Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/085BD9BC210C11F0A56AEA8ADAE4EC9C.roa
File: 085BD9BC210C11F0A56AEA8ADAE4EC9C.roa (raw, json)
Hash identifier: CBSS4kNkZQFoHYl1IVhfwR8uvVeuQ73RZkBtFmxzGfo=
Subject key identifier: 9E:AE:7B:EA:1F:2C:80:97:AC:D2:BE:14:67:06:DE:55:7B:0E:53:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014E5A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/085BD9BC210C11F0A56AEA8ADAE4EC9C.roa
Signing time: Thu 24 Apr 2025 13:00:02 +0000
ROA not before: Thu 24 Apr 2025 12:59:57 +0000
ROA not after: Sun 04 May 2025 12:59:57 +0000
asID: 137263
IP address blocks: 45.195.16.0/21 maxlen: 24
45.195.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85594 (0x14e5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 12:59:57 2025 GMT
Not After : May 4 12:59:57 2025 GMT
Subject: CN=680a35d1-a977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4c:8e:c5:5c:e9:96:4c:29:bc:61:9c:0b:ed:
e3:53:f7:02:20:e1:3c:0f:a5:13:0e:a2:e8:09:89:
68:8a:98:a2:99:6c:74:50:fb:3a:ed:b2:0d:e8:1f:
4e:10:b7:b4:1a:0a:b6:31:c6:f8:f6:c4:e0:80:0f:
b7:b6:59:67:94:d0:54:af:93:1c:ad:dd:8f:3e:ee:
ee:d3:bd:4b:04:c4:18:1e:8b:73:0f:7f:af:a8:25:
da:96:de:44:0e:30:ba:e4:ff:6c:44:6f:94:92:ad:
59:3e:d7:99:31:37:50:b5:48:ca:18:12:2f:da:4b:
4d:e7:65:95:bd:6c:e0:c1:d1:71:4b:96:16:2d:2f:
f4:06:2d:1e:40:30:0c:fc:5a:cf:6e:65:7d:29:49:
2d:20:f4:2b:26:cd:67:95:9f:d7:d0:9c:79:e2:6c:
ce:9c:a4:fc:ab:bc:90:5e:de:bd:65:ba:b6:0a:84:
7a:76:5c:59:5b:b3:ee:5c:5b:bf:40:2d:c4:f9:9a:
36:e9:e3:be:e7:10:ef:9c:92:e1:b6:1c:b0:13:0c:
20:81:2e:90:10:cd:2e:d0:8b:c3:a5:13:d0:42:cc:
88:75:3c:b3:b9:61:84:31:dd:49:5a:28:e9:3b:80:
07:47:2a:34:ec:b6:f3:7d:86:73:92:3b:28:53:b6:
c7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AE:7B:EA:1F:2C:80:97:AC:D2:BE:14:67:06:DE:55:7B:0E:53:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/085BD9BC210C11F0A56AEA8ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.16.0-45.195.24.255
Signature Algorithm: sha256WithRSAEncryption
5c:3a:fd:7b:fe:04:b8:4d:4b:7c:83:b1:d7:78:b5:ff:cf:a0:
f2:b8:72:e7:2a:4c:00:4b:4d:24:26:04:68:dd:20:a4:64:73:
3a:d1:00:ea:2e:33:55:6d:9c:62:a7:a5:3c:03:e4:11:de:37:
f9:2a:ea:06:ac:f6:a4:d3:f2:63:58:41:23:c8:88:1c:2f:7f:
0e:86:ea:e9:7b:c3:62:6d:61:48:a7:04:bb:be:ef:68:60:40:
7f:85:66:8d:f4:d6:9e:1a:55:73:fa:e9:e4:2b:cd:b2:25:c0:
08:ca:ad:28:72:aa:ba:e3:9e:2b:14:e5:6e:73:e8:0b:a0:a4:
00:22:97:ed:06:5a:db:a7:1f:b3:f6:f1:3c:91:dc:a3:19:1c:
98:fc:95:95:dd:24:b6:ed:ca:d0:50:01:7f:ba:5a:94:89:5e:
5b:0f:75:d8:dc:15:83:47:01:58:88:ac:21:a1:8a:9e:44:d4:
77:3f:e1:8b:c8:3e:ce:67:4a:be:6c:3e:5d:8f:38:af:db:0b:
b3:95:7d:5b:01:e7:fe:30:20:bd:75:c8:3d:20:b9:62:a8:59:
1b:ed:81:7d:71:3d:58:c5:14:a1:c4:c3:a5:87:52:47:4b:36:
7e:f2:3d:f2:3e:18:42:79:10:df:c2:f0:ed:34:3f:81:05:35:
48:01:32:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:40:55 2025 by rpki-client on console.sobornost.net