Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/FDB032960EFB11F081A1A642762E951A.roa
File: FDB032960EFB11F081A1A642762E951A.roa (raw, json)
Hash identifier: 3SP9JDkHOJzvhqCvVIclrqRnF0UeCEIYVIeKTn2E+g4=
Subject key identifier: 71:29:15:27:99:BD:43:EE:BC:36:F3:A1:47:36:53:25:75:4A:7C:DC
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 07B8
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/FDB032960EFB11F081A1A642762E951A.roa
Signing time: Tue 01 Apr 2025 13:19:50 +0000
ROA not before: Tue 01 Apr 2025 13:19:45 +0000
ROA not after: Sun 30 Apr 2045 13:19:45 +0000
asID: 20011
IP address blocks: 196.44.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:08:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1976 (0x7b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Apr 1 13:19:45 2025 GMT
Not After : Apr 30 13:19:45 2045 GMT
Subject: CN=67ebe7f6-bc81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:72:6e:f9:b7:e1:23:c8:17:ac:43:ee:5e:85:
1f:b2:32:ad:41:a1:29:87:c1:7f:4c:f4:79:d9:d7:
f9:60:a7:f4:b2:17:ce:91:6c:00:5d:6e:a0:38:20:
a3:85:a0:85:4f:99:dc:1e:08:83:12:4a:5f:8c:57:
40:55:ee:9e:68:06:40:39:56:92:e7:be:af:60:c9:
f5:d9:82:c0:83:6f:78:a4:24:4f:5a:c7:07:50:74:
3a:5d:cb:9a:bf:b5:2b:d3:f7:e9:c2:e6:37:ff:2a:
55:fe:c4:1c:b2:9c:41:3d:20:53:94:08:6a:1e:ef:
5a:b5:f9:a9:9b:c7:be:59:ef:42:ea:39:b5:f8:e2:
66:f3:62:28:99:c5:a6:a4:c4:e9:f4:b2:ae:15:8e:
fb:0a:48:8a:b5:00:09:03:a0:8c:56:f6:af:34:48:
5f:7d:86:17:ab:2f:a8:ea:18:ef:de:dd:95:dc:4c:
37:76:c6:9b:68:8f:9e:f6:1c:7d:cc:c2:e7:13:63:
b8:58:2b:f3:09:aa:1f:3f:8c:45:42:43:6a:fa:70:
d0:8f:5a:c1:00:c9:24:ff:65:86:38:ab:6a:f7:34:
a0:ad:fd:f9:a7:13:23:31:49:5b:a9:a1:ba:dd:85:
e0:0c:76:d3:ef:23:14:ce:8f:5c:58:80:c5:6a:f7:
78:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:29:15:27:99:BD:43:EE:BC:36:F3:A1:47:36:53:25:75:4A:7C:DC
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/FDB032960EFB11F081A1A642762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.192.0/20
Signature Algorithm: sha256WithRSAEncryption
20:fb:c8:58:c5:5c:e4:79:53:17:31:64:3b:5e:88:a8:84:c7:
99:f7:18:68:e1:99:cd:e8:6a:37:98:cf:b6:a9:08:2c:49:ee:
ac:59:77:f3:bc:65:87:e8:99:aa:7f:7a:32:de:63:49:f8:e4:
44:d1:2c:19:3e:9e:be:d2:19:21:f5:42:27:14:7f:89:23:92:
d4:c3:cc:4b:88:7a:1b:4b:d7:8d:c4:05:95:f8:4a:ae:39:ed:
99:33:88:a0:dd:d7:0c:24:8c:91:6b:f9:d6:fe:41:29:d8:2a:
08:7a:e2:8e:67:ef:1a:c6:d2:93:56:0f:d8:ba:b2:48:f0:2d:
47:68:05:fd:fa:a0:b2:e1:ea:c9:ee:da:cc:46:1e:33:e9:fb:
00:e5:1e:fd:6d:9c:ca:a5:7f:ab:78:e4:19:a5:23:6a:51:7e:
86:29:ee:6a:8f:6c:81:29:78:1d:a6:2d:e5:88:f2:a4:e8:dc:
6e:11:c0:f3:d3:30:fb:ed:e1:f2:83:0b:59:4e:ea:ff:41:13:
73:98:a3:4b:45:cc:2c:f6:d7:94:cb:6b:48:cb:04:6e:cb:ab:
36:54:12:b4:b5:1a:91:1e:ce:4e:85:29:9f:77:c2:a1:f9:26:
21:d9:ca:aa:dd:7c:fa:45:3b:e2:09:8b:bf:03:93:27:4a:f9:
8f:ad:0b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:17:15 2025 by rpki-client on console.sobornost.net