Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AAE22401CF711F09EDCAFC1DAE4EC9C.roa
File: 2AAE22401CF711F09EDCAFC1DAE4EC9C.roa (raw, json)
Hash identifier: 5JflyGYR5BBYzZXgSeurOEX1TnjoJVvCjo7oLKKk8j4=
Subject key identifier: 41:C2:F1:F1:8D:A9:2A:FE:C2:69:FB:DE:07:10:2F:B8:16:F7:BF:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D6E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AAE22401CF711F09EDCAFC1DAE4EC9C.roa
Signing time: Sat 19 Apr 2025 08:20:35 +0000
ROA not before: Sat 19 Apr 2025 08:20:30 +0000
ROA not after: Sat 17 May 2025 08:20:30 +0000
asID: 36137
IP address blocks: 45.200.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85358 (0x14d6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 19 08:20:30 2025 GMT
Not After : May 17 08:20:30 2025 GMT
Subject: CN=68035cd3-9c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:55:fa:fd:66:9b:59:50:36:cf:cd:1b:94:5c:
eb:64:73:a8:4e:0f:17:f3:23:d5:b9:67:a5:95:a6:
48:ff:6e:62:19:81:94:87:d9:be:e9:66:05:3a:2f:
1a:10:f7:46:52:a6:e2:b8:23:56:d6:13:9f:2a:92:
bf:65:e5:fc:64:46:78:fc:0c:52:60:89:b9:e2:8c:
3a:54:23:c8:de:25:8c:6d:c7:65:69:2a:5c:f3:66:
bd:bc:7a:f0:fe:6f:ec:95:15:fa:40:87:df:da:ae:
b5:7f:57:21:9c:c3:69:c0:32:9d:7d:18:b3:47:1f:
0d:1c:9a:c8:73:ec:28:f8:67:af:67:44:d5:0e:c4:
36:6f:2f:2f:4c:79:db:49:00:b8:fb:0f:6c:25:de:
1b:35:d2:70:ed:77:b1:4c:da:70:51:ed:68:a9:f2:
62:ab:12:37:81:cf:85:43:44:80:44:73:10:c2:e1:
31:67:43:4f:7b:f0:ad:d3:10:6c:21:33:44:c7:cc:
99:db:e2:12:0f:6b:2f:19:7c:33:c8:01:b7:e7:9b:
26:17:34:0e:d5:44:e6:d5:13:9d:67:c9:c7:ea:e6:
40:b6:14:2c:ea:6f:52:e9:91:b4:fa:af:9f:a7:08:
4f:fc:a4:2f:33:8c:b5:8b:be:6a:85:3c:e2:41:e9:
b8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C2:F1:F1:8D:A9:2A:FE:C2:69:FB:DE:07:10:2F:B8:16:F7:BF:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AAE22401CF711F09EDCAFC1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
0a:e9:5e:b3:e1:f4:cf:66:11:95:43:b9:f0:4a:19:ab:22:34:
84:ab:0a:dc:5c:6e:96:c0:a0:6e:7b:d7:cc:b7:72:5b:60:8b:
92:7d:a5:e7:62:3e:43:ca:2c:b2:42:f5:b2:50:f9:9e:27:02:
28:f5:f1:73:f9:0c:d7:30:93:5e:0d:08:01:18:1b:42:c5:fd:
c3:90:a5:65:2f:11:07:7a:50:fb:34:c8:0b:8d:b6:29:6f:05:
94:42:b6:98:e5:5e:c6:40:75:bd:3b:da:ed:82:95:f4:d3:34:
d0:65:ae:53:44:17:cb:ec:61:d9:a6:f5:a4:7c:c6:db:20:f0:
7c:f6:54:0a:91:0a:ac:42:de:98:41:5d:24:b1:bf:3f:e3:f3:
8a:d6:59:85:2f:5b:bb:32:4d:71:eb:b7:db:f8:1f:d3:d2:f1:
e1:f1:ac:c7:d5:c0:83:51:b6:e3:1c:53:a8:7b:28:bc:4b:ac:
67:55:c6:85:5c:5d:2e:33:01:a9:e7:e7:9f:72:f1:27:5b:5d:
9b:cc:f0:c5:69:05:1b:32:e9:56:4c:8d:65:1d:16:c6:16:19:
f5:92:ad:95:f3:a9:02:d6:66:45:33:d5:6a:21:72:d1:cb:19:
d3:3d:43:e0:a8:10:37:f6:60:9e:89:34:30:14:51:a2:e3:c3:
13:3c:c4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:05:32 2025 by rpki-client on console.sobornost.net