Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/199DCA021C7811F0B56C0DE6DAE4EC9C.roa
File: 199DCA021C7811F0B56C0DE6DAE4EC9C.roa (raw, json)
Hash identifier: MDZ4ifTX9YqhdKSzaj91IjsA7Jgx0czy5Jzi9nRjiWQ=
Subject key identifier: 75:29:56:A5:48:7F:19:40:31:37:B8:96:50:67:C2:7C:DC:AB:BE:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D37
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/199DCA021C7811F0B56C0DE6DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 17:11:00 +0000
ROA not before: Fri 18 Apr 2025 17:10:55 +0000
ROA not after: Tue 27 May 2025 17:10:55 +0000
asID: 62240
IP address blocks: 45.192.32.0/24 maxlen: 24
45.192.33.0/24 maxlen: 24
45.192.34.0/24 maxlen: 24
45.192.35.0/24 maxlen: 24
45.192.36.0/24 maxlen: 24
45.192.37.0/24 maxlen: 24
45.192.38.0/24 maxlen: 24
45.192.39.0/24 maxlen: 24
45.192.40.0/24 maxlen: 24
45.192.41.0/24 maxlen: 24
45.192.42.0/24 maxlen: 24
45.192.43.0/24 maxlen: 24
45.192.44.0/24 maxlen: 24
45.192.45.0/24 maxlen: 24
45.192.46.0/24 maxlen: 24
45.192.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85303 (0x14d37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 17:10:55 2025 GMT
Not After : May 27 17:10:55 2025 GMT
Subject: CN=680287a4-99ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:09:bd:bb:58:11:13:78:cb:71:fd:0f:50:
32:03:1e:f0:41:f8:98:c6:ef:6c:30:27:98:99:cd:
5e:e0:14:a3:e6:f2:20:e9:1d:36:90:47:bd:03:10:
1a:20:5b:86:5d:c7:d6:4f:44:5e:52:1d:a5:c3:60:
ec:8c:ff:f1:27:ea:bf:04:04:0e:95:d1:cb:51:59:
2f:34:e7:f8:26:58:4f:25:73:41:90:74:78:3c:0e:
d4:41:5d:47:d4:2a:75:86:e3:bf:eb:09:b0:49:1f:
46:aa:4b:6b:20:a3:34:90:a4:d3:17:84:c4:a6:21:
dc:7d:89:ef:4c:19:c3:8f:ca:48:56:de:ec:2f:43:
95:a8:3f:5f:1e:49:c2:a1:b9:6d:b1:f2:80:5b:c9:
39:fb:df:00:e4:7b:8a:2f:4e:4b:48:42:06:a0:a2:
1a:d5:19:71:6e:80:f2:f9:97:27:48:e7:45:c0:0b:
f6:c5:8c:61:87:44:65:7a:fa:77:99:1f:6e:07:64:
ee:91:41:c3:cd:58:99:34:67:ac:e0:19:71:d1:f0:
fc:b7:bd:62:0b:38:2b:ba:69:92:f0:dc:de:a7:6d:
47:50:cc:2a:5e:88:48:f7:e3:94:1d:ac:c8:07:0c:
e8:22:27:5f:0d:8d:2a:d2:c1:b7:63:f9:67:aa:8e:
98:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:29:56:A5:48:7F:19:40:31:37:B8:96:50:67:C2:7C:DC:AB:BE:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/199DCA021C7811F0B56C0DE6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.32.0/20
Signature Algorithm: sha256WithRSAEncryption
6c:c8:e7:49:cb:8d:cc:a1:ba:87:71:b0:03:fd:0a:fe:37:50:
36:65:42:03:47:58:e9:5b:a9:53:87:b8:1e:f2:41:46:db:47:
e5:3b:b1:57:db:b6:5b:c7:ba:37:fa:56:92:68:ff:9e:ff:62:
8a:fd:e5:ed:40:08:84:bd:15:f5:68:c3:1c:60:20:60:c1:2d:
d0:3e:69:f3:fa:5d:c4:00:b8:ca:60:4b:3f:04:b1:d2:7b:9e:
51:17:f4:12:66:17:a7:b8:ac:1c:97:2d:6f:ce:df:69:bb:3b:
3b:ba:b8:fa:d7:51:62:87:6f:7c:d1:38:3d:0d:11:5e:d8:9e:
13:60:e4:12:16:7f:fd:e4:f9:d4:f6:dc:df:6b:ef:f9:cc:63:
71:12:ba:ce:a6:5a:52:a6:95:97:6b:72:00:3b:82:09:b6:eb:
fe:2b:ad:dc:cd:59:ee:34:82:43:10:39:b5:65:5a:a9:d7:79:
24:fc:a9:02:a4:3a:e1:ab:65:c8:43:03:c7:eb:51:62:5b:5b:
c5:f6:d0:31:ac:a3:d7:05:e2:59:9f:a8:a5:83:8c:8c:29:fc:
02:55:e8:e5:22:f9:c9:cf:e8:ae:3a:27:77:9a:16:e0:48:6e:
e7:6e:36:79:42:d4:1a:28:0a:e4:fe:d2:8e:3c:d1:f1:f6:4b:
1b:92:b1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:05:46 2025 by rpki-client on console.sobornost.net