Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72522D4AE9B611EF864FBFB1762E951A.roa
File: 72522D4AE9B611EF864FBFB1762E951A.roa (raw, json)
Hash identifier: uEmSrtzBSkUx4lgmwB7FA+wko0q1sCIu7KOep74IE+0=
Subject key identifier: DC:A3:B4:5D:F2:F9:56:E6:B8:83:9A:A8:9B:CE:35:B5:6B:1D:01:93
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0121BC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72522D4AE9B611EF864FBFB1762E951A.roa
Signing time: Thu 13 Feb 2025 02:58:48 +0000
ROA not before: Thu 13 Feb 2025 02:58:44 +0000
ROA not after: Wed 31 Dec 2025 02:58:44 +0000
asID: 17561
IP address blocks: 156.236.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74172 (0x121bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 13 02:58:44 2025 GMT
Not After : Dec 31 02:58:44 2025 GMT
Subject: CN=67ad5fe8-6a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d0:df:a2:57:8d:f9:ff:b2:fa:4f:a2:74:58:
a0:c9:82:72:3c:a3:74:c5:43:03:80:9d:08:50:03:
d9:6b:1d:bf:42:db:50:6f:e2:2e:09:f9:0f:7a:2a:
8b:8c:0a:b7:70:7a:f4:c1:12:8a:21:fb:bf:23:49:
1d:10:3c:4c:5b:0b:12:6c:e6:9d:41:b0:68:48:f1:
d5:1b:54:c6:47:b3:16:9d:85:8c:78:a7:b0:f7:b8:
51:e2:e8:62:12:87:88:a2:e6:dd:cb:11:9a:3e:69:
c7:3e:f3:1d:dd:e3:0b:fd:4a:54:7e:0e:2d:52:d6:
74:3c:7f:78:41:f1:ec:ab:26:92:b2:c9:e5:78:33:
b2:78:94:07:3e:01:68:c2:3c:66:eb:88:1d:5c:02:
a1:d0:b8:4f:92:d7:c7:93:94:53:b1:b9:0e:db:22:
74:88:5e:e4:21:39:7b:80:42:ac:04:55:55:a1:52:
e2:1d:32:29:78:47:9e:81:0d:2f:4b:d9:f9:be:ad:
68:df:0f:4f:a4:50:9a:1f:3c:85:f7:cc:f5:92:4b:
48:7b:70:69:6a:06:4b:69:1f:cd:9b:0a:3c:28:bc:
be:e4:5d:c8:00:bd:41:82:2e:53:c1:40:95:e2:71:
16:8c:a5:68:82:d9:74:e3:11:88:e9:7b:96:a8:d9:
5a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A3:B4:5D:F2:F9:56:E6:B8:83:9A:A8:9B:CE:35:B5:6B:1D:01:93
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72522D4AE9B611EF864FBFB1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.52.0/24
Signature Algorithm: sha256WithRSAEncryption
51:72:5f:03:12:c1:f7:37:3c:c5:79:31:06:b3:0e:82:88:dd:
63:74:ef:f6:c9:7a:d8:7f:9f:fe:44:7e:a1:c3:ca:62:11:cb:
6d:15:0c:c5:d9:f2:97:7e:98:37:7c:db:21:96:21:86:26:77:
70:c2:44:14:ac:d3:75:4f:e3:82:f3:1d:cf:74:49:07:0f:30:
b6:47:13:1e:ae:54:7d:67:e6:17:be:54:cd:1d:3e:c8:a4:2c:
55:22:57:cb:95:6f:32:a9:73:56:0e:1f:09:91:cd:f5:39:24:
11:f3:ad:ef:88:43:f0:4b:7f:1d:95:a9:cd:01:e2:97:8c:07:
97:a6:86:01:31:57:06:6e:36:a9:05:d6:ff:0d:15:90:a1:e9:
f1:aa:a8:1c:b8:a5:39:c0:bb:6b:a0:f4:11:a5:54:93:d8:79:
ed:48:9f:a6:5e:b5:df:1a:1a:0e:ee:b6:9a:9a:3c:cd:4b:c3:
7c:b8:86:8e:e7:63:70:ca:69:02:b2:41:9b:15:ce:25:a0:ed:
9b:05:2d:6d:a3:f2:e0:30:a0:6c:50:d4:90:af:b2:74:5f:46:
01:2e:25:e8:cb:b2:eb:51:8c:1e:ed:32:47:4b:01:27:6a:fc:
84:ce:b0:e0:32:28:62:b8:af:22:ab:70:11:85:01:5f:63:ae:
b0:38:e7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:49 2025 by rpki-client