Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FFB1DFE1CFF11F09BA547F6DAE4EC9C.roa
File: 2FFB1DFE1CFF11F09BA547F6DAE4EC9C.roa (raw, json)
Hash identifier: XpEPTUWF57XQXt1SFr1z60IXbOtJVabBD4s0mrPSIrg=
Subject key identifier: DE:3F:09:D3:05:64:7A:ED:C4:E2:50:86:80:10:37:5F:CF:C1:89:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D88
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FFB1DFE1CFF11F09BA547F6DAE4EC9C.roa
Signing time: Sat 19 Apr 2025 09:18:00 +0000
ROA not before: Sat 19 Apr 2025 09:17:56 +0000
ROA not after: Fri 30 May 2025 09:17:56 +0000
asID: 399195
IP address blocks: 45.192.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85384 (0x14d88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 19 09:17:56 2025 GMT
Not After : May 30 09:17:56 2025 GMT
Subject: CN=68036a48-f501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:44:52:40:73:77:22:2d:0a:50:8b:8a:5d:
2d:2a:27:87:de:4f:31:51:4a:84:be:6f:66:ea:c5:
1b:61:b8:c4:7b:a5:0d:fd:e5:f7:de:f6:2f:25:e9:
42:d8:99:0a:f8:1f:24:6d:ec:63:3f:61:ba:d8:03:
01:78:f2:69:9c:bc:1c:8e:a2:bb:75:8a:ad:9e:cf:
b9:d1:5a:3d:b1:fd:48:53:02:a2:43:f6:c4:c3:82:
05:b6:3d:fa:f0:f8:ad:d8:fd:6b:8c:08:a4:7c:c4:
dc:cc:a2:30:9d:59:cc:40:36:44:b7:64:b3:99:e2:
8e:ad:c7:19:42:92:d2:d4:95:81:1a:62:94:bf:84:
8d:70:92:79:6e:bd:7f:63:a5:65:4d:0c:81:54:35:
76:14:f2:9f:8d:df:e8:bc:45:b3:cf:a8:89:0a:d2:
e1:7b:3e:17:b8:d0:39:ac:87:17:81:7b:6f:d4:b5:
1c:7e:ab:11:ac:41:41:4d:9e:c5:a5:cc:df:2e:2f:
40:00:2d:62:54:d9:5a:5f:5f:fb:ff:38:93:78:8f:
40:d0:35:80:79:25:ef:17:eb:7c:a7:c8:2a:d9:c7:
28:fb:00:32:4b:0b:e1:af:9b:58:b3:b1:74:13:41:
3c:e9:3a:13:1e:65:d8:6a:1f:53:48:84:9a:5c:21:
1c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3F:09:D3:05:64:7A:ED:C4:E2:50:86:80:10:37:5F:CF:C1:89:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FFB1DFE1CFF11F09BA547F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
Signature Algorithm: sha256WithRSAEncryption
11:7c:45:93:35:63:d7:df:b2:6f:5b:4c:a3:ae:8f:f5:14:ce:
fd:8e:16:40:cf:c0:6d:9f:39:41:4f:af:48:2c:57:dc:fc:69:
11:c6:7b:da:92:4d:c1:e8:37:be:fe:06:07:58:8c:e4:bb:6f:
89:82:e6:12:0d:be:58:6f:36:7e:1f:52:aa:2c:50:a8:9d:87:
1e:13:e4:b7:7a:58:80:4c:a8:d5:87:18:b1:c5:86:5b:00:99:
d6:d0:93:35:b4:e1:ba:49:ae:98:81:84:d8:58:a4:0c:b0:af:
e8:53:41:c1:3c:8f:1e:6d:d3:ec:5e:cd:42:33:8a:b9:27:21:
29:01:1b:89:e8:6b:83:6f:d6:dc:be:18:c8:4d:c5:9a:1a:92:
ea:89:48:cb:c4:b5:40:46:dc:f0:c2:f7:9d:a1:b3:84:a0:33:
3c:21:4f:6e:d3:6a:10:c0:0a:7b:ca:a8:d4:b1:cd:d4:8e:e6:
da:c8:dc:07:4d:c9:ca:06:ca:15:fc:c9:a5:17:99:33:14:8b:
20:b1:ab:9a:56:6b:66:c3:41:92:30:95:78:c4:bb:ce:23:8c:
fa:aa:62:82:5e:30:11:50:85:00:cb:51:24:fd:f0:45:1c:1e:
aa:6a:f2:bd:c5:86:48:d7:c8:01:f7:8f:b3:61:af:e0:b9:1e:
5e:c3:11:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:05:35 2025 by rpki-client on console.sobornost.net