Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FBA8EB21E8411F0A18C3DA2DAE4EC9C.roa
File: 1FBA8EB21E8411F0A18C3DA2DAE4EC9C.roa (raw, json)
Hash identifier: V/cJhY4ppPXiaOQv+CjRokeaJrqFUr/emLgWzR45uFo=
Subject key identifier: A7:C7:B6:BB:EC:79:CB:D1:06:BD:33:DA:BB:49:05:10:60:A0:C0:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014DC6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FBA8EB21E8411F0A18C3DA2DAE4EC9C.roa
Signing time: Mon 21 Apr 2025 07:42:07 +0000
ROA not before: Mon 21 Apr 2025 07:42:02 +0000
ROA not after: Wed 31 Dec 2025 07:42:02 +0000
asID: 17561
IP address blocks: 45.201.240.0/23 maxlen: 24
45.201.242.0/23 maxlen: 24
45.201.244.0/23 maxlen: 24
45.201.246.0/23 maxlen: 24
45.201.248.0/23 maxlen: 23
45.201.250.0/23 maxlen: 23
45.201.252.0/23 maxlen: 23
45.201.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85446 (0x14dc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 21 07:42:02 2025 GMT
Not After : Dec 31 07:42:02 2025 GMT
Subject: CN=6805f6cf-d60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:b7:66:36:d1:78:be:02:ae:94:8f:a8:f0:
3c:05:d0:27:f1:48:12:b8:02:b1:5d:8b:78:a6:9a:
88:ad:8a:d8:b4:74:f4:19:3c:a1:84:7f:df:9a:d7:
bf:5f:a5:10:4a:59:f1:c6:98:c3:e0:b3:f6:4f:d5:
34:88:ac:00:e9:30:56:d3:f2:a8:b9:82:bc:47:fb:
e6:fa:22:92:7b:08:20:4f:70:6e:34:2f:df:45:5f:
3d:80:bd:83:61:22:34:6f:fd:14:80:99:ad:49:26:
1c:9f:7c:46:eb:6f:5d:ea:c5:e9:fd:67:0e:be:ae:
d5:61:68:6a:84:9e:fe:2e:0c:29:c7:2a:5e:07:e9:
03:ad:c3:81:1b:ab:47:f9:2d:08:c4:11:42:ce:6a:
a6:74:ca:df:23:08:7e:28:3e:9d:1c:e6:6e:aa:41:
34:96:c6:0e:93:f9:4f:2f:fe:11:94:fc:71:e9:95:
9d:6e:4f:e8:48:33:60:12:ef:d2:1f:cc:79:c8:39:
29:c2:2c:6b:f9:53:56:b9:54:ce:b5:43:d9:35:a1:
76:23:65:c0:76:f9:f6:1f:7e:47:9c:ee:e6:fa:61:
39:3f:ff:fb:13:a0:6d:75:28:86:58:7c:3d:3a:6c:
e5:64:b8:07:9a:23:19:bb:02:7a:d7:5d:ac:80:f5:
eb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C7:B6:BB:EC:79:CB:D1:06:BD:33:DA:BB:49:05:10:60:A0:C0:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FBA8EB21E8411F0A18C3DA2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.240.0/20
Signature Algorithm: sha256WithRSAEncryption
b2:28:02:f8:db:8d:9a:09:34:f1:8a:f1:70:17:3d:47:8d:ee:
14:4b:fd:8c:ed:16:b3:e4:e3:d2:8a:70:a5:d5:7d:3b:18:74:
47:aa:32:a0:24:16:53:31:a2:4a:50:bd:0c:73:a0:3d:6c:e8:
a2:d9:d4:84:b6:4c:77:4e:10:02:e6:48:00:53:08:a9:02:10:
ee:14:ab:98:f2:1a:61:e2:d3:15:be:f8:ad:5b:69:3e:aa:17:
a2:8d:2e:bc:65:28:bc:17:27:09:3b:42:be:53:5f:e7:25:d4:
a0:8d:11:de:fb:1d:4d:d6:45:f0:58:6d:45:19:e4:eb:7e:99:
f9:84:27:d9:f9:3d:ff:e6:de:32:ea:c1:18:88:7c:70:78:68:
7c:48:28:c2:f6:3a:4f:23:c5:87:97:62:1f:8c:44:80:8e:bd:
28:97:a2:6d:1f:83:e7:95:9b:f2:95:3c:03:91:84:88:bc:c5:
e7:08:1b:6a:16:c6:8f:37:e3:27:dd:02:4e:7d:05:b4:af:7b:
4d:2a:c1:bf:76:4d:d0:ba:b9:6f:bc:df:05:40:11:d6:af:8c:
01:55:98:54:c7:78:87:b4:a5:44:13:b9:a2:67:0a:37:03:a6:
03:63:d2:ea:5f:67:44:ca:fb:27:c3:e0:4f:0e:d6:20:88:5b:
cf:01:d7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:05:25 2025 by rpki-client on console.sobornost.net