Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15420C141CFC11F0943664E2DAE4EC9C.roa
File: 15420C141CFC11F0943664E2DAE4EC9C.roa (raw, json)
Hash identifier: ovniA3bYliD9MBHidUqgp3ttdBaI7ONRBsHAmRoMm0s=
Subject key identifier: 7F:6F:0F:F8:68:12:6D:49:B2:8B:22:AE:45:6A:35:F7:2D:FC:C5:83
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D7C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15420C141CFC11F0943664E2DAE4EC9C.roa
Signing time: Sat 19 Apr 2025 08:55:47 +0000
ROA not before: Sat 19 Apr 2025 08:55:42 +0000
ROA not after: Mon 26 May 2025 08:55:42 +0000
asID: 395793
IP address blocks: 45.198.183.0/24 maxlen: 24
45.198.184.0/24 maxlen: 24
45.206.65.0/24 maxlen: 24
45.206.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85372 (0x14d7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 19 08:55:42 2025 GMT
Not After : May 26 08:55:42 2025 GMT
Subject: CN=68036512-2e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ca:20:65:8c:88:87:89:dc:4d:63:c0:9b:8a:
96:93:90:0e:a0:60:b5:fc:62:f0:d1:c8:85:a0:ca:
3f:3b:af:ce:47:77:c3:16:90:13:ce:41:b3:c3:bc:
02:d0:59:91:99:ab:c9:d4:20:da:a6:b4:55:7a:dd:
49:46:79:6f:f3:36:09:78:11:52:f1:cc:a7:1f:4e:
ea:be:10:be:21:29:38:85:f2:95:1c:f9:59:78:8c:
ab:4d:e9:85:ae:52:79:8f:35:ab:86:87:86:b2:d3:
60:7b:a0:6a:ed:48:46:1e:87:e0:dd:8f:0a:ee:60:
4c:99:70:9b:f9:13:c9:ca:46:01:07:aa:4f:9e:d0:
89:ca:4a:36:c8:3a:97:1b:14:53:1b:55:64:53:bd:
d6:04:39:12:57:29:59:f3:5a:67:75:6e:f5:4f:fa:
c3:fa:99:3a:79:29:4b:65:c4:ea:fb:11:4f:a4:4a:
3a:7b:14:9c:90:af:9e:e4:34:3a:6e:87:bb:f7:a2:
87:26:5d:aa:7b:a3:e7:66:57:d5:aa:78:3f:8c:86:
52:b3:9f:6d:be:b6:05:07:1c:8f:7d:56:b5:64:23:
18:b2:8d:92:0e:3f:20:d8:9e:79:e8:3b:1e:61:51:
c1:77:c0:ce:e1:7b:7a:f5:03:bc:bc:66:a1:f4:f5:
ef:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6F:0F:F8:68:12:6D:49:B2:8B:22:AE:45:6A:35:F7:2D:FC:C5:83
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15420C141CFC11F0943664E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.183.0-45.198.184.255
45.206.65.0-45.206.66.255
Signature Algorithm: sha256WithRSAEncryption
b9:f6:f0:3f:52:69:9b:a6:90:7d:23:6a:be:04:2c:76:2e:73:
b7:53:56:a8:20:cc:5c:e3:6d:bc:92:c2:d7:37:bb:44:78:10:
f1:df:53:b4:2a:8a:ff:4c:ed:22:5e:c4:0c:37:ba:54:11:7a:
91:9c:2f:b0:49:98:cb:44:50:a4:16:f0:5a:b8:eb:01:7d:dc:
47:10:a9:dd:af:0c:a9:6a:cc:bd:3f:4b:32:f1:7f:6d:7b:8f:
31:c9:c6:81:0a:82:2a:06:53:fe:d6:44:f7:6e:52:f6:56:48:
e7:ba:84:ee:8c:b0:e8:1f:40:a2:2a:58:fd:e5:cc:7e:ab:bb:
37:ca:68:6f:e3:8f:c0:41:56:1d:01:f5:f6:74:95:c4:1e:96:
20:c2:a9:bc:6c:de:df:76:16:e0:58:28:82:d1:2c:12:71:3f:
20:92:cc:7b:b2:d9:c8:a0:b6:18:00:36:ea:ad:e0:54:2b:00:
ec:d8:c8:a4:43:86:22:e1:b6:84:ba:16:b2:fc:5f:80:0d:2e:
86:e9:c3:c6:d7:2d:80:96:bb:fc:d3:9a:0b:d2:ef:a7:e7:bf:
79:ca:45:9d:89:2d:50:86:96:7d:d4:ef:88:34:ec:38:96:f4:
1d:96:fb:c9:c7:46:54:74:bf:f6:b0:30:2c:06:76:5d:ac:94:
04:c2:e4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:05:19 2025 by rpki-client on console.sobornost.net