ca:
0a:c9:c6:7b:e1:f6:bd:86:d0:26:9a:ac:dd:f4:a9:27:d7:b9:
88:b5:29:84:5b:88:b3:2d:ac:ba:24:59:02:83:ff:8d:52:bb:
b9:a8:11:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:10 2025 by rpki-client